Privacy Policy

1. Introduction

The website https://app.zigns.io (the "Platform") is provided by Zigns ("Zigns," "we," "us," or "our"). Zigns offers a cloud-based digital signage platform that enables businesses to create, manage, and display visual content on connected screens. Zigns is currently available in Early Access ahead of its official late May / early June launch.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website or use our Services. By accessing the Platform, you confirm that you have read and understood this Policy and consent to the collection and use of your information as described herein.

We are committed to respecting your privacy and complying with applicable data protection laws, including the California Consumer Privacy Act (CCPA).

2. Who We Are

Zigns LLC is a Wisconsin limited liability company located at 2800 E. Enterprise Ave STE 333, Appleton, WI 54913. For questions about this Policy, contact us at hello@zigns.io.

3. Information We Collect

3.1 Account Information

When you register for a Zigns account, we collect:

• Email address and password — used for account authentication and login. Passwords are encrypted and never stored in plain text.
• Single sign-on profile data — if you sign in with Google or Microsoft, we receive the basic account information needed to authenticate you, such as name, email address, and provider identifier.
• First and last name (optional) — used to personalize your experience and identify users within your organization's account.
• Profile preferences — timezone, date/time format, language preference, and notification settings, stored to personalize your experience.

3.2 Billing and Payment Information

If you purchase a paid subscription, we collect your billing address and payment method details. Credit card transactions are processed exclusively by Stripe, our payment processor. We do not store your full credit card number on our servers. Stripe processes and secures card data on PCI-compliant infrastructure.

3.3 Usage and Log Data

We automatically collect certain information when you use the Platform, including:

• IP address and approximate location (city/country)
• Browser type and device information
• Pages visited, features used, and time spent on the Platform
• Screen activity and content playback data associated with your organization
• Screen diagnostics, player capability checks, online/offline events, watchdog restarts, skipped slide diagnostics, and proof-of-play analytics

This data is used to operate, improve, and secure the Platform.

3.4 Content You Upload

The Platform allows you to upload images, videos, documents, slide decks, generated slides, and other media files ("Customer Content"). This content is stored on our behalf by Amazon Web Services (AWS S3) and served via Amazon CloudFront. You retain ownership of all content you upload or import. See Section 5 for details on how content is shared with service providers.

3.5 Third-Party Imports and Connected Services

If you choose to import content from a third-party service, such as Google Photos, Google Slides, Canva, PowerPoint conversion, or other supported sources, we access only the data needed to complete the import you requested. Imported files are copied into your Zigns organization as Customer Content so they can be displayed on your screens.

For Google Photos imports, Zigns uses the Google Photos Picker API to let you select specific photos or videos. Zigns requests the https://www.googleapis.com/auth/photospicker.mediaitems.readonly scope, lists only the media items you selected in that picker session, downloads those selected items, and stores imported copies in your Zigns media library. Zigns does not use Google Photos data for advertising, does not sell Google user data, and does not store Google Photos access tokens long term.

3.6 AI Slide Generation

If you use AI-assisted slide generation, the prompt, selected style settings, and related generation instructions may be sent to our AI provider, Anthropic, to generate slide design output. Do not include sensitive personal information, regulated data, or confidential third-party information in AI prompts unless you have the right to process it through the service.

3.7 Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform and understand how it is used. Categories of cookies we use include:

• Strictly necessary cookies — required for authentication, session management, and core Platform functionality. These cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the Platform so we can improve it. These are aggregated and do not identify you personally.

You may disable analytics cookies via your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and operating the Services — account authentication, content delivery to your screens, and all core Platform features.
• Communications — sending transactional and onboarding emails to help you get started, and billing-related communications for paid subscribers. We will only send marketing communications with your explicit consent, and you may unsubscribe at any time.
• Security and fraud prevention — using IP address and login data to detect unauthorized access or abuse, including enforcement of our one-account-per-free-plan policy.
• Platform improvement — analyzing aggregated, anonymized usage data to understand feature adoption, identify usability issues, and guide product development.
• Requested integrations — connecting to third-party services only when you request an import, export, embed, or data-driven widget, and using that data only to provide the visible feature you selected.
• Legal compliance — retaining billing records as required by applicable tax and accounting laws, and responding to lawful requests from authorities.

We do not sell your personal information to third parties. We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

5. How We Share Your Information

5.1 Service Providers

We share personal information with trusted third-party service providers solely to operate and deliver the Platform. Each provider is bound by contractual data protection obligations and may not use your data for their own purposes.

