Skip to content
CanvasRelay
Sign in

Privacy Policy

Effective date: August 18, 2026 · Contact: [email protected]

CanvasRelay ("we") is a digital signage platform. This policy describes what we collect, why, and the rights you have over it. It is drafted to align with common GDPR-style principles (notice, purpose limitation, deletion rights). We do not sell personal data, and we do not run third-party advertising or cross-site trackers.

What we collect

  • Account data — email address, password hash (never the password), and OAuth identity (Google) if you choose it.
  • Organization data — org name/slug, membership roles, plan and billing status. Payment card details go directly to Stripe; we only store the Stripe customer id.
  • Content you upload — boards, menus, scenes, schedules, and media files.
  • Device telemetry — player heartbeats, scene playback events, and error reports, retained for 90 days.
  • Audit events — security-relevant actions (sign-in, publish, deletion), retained for 1 year.

Why we collect it

To provide the service (rendering and scheduling your signage), to secure your account, to bill you, and to meet legal obligations (tax records via Stripe).

Your rights

  • Export — download everything we hold for your organization from Settings (one export per day).
  • Deletion — schedule organization deletion from Settings; data is erased after a 14-day grace period. You may also delete your personal account, which anonymizes it immediately.
  • Correction — edit account and org details in Settings at any time.

Retention

Telemetry: 90 days · Audit events: 1 year · Soft-deleted media: 30 days · Deleted organizations: erased after the 14-day grace. Stripe customer records are retained as required by tax law, minimized to the customer id.

Sub-processors

Cloudflare (hosting, storage, delivery) · Stripe (billing) · Resend (transactional email) · PostHog (product analytics — first-party events only, e.g. "demo started" or "board published"; no autocapture, no session recordings, no advertising or cross-site tracking).

Changes

We will email account owners before material changes take effect.