Privacy Policy

1. Introduction

SignM8(“SignM8”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using SignM8, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our platform.

2. Information we collect

We collect information you provide directly to us, including:

• Account registration information (name, email address, phone number)
• Business profile information (business name, website, contact details)
• Billing information (processed by our payment provider; we do not store card numbers)
• Content you upload (images, videos, menu data)
• Communications you send to us

We also collect information automatically, including:

• Device health data from paired screens (CPU, memory, temperature, connectivity)
• Proof-of-play logs (what content was displayed, when, and for how long)
• Error logs and platform usage data for improving the service
• IP addresses for security and IP whitelisting features

3. How we use your information

We use the information we collect to:

• Provide, operate, and improve the SignM8 platform
• Process billing and manage your subscription
• Send transactional emails (account setup, alerts, billing notifications)
• Respond to support requests and enquiries
• Monitor for security threats and maintain platform integrity
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

4. Data storage and security

Your data is stored on servers located in Australia (AWS ap-southeast-2, Sydney). We implement industry-standard security measures including TLS encryption in transit, hashed credential storage, and role-based access controls. Please see our Security page for more detail.

Despite our best efforts, no method of electronic storage or transmission is 100% secure. In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

5. Disclosure to third parties

We may share your information with trusted third-party service providers who assist us in operating our platform (cloud infrastructure, payment processing, email delivery, error monitoring). These providers are contractually obligated to handle your data securely and only for the purposes we specify.

We may disclose your information if required by law or in response to valid legal process.

If you are a customer of an integrator using SignM8, your integrator may have access to your account data as part of their managed service. This is governed by your agreement with your integrator.

6. Your rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request deletion of your account and associated data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the OAIC if you believe we have breached the APPs

To exercise any of these rights, contact us at [email protected].

7. Cookies

SignM8 uses an HTTP-only session cookie to maintain your authenticated session. This cookie does not contain personally identifiable information and is not accessible from JavaScript. We do not use third-party tracking cookies or advertising pixels.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of SignM8 after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related enquiries, contact us at [email protected].