1Introduction
This Privacy Policy explains how BraSigns ("BraSigns", "we", "us", or "our") collects, uses, stores, protects, and handles information when you use our digital signage services, including:
- The BraSigns web management platform (CMS)
- The BraSigns Android Player application
- Android TV and Google TV certified media displays
- Commercial signage sticks & Fire TV devices running the Player
BraSigns is an enterprise B2B digital signage cloud platform. Our systems are designed specifically for commercial and organisational displays (e.g. corporate lobbies, hotels, airports, bank branches, healthcare clinics, and retail stores), not consumer entertainment tracking.
2Information We Collect
We collect only the minimum operational information necessary to deliver, authenticate, pair, schedule, and maintain digital signage broadcasts on connected displays.
A. Account & Administrative Information
When administrators and team members register or manage an organisation on BraSigns, we collect:
- Full name and account email address
- Organisation name, account role, and tenant membership
- Securely hashed passwords (via bcrypt; plaintext passwords are never stored)
- Session timestamps, last login timestamps, and account status (active/disabled)
B. Screen & Device Telemetry (BraSigns Android Player)
To link a commercial display and monitor screen health remotely, the BraSigns Android Player transmits strictly technical hardware diagnostics:
- Screen ID & Device Key: Unique randomized cryptographic identifiers (
dev_key_...) used to authenticate API payloads - Pairing PINs: Ephemeral 6-digit codes used during 60-second screen claiming
- Hardware & OS Telemetry: Device model, operating system version, screen resolution (e.g. 1920x1080, 3840x2160), display orientation (Landscape/Portrait), and BraSigns Player app version
- Operational Health: Heartbeat timestamp (every 30 seconds), online/offline connectivity state, local free storage capacity (MB), CPU/memory load metrics, and device temperature (where supported by hardware sensors)
- Network Identity: Local IP address and MAC address reported for network fleet identification and firewall whitelisting by corporate IT departments
C. Content & Layout Configuration
Digital media assets, video URLs, playlist orders, dayparting schedules, multi-zone canvas coordinates, and content source settings configured by your administrators to be broadcasted to screens.
D. System Audit & Error Logs
System access events, role updates, pairing attempts, rate-limiting violations, API latency statistics, and error tracebacks for security auditing and platform reliability.
3How We Use Information
Information collected by BraSigns is processed strictly to perform essential business functions:
4How the BraSigns Android Player Works
The BraSigns Android Player is engineered exclusively to display assigned digital signage content on compatible Android-based commercial displays, Google TVs, and media sticks.
Upon initial launch, the Player contacts the BraSigns cloud API to request a temporary 6-digit pairing PIN displayed on screen. Once an administrator claims the screen from the BraSigns web console, the server provisions a unique, hardware-scoped X-Device-Key.
The Player then periodically downloads its assigned playlist and media assets to the device's local storage so playback continues uninterrupted even during internet outages. The Player communicates back only its heartbeat status, current playback state, and hardware health.
The Player operates in dedicated kiosk/signage mode and does not access other personal applications, personal files, or private user accounts residing on the device.
5Data Sharing & Third-Party Services
We share data only with verified cloud infrastructure providers required to operate the platform:
6Third-Party Content Sources & Widgets
BraSigns allows organisations to embed third-party services into playlists (such as Google Slides, Google Sheets, Google Calendar, YouTube video streams, Open-Meteo weather forecasts, RSS news feeds, or custom intranet URLs).
When you configure an external integration, the display device fetches public or authenticated content directly from that provider according to your settings. Third-party content providers operate under their own independent terms of service and privacy policies, and BraSigns is not responsible for external services' data collection practices.
7Data Security
We use reasonable technical, administrative, and organisational measures designed to protect information against unauthorised access, alteration, disclosure, or destruction. These include:
- Mandatory HTTPS / TLS 1.3 encryption across all public web and player API transmissions
- Hardware device key masking on administrative web consoles
- Role-Based Access Control (RBAC) separating Super Admin, Org Admin, and User capabilities
- Sliding-window IP rate limiting on screen pairing and authentication endpoints
- Tenant-isolated database queries enforcing strict customer data separation
While we apply stringent security controls, no internet-connected platform can guarantee absolute immunity from security risks.
8Account & Data Deletion
You retain the right to request deletion of your BraSigns user account and associated personal data at any time. We provide an accessible, dedicated web deletion mechanism:
BraSigns Data Deletion Portal
Submit a formal account deletion request without requiring an active session.
Upon verified processing of your request, your personal user record, profile metadata, and authentication credentials will be deleted. Certain administrative audit records or billing invoices may be retained where required by law, taxation regulations, or dispute resolution.
9Children's Privacy
BraSigns is an enterprise B2B platform intended for business operations and professional digital signage management. Our services are not directed toward children under 13 (or under 16 in applicable jurisdictions), and we do not knowingly collect personal information from children.
10Questions & Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to our privacy officer and support team: