Privacy policy

Inhoudsopgave

1. Who we are

firmo ("we", "us") operates the digital signage platform. If you have questions about this policy or your personal data, you can contact us using the address or email address associated with your account, or the contact details provided on our website.

2. What data we collect

We process data that is necessary to provide the service:

Account and authentication: email address (and optionally name); session cookies. Account and related profile data is stored in PostgreSQL.
Product usage: screens, playlists, slides, media and schedules that you create; integration settings (for example, enabled calendars).
Integrations: OAuth tokens and API keys that you connect (Google, Microsoft 365, HubSpot, Pipedrive, Salesforce, Slack) to display calendars, deals, Slack channel content, attendance or other data on your signage. These are stored securely and only used to retrieve data that you have authorized.
Payments: Stripe processes subscription payments; we store subscription and plan IDs and do not retain full payment details.
Analytics: if you have accepted non-essential cookies, we may use analytics tools.

3. Legal basis and purposes

We process your data to perform our agreement with you (the digital signage service), to comply with legal obligations and, where applicable, with your consent (for example, for non-essential cookies). We only use integration tokens to display the data you have connected (for example, calendar events) on your screens.

4. Data retention

We retain your account and content data until you delete your account or ask us to delete it. Payment-related data is retained as required by law. Session and technical logs may be retained for a limited period for security and troubleshooting purposes.

We use the following subprocessors to provide the service:

PostgreSQL: relational database for application and account data (EU/US), managed as part of our application hosting. Authentication uses session cookies.
Stripe: payment processing.
Google, Microsoft: calendar and related APIs when you connect them.
Salesforce, Pipedrive, HubSpot: CRM and pipeline data when you connect them.
Slack Technologies (Slack) when you connect the Slack integration: API calls and data required to display Slack content on your signage, processed in accordance with Slack's terms and privacy policy.
Analytics providers when you accept non-essential cookies. Cloud infrastructure providers for hosting and delivering the application.

Each provider processes data in accordance with its own privacy policy and, where applicable, data processing agreements. We do not sell your personal data.

If you are located in the EEA, you have the right to:

Access, request a copy of your personal data.
Rectification, correct inaccurate data (for example, in your profile).
Erasure, request deletion of your data and account.
Data portability, receive your data in a machine-readable format.
Restriction / objection, in certain cases, restrict processing or object to processing.
Complaint, lodge a complaint with a supervisory authority in your country.

You can export your data and delete your account through your account settings. For other requests, please contact us.

7. Cookies

We use strictly necessary cookies (for example, authentication sessions) to provide the service. If you have accepted non-essential cookies, we may use analytics cookies. You can change your cookie preferences at any time through the Cookie Settings in the footer or the button below.

8. Changes

We may update this privacy policy from time to time. The "Last updated" date will be adjusted accordingly. We recommend reviewing this page regularly.