Privacy Policy

01Who we are & what this covers

Keryka Systems provides digital signage software. This Privacy Policy applies to all Keryka products and services, together referred to as the "Service":

• the Keryka web platform and SaaS console available at keryka.com and its subdomains;
• the "Keryka Digital Signage" app for Shopify, distributed through the Shopify App Store;
• the "Keryka Digital Signage" Android application (package name com.keryka.player), distributed through Google Play, including builds for Android TV and Google TV;
• every other Keryka player or companion application, including the web player and players for Raspberry Pi and similar devices.

The Service is intended for business use. Our customers ("you") are merchants, businesses, and organizations that manage screens. This policy covers the information we handle about you, your team members, and the devices you connect. Keryka's screens are one-way displays: our player applications do not collect personal information from the people who view your screens — no cameras, no microphones, no audience tracking.

02Information we collect

Account and contact data

When you create an account, install one of our apps, or contact us, we collect the information you provide: name, email address, business name, and the content of your messages to us.

Device and player data

To pair, manage, and monitor your screens, we collect technical data from connected player devices: device model and manufacturer, operating system version, app version, screen resolution and orientation, a device identifier and pairing code generated by Keryka, IP address, network connectivity status, and playback and diagnostic logs (what was scheduled to play, when, playback errors, and uptime).

Usage and log data

When you use the SaaS console or visit our websites, we collect standard log information: IP address, browser type, pages viewed, and timestamps, used for security and to operate the Service.

Billing data

Payments are processed by our distribution platforms (for the Shopify app, by Shopify's billing system). We receive subscription status and plan information; we never receive or store your full payment card details.

03The Android player app (com.keryka.player)

This section describes the "Keryka Digital Signage" Android app, published on Google Play under the package name com.keryka.player, and applies equally to our other player apps.

The player app collects only the technical data needed to operate your signage:

• a Keryka-generated device identifier and pairing code, used to link the device to your account;
• device information: model, manufacturer, OS version, app version, screen resolution and orientation;
• IP address and network status, used to deliver content instructions and show device health in your console;
• playback and diagnostic logs: scheduled content, playback events, errors, and crash diagnostics, used to keep your screens running and to fix problems.

The player app does not collect: precise location, contacts, photos, SMS, call logs, camera or microphone data, or advertising identifiers. It contains no advertising and no third-party advertising or tracking SDKs. It does not collect any personal information from people viewing the screen.

Data collected by the player app is transmitted over encrypted connections (HTTPS/TLS), is used solely to provide the Service as described in this policy, and is never sold. You can delete a device's data by removing the device from your Keryka console, and you can request deletion of your account and all associated data at any time — see Data retention & deletion and Contact us.

04The Shopify app

When you install the "Keryka Digital Signage" app from the Shopify App Store, we access your store's data through Shopify's APIs, limited to the access scopes you approve at installation. This typically includes your store profile (store name, domain, contact email, currency) and the product, collection, price, and inventory data needed to render your signage content.

We use this data only to provide the Service — for example, showing your products, prices, and promotions on your screens. We do not request access to your customers' personal information, and we do not use your store data for advertising or sell it to anyone.

For store data processed on your behalf, you are the data controller and Keryka acts as your processor / service provider. We comply with Shopify's mandatory privacy webhooks: if we receive a customers/data_request, customers/redact, or shop/redact request from Shopify, we respond within the required timeframes, and when you uninstall the app your store's data is deleted as described in Data retention & deletion.

05Content you display

Because the content shown on your screens comes from sources you choose and control, you are responsible for that content and for any personal data it may contain, as further described in our Terms & Conditions.

06How we use information

• to provide and operate the Service: pairing devices, distributing content instructions, scheduling, syncing, and monitoring your fleet;
• to manage your account, subscription, and billing;
• to provide customer support and respond to your requests;
• to secure the Service: authentication, abuse and fraud prevention, and debugging;
• to improve the Service, using aggregated or de-identified usage data;
• to send service communications (e.g. security, billing, or availability notices);
• to comply with legal obligations.

We do not sell personal information, we do not use your data for third-party advertising, and we do not make automated decisions about you that have legal or similarly significant effects.

