Privacy Policy

1. Who we are

In short: We run Displayte. For your account we decide how data is used; for your church’s files, your church does, and we follow its instructions.

Displayte, a sole proprietorship (“Displayte,” “we,” “us”) provides the website at displayte.com, the web app at app.displayte.com and the Displayte app for Apple TV (together, the “Service”). This policy explains how we handle personal data about people who visit our website, use the Service, or contact us.

For the data described here, we are the “controller” (the one deciding why and how it’s used). The pictures, videos and other content a church puts into Displayte are different: we process any personal data in them only on that church’s behalf and on its instructions, as a “processor,” under our Data Processing Addendum. If you’re pictured in a church’s content and want it changed, the church can do that; you can also ask us and we’ll pass your request to the church.

2. What we collect

In short: Your name and email, your church’s details, what the TVs report about themselves, basic technical logs, and anything you send us. Never your card number.

You give us

Account details: your name and email address, and your profile picture if your sign-in provider supplies one. Your password is handled by our sign-in provider, Auth0; we never see it.
Your church’s details: its name, address and time zone, and the people in it with their roles (and each person’s role at the church, if they give it).
Invitations: the email address of anyone your church invites, and who invited them.
Activity in the Service: what you add and change, and when, so your church can see it (for example, “Added by Sarah · Mar 18”).
Billing details: your church’s billing email, plan, number of screens, invoices and payment status. Card details go straight to our payment processor, Stripe; we never see or store your full card number.
Messages: what you send us by email, and our replies.

We collect automatically

From the Apple TV app: the TV’s name in your church, when it was added and last connected, the versions of our app and of tvOS, what it’s playing, and errors it reports (such as a file that wouldn’t play). We don’t collect anything about the people watching.
Technical logs: the IP address, browser or device type, the page or address requested, and the time, recorded by our servers and our hosting providers to run and secure the Service.
Error reports: when something breaks, a report of what failed, with passwords, sign-in tokens and cookies removed before it’s sent.
Website analytics: on displayte.com, Cloudflare Web Analytics counts page views and visits, and how fast pages load, by the page, the site you came from, your country, and your device type, browser and operating system. It uses no cookies, and it doesn’t identify you or follow you to other websites. It’s never used in the web app. See our Cookie Policy.

We don’t knowingly collect sensitive data such as health information, religious beliefs linked to a named person, or government ID numbers, and we ask you not to put them in the Service.

3. How we use it

In short: To run Displayte, keep it secure, bill for it, help you, and improve it. Not to advertise to you, and never to sell your data.

To provide the Service: sign you in, show your church its screens, files and people, and send what each TV should play.
To keep it secure: detect and stop abuse, stolen sign-ins and copied TV credentials, and protect every church’s data.
To bill your church and keep financial records.
To send you messages you need: invitations, sign-in emails, security alerts, renewal reminders, and notices about changes to the Service or these policies.
To answer you when you write to us.
To understand and improve the Service, using information about how it’s used that doesn’t identify you.
To meet legal obligations and enforce our terms.

We don’t sell personal data, share it for cross-context behavioral advertising, or use it to train artificial-intelligence models. We don’t send marketing email without your consent, and every marketing email has a way to unsubscribe.

When support looks at your account. To help a church, and to check that Displayte works as it should, Displayte support can view a church’s account: its files and folders, its presentations, its TVs and what they’re showing, and its people. Support can only look, never change anything, and every view is recorded.

4. Legal bases

If you’re in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

Contract: to provide the Service to you and your church, and to bill for it.
Legitimate interests: to secure the Service, prevent fraud, answer you, improve the Service, and count visits to our website. We balance these interests against your rights, and you can object (section 10).
Consent: for marketing email. You can withdraw it at any time.
Legal obligation: to keep financial records and respond to lawful requests.

In short: With the companies that help us run Displayte, with the people in your church, and when the law requires it. That’s all.

Service providers (“subprocessors”) that host, store, secure or support the Service, each under a contract that limits them to working for us. They’re listed on our Subprocessors page.
Google, for address suggestions: while you type your church’s address, what you’ve typed is sent to Google Maps to suggest matching addresses. We send only that text, never your name or email address. Google’s use of it is covered by the Google Privacy Policy.
People in your church: members of a church can see each other’s names and roles, and who added a file or changed a screen. Owners and admins can see members’ email addresses.
For legal reasons: when we believe in good faith that the law requires it, or that it’s necessary to protect someone’s safety, the Service, or our rights. Where the law allows, we tell the church or person concerned first.
If Displayte changes hands: if we’re involved in a merger, acquisition or sale of assets, personal data may transfer as part of it. The new owner must honor this policy, and we’ll tell you before your data becomes subject to a different one.

