Privacy Policy

Last updated: 9 August 2026

This policy explains how Anthony Vyner (ABN 11 533 983 556), trading as Billboard ("Billboard", "we", "us"), handles personal information when you use the Billboard Screen app for Apple TV, the Billboard Rooms app for iPad, and the web dashboard at getbillboard.app (together, the "Service"). We keep data collection to the minimum needed to run the Service. We do not sell your data, show third-party ads, or track you across other companies' apps or websites.

What we collect

  • Account details. Your name, email address and password when you create an account. Passwords are handled by our authentication provider and are never stored by us in readable form. If you sign in with Google or Microsoft instead, they tell us your name and email address so we can create or match your account, and we never see your password with them.
  • Organisation and billing details. If you add them: your company or school name, contact name, phone number, billing email and billing address.
  • Payment details. How we handle payment depends on where you subscribe. If you pay on our website, our payment processor handles your card details — we don't receive or store full card numbers, and we keep a customer reference from them along with your plan, invoices and payment status. If you subscribe in the Billboard Screen app on Apple TV or the Billboard Rooms app on iPad, Apple processes the payment through the App Store under Apple's own terms and privacy policy — we never see your card or Apple Account details. To keep your subscription in sync, the app attaches a random identifier tied to your Billboard account to the purchase, and Apple sends us transaction identifiers, the product you purchased, your subscription status and its renewal or expiry date, which we store against your account.
  • Content you upload. The images, video and text you add to your galleries to display on your screens. That includes your organisation's logo, the captions on individual items, and any notice or full-screen alert you send to your own screens.
  • Screen and technical data. Basic information about how the Service is used and how your screens connect, such as a random identifier each Apple TV generates on first launch, the Apple TV's name (for example "Front Office"), the code used to connect a screen, records of which screens are active, log data, IP address and app version. We use this to run the Service, count active screens, apply plan limits and fix problems. The Apple TV app asks for no personal details to display a gallery; it does not access your contacts, photos, location or health data. If you subscribe from the app, the purchase is processed by Apple and linked to your Billboard account using a random identifier, as described under Payment details.
  • Room panel data. A room panel works the same way. The Billboard Rooms app on an iPad generates a random identifier on first launch and sends it, along with the code used to connect the panel and the name iPadOS reports for the device, so the dashboard can show which panels are on which rooms. Nobody signs in on a panel: it is connected by claiming its code from your dashboard, it asks for no password, and it can only ever see the one room it is connected to. It does not access your contacts, photos, location or health data.
  • Bookings made at a panel. If somebody books a room at the panel we store the booking against that room: the times, and an email address if they chose to give one. The address is optional and the panel says what it is for, which is being able to change the booking afterwards. Two things are worth knowing before you ask people to use it. The address is shown on the panel beside the booking, deliberately, so that somebody can chase a meeting nobody turned up to, which means anyone walking past that door can read it. And a booking made at a panel is issued a six digit passcode, shown once on the panel at the time, which is the only thing that will change or end that booking later. The address is not. Bookings are also visible to the account that owns the room. A booking made at a panel carries no title, because the panel never asks for one.
  • Weather location. If you turn on the weather widget, you choose the town or suburb you want the forecast for. You can search for it by name, or use "Use my current location", which asks your browser for your device's position and only works if you allow it. We store that place name and its coordinates against your account so your screens can show the right local forecast, and you can change or clear it at any time in Settings. We don't track your device and we keep no history of where you've been. Neither app ever asks for or accesses location. Both receive only the finished forecast text.
  • Support messages. Anything you send us when you get in touch. If you use Send feedback in the dashboard, we also take a picture of the page you were looking at, so we can see the problem rather than guess at it. It's attached by default and there's a switch to leave it out before you send.

How we use it

We use your information to provide and maintain the Service, process payments, verify App Store purchases, keep your screens running and in sync, show local weather where you've asked for it, respond to support requests, send you account and service messages, keep the Service secure, and meet our legal obligations. We do not sell your personal information, and we do not use your content for advertising.

