1. Introduction

Sky Viona ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud-based digital signage platform, including our website, web applications, mobile applications, and connected display devices (collectively, the "Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our Service.

2. Information We Collect

We collect information in several ways depending on how you interact with our Service. The types of information we collect include:

2.1 Personal Information You Provide

When you register for an account, subscribe to our Service, or contact us, you may provide us with:

Account information: name, email address, company name, job title, phone number, and password
Billing information: payment card details, billing address, and transaction history (payment processing is handled securely by our third-party payment providers)
Communications: messages you send to our support team, feedback, survey responses, and correspondence
Content: images, videos, text, and other media you upload to create and manage your digital signage displays

2.2 Device and Display Information

When you connect displays to our platform, we automatically collect:

Device identifiers: unique identifiers assigned to your connected displays and media players
Device status: online/offline status, last connection time, and health metrics
Hardware information: device model, operating system version, screen resolution, and storage capacity
Network information: IP address, network type, and connection quality

2.3 Analytics and Usage Data

To provide our analytics features and improve our Service, we collect:

Playback statistics: which content is displayed, playback duration, and scheduling data
Content performance: views, impressions, and engagement metrics for your digital signage content
Audience measurement: if enabled, anonymized and aggregated data about viewers such as attention time and traffic patterns
Engagement tracking: interactions with interactive displays, QR code scans, and touch events
Website usage: pages visited, features used, time spent, clicks, and navigation patterns within our web application

2.4 Information from Third Parties

We may receive information about you from third parties:

Payment processors: transaction confirmations and fraud prevention data
Authentication providers: if you sign in using Google, Microsoft, or other single sign-on services
Business partners: referral information if you were referred by a partner

3. How We Use Your Information

We use the information we collect for the following purposes:

Service delivery: to provide, operate, and maintain our digital signage platform and deliver content to your displays
Analytics and reporting: to generate insights, reports, and analytics about your content performance and audience engagement
Billing and payments: to process transactions, manage subscriptions, and send invoices
Customer support: to respond to your inquiries, troubleshoot issues, and provide technical assistance
Service improvements: to analyze usage patterns, develop new features, and enhance user experience
Communications: to send you service updates, security alerts, technical notices, and marketing communications (with your consent where required)
Security: to detect, prevent, and address fraud, unauthorized access, and other security issues
Legal compliance: to comply with applicable laws, regulations, and legal processes

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

Contract performance: processing necessary to provide you with the Service and fulfill our contractual obligations
Legitimate interests: processing for our legitimate business interests, such as improving our Service, preventing fraud, and marketing (where not overridden by your rights)
Consent: where you have given explicit consent for specific processing activities, such as marketing communications or optional analytics
Legal obligations: processing necessary to comply with legal requirements

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our Service:

Cloud infrastructure: hosting and data storage providers (such as Amazon Web Services, Google Cloud)
Payment processor: Stripe processes all payment transactions. Your payment card details are sent directly to Stripe and are tokenized for security—we never store your full card number on our servers. Stripe is PCI-DSS Level 1 compliant. For more information, see Stripe's Privacy Policy
Analytics providers: services that help us understand usage patterns and improve our platform
Communication tools: email delivery and customer support platforms

These providers are contractually obligated to protect your information and may only use it to provide services to us.

5.2 Other Disclosures

We may also disclose your information:

Legal requirements: when required by law, court order, or governmental authority
Protection of rights: to protect our rights, privacy, safety, or property, or that of our users or the public
Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, with appropriate confidentiality protections
With your consent: when you have given us explicit permission to share your information

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data from the EEA, UK, or Switzerland to other countries, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses: EU-approved contractual terms that provide adequate protection
Adequacy decisions: transfers to countries deemed to provide adequate data protection
Other lawful mechanisms: as permitted under applicable data protection laws

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account data: retained while your account is active and for a reasonable period afterward to allow for account recovery or reactivation
Content: retained while your account is active; you may delete content at any time through the platform
Analytics data: aggregated analytics are retained for up to 24 months; detailed logs are retained for shorter periods
Billing records: retained as required for tax and accounting purposes (typically 7 years)
After account termination: we will delete or anonymize your personal data within 90 days, except where retention is required by law

8. Your Rights and Choices

8.1 All Users

Regardless of your location, you have the right to:

Access your data: view the personal information we hold about you through your account settings
Update your information: correct or update your account details at any time
Delete your account: request deletion of your account and associated data
Opt-out of marketing: unsubscribe from marketing emails using the link provided in each email
Export your data: download your content and account information

8.2 European Economic Area (GDPR Rights)

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation:

Right to access: obtain confirmation of whether we process your data and receive a copy
Right to rectification: have inaccurate data corrected
Right to erasure: request deletion of your personal data in certain circumstances
Right to restrict processing: limit how we use your data in certain situations
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: not be subject to decisions based solely on automated processing
Right to withdraw consent: withdraw consent at any time where processing is based on consent
Right to lodge a complaint: file a complaint with your local data protection supervisory authority

8.3 California Residents (CCPA Rights)

If you are a California resident, the California Consumer Privacy Act provides you with specific rights:

Right to know: request information about the categories and specific pieces of personal information we have collected
Right to delete: request deletion of your personal information
Right to opt-out: we do not sell personal information, so this right does not apply
Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your interactions with our Service. These include:

Essential cookies: necessary for the Service to function properly (authentication, security, preferences)
Analytics cookies: help us understand how users interact with our platform
Functional cookies: remember your preferences and settings

You can manage your cookie preferences through your browser settings or our cookie consent tool. For more detailed information, please see our Cookie Policy.

10. Data Security

We implement industry-standard security measures to protect your personal information, including:

Encryption: data is encrypted in transit (TLS/SSL) and at rest (AES-256)
Access controls: strict access controls and authentication requirements for our systems
Infrastructure security: secure cloud infrastructure with regular security audits and monitoring
Employee training: regular security awareness training for our team
Incident response: established procedures for detecting, reporting, and responding to security incidents

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

11. Children's Privacy

Our Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 16, we will promptly delete that information.

12. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:

We will update the "Last Updated" date at the top of this policy
For material changes, we will notify you by email or through a prominent notice on our Service
Your continued use of the Service after changes become effective constitutes your acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@skyviona.com
General inquiries: hello@skyviona.com
Website: https://skyviona.com/contact
Address: 123 Digital Street, Tech City, TC 12345

Data Protection Officer: For GDPR-related inquiries or to exercise your data protection rights, you may contact our Data Protection Officer at dpo@skyviona.com.

We aim to respond to all legitimate requests within 30 days. If your request is particularly complex or you have made multiple requests, we may need additional time and will notify you accordingly.

15. Related Policies

Please review our other policies that govern your use of our Service:

Terms of Service - The terms and conditions for using our platform
Refund Policy - Our policies regarding refunds and cancellations
Cookie Policy - How we use cookies and similar technologies