07Legal bases (GDPR)

Where the EU or UK General Data Protection Regulation applies, we process personal data on these legal bases: performance of a contract (providing the Service you signed up for), legitimate interests (securing and improving the Service, preventing abuse), consent (where we ask for it, e.g. optional communications), and legal obligation (where processing is required by law).

08How we share information

We share personal data only with:

• Service providers that host and operate our infrastructure (cloud hosting, content delivery, email delivery) and that help us run customer support (we use Intercom to receive and answer support emails), bound by contracts limiting their use of the data to providing services to us;
• Distribution platforms — Shopify (app distribution and billing) and Google Play (app distribution) — as needed to deliver and bill the Service;
• Authorities, where required by law, legal process, or to protect the rights, safety, and security of Keryka, our users, or others;
• a successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.

We never sell personal information and never share it with third parties for their own advertising or marketing.

09Cookies

The Keryka console uses cookies and similar technologies that are strictly necessary to sign you in, keep your session secure, and remember your preferences. We do not use advertising or cross-site tracking cookies. Our public website (keryka.com) uses Google Analytics to understand how visitors use the site — it sets analytics cookies and sends page-view and device information to Google; you can opt out with the Google Analytics opt-out add-on. Our websites also load fonts from Google Fonts; when your browser fetches them, Google may log your IP address to serve the files.

10Data security

We protect your data with technical and organizational measures appropriate to the risk: all data in transit between players, the console, and our servers is encrypted using industry-standard protocols (HTTPS/TLS); data at rest is stored with reputable cloud infrastructure providers using encryption and access controls; access to personal data is restricted to personnel who need it to operate the Service. No method of transmission or storage is 100% secure, but we work to protect your information and will notify you and the relevant authorities of a data breach where the law requires it.

11Data retention & deletion

• Account data is retained for as long as your account is active. When you delete your account (or ask us to), we delete or anonymize your personal data within 90 days, except where we must keep it to meet legal, tax, or accounting obligations.
• Device data is deleted when you remove a device from your console or delete your account.
• Playback and diagnostic logs are retained for up to 12 months, then deleted or aggregated.
• Shopify store data is deleted after you uninstall the Shopify app, in line with Shopify's shop/redact webhook and timelines.
• Support conversations (the emails you send our support team and our replies) are kept in our support tool for up to 24 months after the conversation is closed so we can follow up on past issues, then deleted. They are also deleted when you delete your account.
• Backups are purged on a rolling basis within 90 days of the data's deletion.

You can delete your account from within the Service or by contacting us at the address in Contact us — we honor deletion requests regardless of how you signed up, including accounts created through the Android app or the Shopify app.

12Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal data, to restrict or object to certain processing, and to withdraw consent at any time where processing is based on consent.

If you are in the EU/EEA, the UK, or Switzerland, you also have the right to lodge a complaint with your data protection supervisory authority. If you are a California resident, the CCPA/CPRA gives you rights to know, delete, and correct; we do not "sell" or "share" personal information as those terms are defined by the CCPA/CPRA, and we do not discriminate against you for exercising your rights.

To exercise any of these rights, contact us using the details in Contact us. We will verify your request and respond within the time required by applicable law. If we act as a processor for your merchant (for example, data in a store you don't own), we may refer your request to them.

13International transfers

We may process and store information in countries other than your own. Where personal data is transferred out of the EU/EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

14Children's privacy

The Service is built for businesses and is not directed at children. Our apps are not designed for or targeted at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

15Third-party services & links

The Service lets you connect third-party data sources (for example your Shopify store, databases, APIs, and feeds) and display content from third-party URLs. Those services are governed by their own privacy policies, and we are not responsible for their practices. This policy does not cover the Shopify platform itself or Google Play — see Shopify's Privacy Policy and Google's Privacy Policy.

16Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above, and for material changes we will provide more prominent notice (such as an email or an in-console notice). The current version will always be available at keryka.com/privacy.html.

17Contact us

Keryka Systems is the entity responsible for the Service and your designated privacy point of contact. For any privacy question, request, or complaint — including data access and deletion requests for the SaaS platform, the Shopify app, or the Android app — email us at our contact address and we will respond promptly.