6. Cookies and analytics

We use only the cookies needed to sign you in and remember your settings. Our Cookie Policy lists each one. Our website analytics on displayte.com uses no cookies.

Do Not Track and Global Privacy Control. Nothing in the Service tracks you across other websites, and our website analytics sets no cookies and doesn’t identify you, whether or not your browser sends these signals.

7. How long we keep it

In short: If your church’s plan ends, we keep its files for 30 days in case you come back, then delete them for good. Your account, team, presentations and records stay until you ask us to delete them. A few records we must keep longer.

Your church’s files (pictures and videos): while its plan is active. If the plan ends, we keep them for 30 days in case you come back, then delete them for good, including every copy we made for your screens.
Your church’s account and records (the church, its team, its TVs, its presentations and their history): kept after a plan ends, so you can start again, until you ask us to delete them.
Deleting your church: if you delete your church, we keep it for 7 days in case it was a mistake, then permanently delete its files, presentations, screens, team and records. We keep only anonymous totals, like how many screens and files it had. People on your team who aren’t in another church keep their sign-in, but not their Displayte profile. We keep our payment records (at Stripe, our payment processor) as tax law requires. Deleted data can stay in our encrypted backups for up to 7 more days.
Files moved to the trash: deleted permanently 30 days after they’re moved there.
Uploads that never finished: the partial file is deleted within 24 hours; the Library shows that it didn’t finish until someone removes it.
Deleting your account: when you delete your account, we delete your name, email and picture and remove you from every church at once, and your sign-in within 7 days. What you made for a church stays with that church. Copies in our backups are gone within 7 more days.
Backups: deleted data can remain in our encrypted database backups for up to 7 days, until those backups expire.
Technical logs and error reports: up to 90 days.
Billing records: for 7 years, as tax law requires.
Emails with us: for 3 years after the conversation ends, unless you ask us to delete them sooner.
Emails we send: Resend, our email processor, keeps its sending logs (the recipient and the message) for 30 days.
Website analytics: Cloudflare keeps only counts (visits, pages, countries, devices), which don’t identify anyone.

8. Security

We protect personal data with measures that fit the risk: encryption in transit and at rest; strict separation of every church’s data, enforced in the database itself; private storage that’s reached only through short-lived signed links; sign-in through a dedicated identity provider with multi-factor authentication for our staff; and credentials for each TV that can be withdrawn at any time. Our Security page describes these in more detail. No system is perfectly secure, so if we learn of a breach affecting your personal data, we’ll tell you and the authorities as the law requires.

9. Where it’s stored

Displayte is run from the United States, and our database is in the United States. Some providers process data in other countries, as our Subprocessors page shows. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and the UK and Swiss equivalents), or on the recipient’s certification under the EU-US Data Privacy Framework.

10. Your rights

In short: You can see, correct, download or delete your data, and object to how we use it. Email us and a person will answer within 30 days.

Depending on where you live, you may have the right to:

know what personal data we hold about you, and get a copy of it in a portable format;
correct it if it’s wrong (you can change your name in the Service yourself);
have it deleted;
restrict or object to how we use it, including for direct marketing; and
withdraw consent you’ve given, without affecting what we did before.

To use any of these rights, email support@displayte.com. We’ll confirm your identity (usually by replying to the address on your account), answer within 30 days, and won’t treat you differently for asking. You can ask someone to act for you; we’ll ask them for proof that they may. If you’re in the EEA, the UK or Switzerland, you also have the right to complain to your data protection authority, though we’d like the chance to help first.

For personal data in a church’s content, the church decides what happens to it; send your request to the church, or to us and we’ll pass it on.

11. California residents

In the last 12 months we have collected these categories of personal information, for the purposes in section 3, and disclosed them to the service providers in section 5: identifiers (name, email address, IP address); commercial information (plan and billing history); internet or other electronic network activity (logs); and approximate geolocation (from IP address). We have not sold personal information, or shared it for cross-context behavioral advertising, and we don’t use sensitive personal information to infer characteristics about anyone. California residents have the rights described in section 10, including to know, delete and correct; to use them, email support@displayte.com.

Under California’s “Shine the Light” law, you can ask us whether we’ve shared personal information with third parties for their own direct marketing; we haven’t.

12. Children

The Service isn’t directed to children under 13, and we don’t knowingly collect personal data from them. A person must be at least 13 to have a Displayte login. Churches may put pictures of children in their content (for example, for a kids’ ministry), and are responsible for having the consent the law requires. If you believe a child under 13 has given us personal data, email support@displayte.com and we’ll delete it.

13. Changes

We’ll update this policy when our practices change. If a change is material, we’ll email account owners and show a notice in the Service before it takes effect. The date at the top of this page shows when it last changed.

14. Contact

Displayte. Privacy questions and requests: support@displayte.com. Security problems: support@displayte.com.