Legal

Privacy policy

Last updated November 3, 2026

SignBlink is digital-signage software for businesses: you design content and play it on your TVs. This policy explains what information we collect, why, who helps us run the service, and the choices you have. In short: we collect what we need to run your screens and your account, we don’t sell it, and we don’t use it to show you ads.

Who we are

SignBlink (signblink.com and app.signblink.com) is operated by SignBlink (“SignBlink”, “we”, “us”). For your account and the content in it, we are the party responsible for your information. Questions go to [email protected].

What we collect

Information you give us

Account details: your name, email address and password. We never store your password itself, only a salted, one-way scrypt hash of it. If you sign in with Google, we receive your Google account ID, name and email address instead of a password.
Your organization: its name, time zone, logo and brand color, the team members you invite and their roles.
Your content: photos, videos and PDFs you upload or import (including free stock photos you choose, which are copied into your library), designs, playlists, schedules, and the names and locations you give your screens.
Support conversations: the messages you send us and our replies.
Connected services: if you connect Canva, the Canva account ID and display name, the sign-in tokens (stored encrypted) and which designs you imported.

Information collected as you use SignBlink

Screens and players: a device identifier and access key (stored only as a hash), the device’s IP address and browser details, when it last checked in, what was published to it, and confirmation that it received the content. Players keep a copy of your content on the device so they can keep playing without internet.
Security and activity records: sign-ins and important account actions (for example, adding a screen, changing billing or inviting a teammate), with the time, IP address and browser details.
Emails we send you: a record of account, billing and alert emails (recipient, subject, content and whether delivery succeeded).
Location you choose: we don’t collect GPS or device location. Weather widgets use the place you pick (or a city guessed from your time zone).

Payment information

Payments are processed by Stripe. Your card details go directly to Stripe; we never see or store full card numbers. We keep the Stripe customer and subscription identifiers, your plan, the number of screens, invoice status and any discount, so we can show your billing and keep your service running.

How we use it

To provide SignBlink: store your content, deliver it to your screens, show you whether each screen is online, and run the features you use.
To manage your subscription, trial and invoices.
To send you service emails: account and security messages, billing notices, and screen alerts you have turned on. We don’t send marketing email without your permission.
To answer support requests. When it helps, our support staff may view your dashboard as you see it. That view is read-only, lasts at most an hour, is logged, and shows in your account’s Activity.
To keep the service secure, prevent abuse and fraud, and investigate problems.
To understand how SignBlink is used so we can improve it.

We do not sell your personal information. If you reached SignBlink by clicking one of our ads on Google, we tell Google Ads whether that click led to a sign-up or a subscription, as described under Cookies; we share nothing else with advertisers.

Cookies and browser storage

We use one essential cookie to keep you signed in. It can’t be read by scripts on the page and isn’t used for tracking. The app also uses your browser’s local storage for small preferences (for example, the last layout you picked), and screens use it to keep their content for playing offline.

To see which of our own ads and links bring customers, we use two first-party cookies. If you follow one of our marketing links, a cookie remembers which link it was for 30 days. If you click one of our Google ads, a cookie keeps the ad’s click ID (a code Google adds to the link) for 90 days. If you then create an account, it records them. For a Google ad click, we send Google Ads only that click ID, whether it led to a sign-up or a subscription, when, and the subscription’s value. We never send your name, email address or anything you put in SignBlink. We don’t use analytics scripts, Google’s tracking tag or other advertising cookies.

If you add a YouTube video or a web page to a design, it loads from that site on your screen, and that site may set its own cookies under its own policy.

We share information only with service providers that help us run SignBlink, only as much as they need, and under agreements that limit how they can use it:

Stripe — payment processing and billing.
SMTP2GO — delivering our emails.
Cloudflare — DNS and network protection; traffic to our sites passes through Cloudflare’s network, and screen sharing uses Cloudflare’s relay on networks that need it.
Google — only if you choose to sign in with Google.
Canva — only if you connect your Canva account to import designs.