Provider	Purpose	Location
Google Firebase / Firestore	Authentication, real-time database, user and organization data storage	United States
Google APIs	Google sign-in, Google Photos Picker imports, Google Slides imports, and Google Sheets widgets when you choose those features	United States
Microsoft identity platform	Microsoft account sign-in when you choose that provider	United States
Amazon Web Services (S3 + CloudFront)	Media file storage and content delivery	United States
Stripe	Payment processing and billing management	United States
Resend	Transactional and notification email delivery	United States
Vercel	Platform hosting and serverless functions	United States
Canva	Canva design listing and export/import when you connect Canva	United States / other regions
CloudConvert	PowerPoint file conversion when you import slide decks	United States / European Union
Anthropic	AI slide generation when you use AI-assisted creation	United States
OpenWeather and National Weather Service	Weather widgets and public CAP emergency alert feed data	United States / other regions

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Zigns, our users, or the public. We will notify you of such requests where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.4 No Sale of Personal Information

We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes.

6. Google API Data and Connected Imports

Zigns uses Google API data only to provide user-facing features that you choose in the app. For Google Photos, Zigns opens a Google-controlled picker session, lets you select photos or videos, lists the selected media items, and imports copies of those selected items into your Zigns organization. We do not scan your full Google Photos library, and we do not access items you did not select.

Imported Google Photos media becomes Customer Content in Zigns and is stored with your other media in AWS S3 and delivered through CloudFront for display on your screens. Your organization admins and editors may be able to view, use, rename, schedule, or delete imported media according to their Zigns permissions.

Zigns does not sell Google user data, does not use Google user data for advertising, and does not transfer Google user data except as needed to provide or secure the import feature, comply with law, or complete a business transfer as described in this Policy. Google Photos access tokens are used for the active import session and are not stored long term by Zigns.

You can delete imported Google Photos media from your Zigns media library or request deletion of your account and associated data as described below.

7. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide you with the Services. Specifically:

• Account data is retained through the duration of your account. Upon account deletion, we initiate removal of your data from our database and cloud storage within a reasonable period.
• Billing records are retained as required by applicable tax and accounting law, even after account deletion.
• Inactive accounts on the free plan that have not logged in for 365 consecutive days are permanently deleted. We will send reminder notifications at 60-day intervals beginning 6 months before deletion.
• Uploaded and imported media is marked for deletion upon account deletion and removed from storage promptly thereafter.
• Analytics and diagnostics may be retained in raw and aggregated form for operational reporting, security, compliance, and product improvement.

You may request deletion of your account and associated data at any time through the Settings page within the Platform or by emailing hello@zigns.io.

8. Security

We take appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS) for all Platform communications
• Password hashing and secure credential storage via Firebase Authentication
• Access controls restricting data access to authorized personnel only
• PCI-compliant payment processing through Stripe (we never store raw card data)
• Regular review of security practices and third-party integrations

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you become aware of any security vulnerability or breach, please contact us immediately at hello@zigns.io.

In the event of a data breach affecting your personal information, we will notify affected users as required by applicable state and federal breach notification laws.

9. Your Privacy Rights

9.1 All Users

Regardless of where you are located, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Rectification — update or correct inaccurate or incomplete personal information through your Profile settings or by contacting us.
• Deletion — request deletion of your personal information and account. You may do this through Settings → Data & Privacy within the Platform, or by emailing hello@zigns.io.
• Opt-out of marketing — unsubscribe from marketing emails at any time using the unsubscribe link in any email we send.

9.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes, and third parties with whom it has been shared.
• Right to Delete — you may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt Out of Sale — we do not sell personal information. No opt-out is required, but you have this right.
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at hello@zigns.io. We will respond to verified requests within 45 days of receipt. Where necessary, we may extend this period by an additional 45 days and will notify you of the extension.

9.3 Residents of Other US States

Several US states have enacted comprehensive privacy laws granting residents rights similar to those described above, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Montana, Oregon, and others. If you are a resident of a state with an applicable privacy law, you may have the right to access, correct, delete, or opt out of certain processing of your personal information. To exercise any such rights, contact us as described in Section 9.4.

9.4 How to Submit a Request

To exercise any privacy right, email us at hello@zigns.io with "Privacy Request" in the subject line. We will respond within 45 days of receipt and may ask you to verify your identity before fulfilling the request.

10. Children's Privacy

The Zigns Platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will promptly delete it. If you believe a child has provided us with their information, please contact us at hello@zigns.io.

11. International Users

Zigns is currently operated from the United States and our Services are directed at users in the United States. All data we collect is processed and stored in the United States. By using the Platform from outside the United States, you consent to the transfer of your information to the United States, which may have different data protection rules than those in your country.

We plan to expand our Services to Canada and Mexico in the future. As we do so, we will update this Policy to reflect applicable data protection requirements in those jurisdictions.

12. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by posting the updated Policy on this page with a new "Last Updated" date and, where appropriate, by sending an email notification. We encourage you to review this Policy periodically.

Your continued use of the Platform after any changes constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: hello@zigns.io
• Website: https://app.zigns.io

We aim to respond to all privacy inquiries within 45 days of receipt.