Privacy Policy (DRAFT)

This draft explains what [Legal entity name: to be confirmed] collects when you use Pekko, why, and your choices.

What we collect

• Account details: your email address, business name, optional display name, and a securely hashed password.
• Your content: images and videos you upload, menu boards, brand settings, playlists, schedules, promotions, locations and screen names.
• Screen information: for each paired screen, when it last checked in, what it reported playing, playback errors, and a secret device token (stored only as a hash).
• Usage records: a log of changes in your account (for example a playlist published) and screen uptime, used for your Analytics page. We also record a few plan milestones (for example trial started, first screen paired, plan changed) with plan names and counts only, to understand how the product is used. We use no third-party analytics or advertising trackers.
• Mobile app: if you use the Pekko app and allow notifications, a push notification token for your device.
• Plan and billing: your plan, trial dates and subscription status. When paid plans launch, payment details will be handled by Stripe; we will not store card numbers.
• Technical logs: IP addresses and request details kept briefly by our hosting providers for security, rate limiting and troubleshooting.

How we use it

To run the Service: sign you in, store and deliver your content to your screens, show screen status, send account emails and screen alerts, prevent abuse, and fix problems. We do not sell your personal information or use your content for advertising.

Service providers

• Supabase: database, sign-in and file storage.
• Vercel: website and API hosting.
• Google Firebase Cloud Messaging: delivering push notifications to the mobile app.
• Stripe (planned): payments, once paid plans launch.

[Email provider and data regions to be confirmed.]

Security

Each account's data is isolated from other accounts, media is served through short-lived signed links, and connections are encrypted.

Retention and deletion

We keep your data while your account is open. Usage records and alerts are removed after 90 days. When a trial or plan ends, screens pause but your content is not deleted.

The account owner can request deletion in Settings or at /account-deletion. Deletion runs 7 days after the request (it can be canceled until then) and removes the account, sign-in, content and records listed there. What is kept, and for how long, is listed on that page. [Backup and billing-record retention periods to be confirmed.]

Your rights

You can view and update your account details in Settings, and delete your account as described above. [Add jurisdiction-specific rights, e.g. CCPA/GDPR, as counsel advises.]

Children

Pekko is for businesses and is not directed to children under 13.

Contact

[Privacy contact email and business address to be added.]