Your account and content are stored on servers we control. Some features fetch public information for your screens: weather from MET Norway, place search from OpenStreetMap, sports results from TheSportsDB, headlines from the news feeds you choose, photo and free-music search from Openverse (and, if enabled, Pexels and Pixabay). Those requests come from our servers and contain only what’s needed (for example, a city or a search term), not your account details. YouTube videos, internet radio stations and web pages you add load directly on your screens, so those services see the screen’s internet address.

We use AI services to help design the template library that every customer can choose from; your content and account information are not sent to them for that. If you use “Improve with AI” in the designer, the design you’re working on — its text, its layout and a picture of it, which can include your photos — is sent to our AI provider to create the suggestion. Your name, email address and payment details are not included, and your design only changes if you choose to use the suggestion.

If you create a share link for a design, anyone who has the link can see that design (its text, photos, videos and music, but not hidden items) and add a copy of it, with copies of those files, to their own SignBlink account. You can turn a link off at any time; copies people already added stay in their accounts.

We may also disclose information if the law requires it, to protect the rights, safety and security of our customers, the public or SignBlink, or as part of a merger, acquisition or sale of the business, in which case this policy will continue to apply to your information.

How long we keep it

Your account information and content are kept while your account is open.
Media and designs you delete go to Trash, where you can restore them for 30 days; after that they are permanently deleted.
Copies of the emails we send are kept for 14 days. Sign-in sessions expire after 30 days of inactivity.
Security and activity records are kept while your account is open, to help protect it.
When you ask us to close your account, we delete your content and account information within 30 days, except billing records we must keep for tax and accounting purposes (typically up to 7 years).
Backups are overwritten on a rolling schedule, so deleted information disappears from them within about 30 days.

Security

All connections use HTTPS. Passwords are stored only as salted hashes, connected-service tokens are encrypted, our databases are not reachable from the internet, and staff access to customer accounts requires two-step verification. We back up data regularly. No system is perfectly secure, but we work to protect your information and will tell you without undue delay if a breach affects your personal information.

Your choices and rights

You can see and change your account details, organization settings, team and content in the app at any time, and turn email alerts on or off in Settings.
You can ask us for a copy of your information, to correct it, or to delete your account by emailing [email protected].
Depending on where you live (for example, California, the European Economic Area or the United Kingdom), you may have additional rights, such as to access, correct, delete or move your personal information, to object to or restrict certain uses, and to complain to your local data-protection authority. We will honor these requests as the law requires and won’t treat you differently for making them.

We respond to requests within 30 days. We may need to confirm your identity first. If you are on a team account, some requests may need to come from the organization’s owner.

People who see your screens

The content on your screens is chosen by you, our customer. If you show personal information on a screen (for example, staff names or customer photos), you are responsible for having the right to show it. We process that content only to display it for you. People who see your screens are not tracked by SignBlink.

If you turn on Count scans for a QR code, scanning it opens a short SignBlink link that adds one to that code’s count for the hour and sends the phone on to your link. We use the phone’s IP address and browser details only briefly, in memory, so the same phone scanning twice within half an hour counts once; we don’t store them, and we don’t set cookies or identify the person scanning.

When someone uses screen sharing, the picture and sound go directly from their device to the screen. We pass the connection details between them, but we don’t receive, record or keep what’s shared. On networks that block a direct connection, it travels through Cloudflare’s relay, encrypted end to end. A PDF shared from a phone is sent to us only to turn its pages into pictures for that share, then deleted. A guest who shares can enter a name; we keep it, with the time, the screen and the IP address the share came from, in the account’s activity log.

Children

SignBlink is a service for businesses and organizations. It isn’t directed at children, and we don’t knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we’ll delete it.

Where your information is processed

Your information is stored on servers we control, and our service providers may process it in other countries. Where the law requires it, we use appropriate safeguards for these transfers.

Changes to this policy

We may update this policy as SignBlink changes. We’ll post the new version here with a new date, and if a change is significant we’ll tell account owners by email or in the app before it takes effect.

Contact

Questions or requests about privacy: [email protected].