Privacy Policy

1. Who we are

Ambicast is a cloud-based digital-signage platform operated by Ambigroup Services Ltd (Company No. [to be added]), registered in England and Wales at [Registered office address, United Kingdom]. For the personal data described in this policy, Ambigroup Services Ltd is the data controller. Our platform is accessible at https://app.ambicast.tv. For any privacy-related questions, contact privacy@ambicast.tv.

2. What information we collect

• Account information — your name, email address and password (stored only in hashed form) when you register.
• Billing information — subscription plan and payment records. Card details are handled directly by Stripe; we do not store full card numbers.
• Screen data — pairing codes, screen names, device type, screen resolution and playback logs associated with your account.
• Usage data — which playlists play, when and for how long, used for analytics within your dashboard.
• Device information — technical identifiers (OS, browser, screen dimensions) collected when a screen is paired, to aid compatibility and troubleshooting.
• Media files — images and videos you upload, stored securely in Amazon S3.

3. How we use your information

• Provide and operate the Ambicast service.
• Authenticate your account and secure your screens.
• Deliver content to your paired screens.
• Generate playback reports visible only to you.
• Process payments and manage your subscription.
• Send transactional emails (account confirmation, password reset, billing and service alerts).

We do not sell your data to third parties, and we do not use your data for advertising.

4. Legal bases for processing

Under UK GDPR we rely on: contract (to provide the Service you sign up for); legitimate interests (to secure, maintain and improve the Service, and to communicate with you about it); legal obligation (for example, keeping accounting records); and consent where required (for example, certain non-essential cookies). You can withdraw consent at any time.

5. Data storage and security

All data is stored on AWS infrastructure in the AWS eu-west-2 (London) region. We use HTTPS for all data in transit. Passwords are never stored in plain text. Media files are stored in private S3 buckets accessible only via time-limited signed URLs. We apply access controls and monitoring appropriate to the sensitivity of the data.

6. Third-party services (processors)

We use trusted providers to operate Ambicast — including AWS (infrastructure, database, storage, authentication), Stripe (payments), Resend (transactional email), Sentry (error monitoring) and Google Fonts (font rendering). Each processes data only as needed to provide their service. The full list is on our Sub-processors page.

7. International transfers

Your primary data is hosted in the UK. Some processors listed above may process limited data outside the UK/EEA (for example, in the United States). Where they do, we rely on appropriate safeguards such as UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision.

8. Cookies and local storage

We use browser storage to keep you signed in, remember your preferences and record your cookie choices. We do not use third-party advertising or cross-site tracking cookies. See our Cookie Policy for the full list.

9. Data retention

We retain your account data for as long as your account is active. Playback logs are retained for 12 months. If you close your account, associated personal data is deleted within 30 days, except where we must keep certain records (for example, billing records for tax purposes) for longer.

10. Your rights

Under UK GDPR and applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email privacy@ambicast.tv. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

11. Children

Ambicast is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. We will notify registered users by email of any material changes. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact

For any questions about this Privacy Policy or your data, contact privacy@ambicast.tv, or write to Ambigroup Services Ltd, [Registered office address, United Kingdom].