Privacy Policy

1. Introduction

Widgitboard ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital signage service ("Service").

This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws worldwide.

2. Data We Collect

2.1 Information You Provide

• Account Information: Email address, display name (when you create an account)
• Authentication Data: Google account information (if using Google Sign-In)
• Layout Content: Widget configurations, layout settings, and custom content you create

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, screen resolution
• Log Data: IP address, access times, error logs (for debugging)

2.3 Information We Do NOT Collect

• Payment card numbers or banking details (handled securely by Stripe — see Section 10)
• Location data beyond IP-derived approximate location
• Biometric data
• Data from third-party sources for profiling

3. How We Use Your Data

We use your data for the following purposes:

• Provide the Service: Store and sync your layouts across devices
• Authentication: Verify your identity and secure your account
• Service Improvement: Understand how the Service is used to improve features
• Communication: Send important service updates (you can opt out)
• Security: Detect and prevent fraud, abuse, or security threats

We do NOT: Sell your personal data, use it for advertising, or share it with third parties for their marketing purposes.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract: Processing necessary to provide the Service you requested
• Legitimate Interests: Improving our Service, ensuring security
• Consent: Where you have given explicit consent (e.g., optional communications)
• Legal Obligation: Compliance with applicable laws

5. Data Storage and Security

Your data is stored securely using Google Firebase, which provides:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• SOC 2 Type II and ISO 27001 certified infrastructure
• Data centers in the United States (with EU data processing options)
• Automatic security updates and monitoring

Local Storage Option: You can use Widgitboard in "demo mode" where all data is stored locally in your browser. No data is transmitted to our servers in this mode.

6. Data Retention

We retain your data as follows:

• Account Data: Until you delete your account
• Layout Data: Until you delete individual layouts or your account
• Usage Logs: 90 days for operational purposes
• Security Logs: Up to 1 year for fraud prevention

After deletion, data may persist in backups for up to 30 days before being permanently removed.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

To exercise these rights, contact us at support@widgitboard.com. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your rights

Note: Widgitboard does NOT sell personal information. We have not sold any personal information in the preceding 12 months.

To exercise your CCPA rights or submit an opt-out request, visit our Do Not Sell or Share My Personal Information page.

9. Cookies and Tracking

We use the following cookies and tracking technologies:

• Authentication Cookies: Keep you logged in
• Preference Cookies: Remember your settings (theme, layout)
• Security Cookies: Prevent cross-site request forgery
• Google Analytics (GA4): Collects anonymized usage data (pages visited, session duration, device type) to help us improve the Service. Google may use this data in accordance with their privacy policy.
• Microsoft Clarity: Collects interaction data (clicks, scrolling, session recordings) to help us understand how users interact with the Service. Session recordings may capture page content but do not capture text input in password fields.

We do NOT use: Third-party advertising cookies or social media tracking pixels. Analytics data is used solely to improve the Service, not for cross-site tracking or targeted advertising.

Managing Cookies: You can change your cookie preferences at any time by clicking "Cookie Settings" in the footer of any page, or by clearing your browser cookies.

10. Third-Party Services

Widgitboard integrates with third-party services. When you use these features, you may be subject to their privacy policies:

• Google Firebase: Data storage and authentication - Privacy Policy
• Google Sign-In: Authentication - Privacy Policy
• Stripe: Payment processing — we never see or store your full card number. Stripe handles all payment data securely. - Privacy Policy
• Google Analytics (GA4): Anonymized usage analytics - Privacy Policy
• Microsoft Clarity: Interaction analytics and session recording - Privacy Policy
• Weather APIs: Location-based weather data
• RSS Feeds: Third-party news content

11. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Compliance with applicable data protection frameworks
• Data processing agreements with all sub-processors

12. Children's Privacy

Widgitboard is not intended for children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately.

If you believe a child has provided us with personal information, please contact us at support@widgitboard.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes (if you have an account)

We encourage you to review this policy periodically for any changes.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

For EU residents, you also have the right to lodge a complaint with your local data protection authority.