Cookies & analytics

We use essential cookies to keep you signed in and to run the dashboard, and during checkout our payment processor sets cookies it needs to take payment securely and prevent fraud. These are strictly necessary and always on.

With your consent, we also use a product analytics providerfor product analytics and session replay — recording how the product is used (pages viewed, features clicked, and on-screen interactions, with text inputs masked by default) so we can see what's working and improve Billboard. This only runs after you accept, it's never used for advertising, and we don't sell your data or track you across other companies' sites.

You choose whether to allow analytics when you first visit, and can change your choice any time via Cookie preferences in the footer. Rejecting or withdrawing consent stops analytics collection.

Who we share it with

We share personal information only with providers that help us run the Service, and only as needed:

  • Cloud hosting and content delivery, which runs the website and serves your galleries to your screens.
  • Database, file storage and authentication, which stores your account details and uploaded media.
  • Payment processing, which handles billing on our website. Card details are entered directly with the processor and never reach our own servers.
  • Payment processing (Apple), when you subscribe in the Apple TV app or the iPad app. Apple Inc. bills you through the App Store under its own terms and privacy policy; we exchange only transaction identifiers and subscription status with Apple so we can activate and maintain your plan or your Rooms subscription.
  • Weather and place lookup (Apple), when you turn the weather widget on. We send the coordinates of your chosen location to Apple's WeatherKit and Apple Maps services to fetch the forecast, and to turn a search or a shared browser location into a place name. We send coordinates and the text you searched for, nothing else. No account details go with them, and nothing in the request identifies you. Apple handles that data under its own privacy policy.
  • Sign-in providers (Google, Microsoft), only if you choose to sign in with one. They confirm who you are and pass us your name and email address.
  • Email delivery, to send account and service messages. Signing up also adds your email address to our mailing list so we can tell you about changes to Billboard. Every one of those has an unsubscribe link, and removing your account removes you from the list.
  • Product analytics, which — only with your consent — measures how the product is used and captures session replays to help us improve it.

We describe these providers by what they do rather than by name, because the specific companies change over time and the roles don't. If you need the current list of named providers for a procurement, security or IT review, email us and we'll send it.

We may also disclose information if required by law, or to protect our rights, users or the Service.

Overseas storage. Your account details are stored in our database in the Sydney region, and your uploaded media is stored with our content provider in its Oceania region. Some other providers, including our website hosting, email delivery and Apple (for App Store purchases, and for weather and place lookups), may store or process limited data outside Australia, including in the United States. Where information is handled overseas, we take reasonable steps to ensure it's protected consistently with this policy.

Google Calendar

Connecting a Google account is optional and is only used by Billboard Rooms. If you do not connect one, nothing in this section applies to you.

What we access. With your permission we read the list of calendars your connected account can see, so you can pick which calendar belongs to which room, and we read the events on the calendars you choose. From each event we store its title, its organiser, its start and end time, whether it is marked private, and the identifier Google gives it. We do not read attachments, attendee lists, conferencing details, or any other calendar.

How we use it.Only to run the panel outside the room and the diary in your dashboard. Events are shown so people can see what a room is doing, and a booking made at a panel is written back to that room's calendar so it appears for everyone else who looks at it. Extending a booking updates that event and ending one early deletes it. We only ever write to a calendar you have connected to a room, and only to events Billboard created. A room set to hide titles shows the word “Busy” on the panel instead.

Who we share it with. Nobody. Google Calendar data is not sold, not transferred to data brokers, advertisers or any other third party, and is not used for advertising. It is stored with the same hosting provider as the rest of your account and reaches no one else.

How we protect it. The token that lets us reach your calendar is encrypted with AES-256-GCM before it is stored, is never returned to a browser, and is readable only by our servers. Calendar traffic runs over encrypted connections, and access is limited to the account that connected it.

How long we keep it, and how to remove it. Event details are kept only while the calendar stays connected, and a meeting removed from your calendar is removed from ours on the next sync. Disconnect the calendar in Settings, then Calendars, and we immediately delete the stored token and stop all access. Deleting a room or your account deletes its events with it. You can also revoke Billboard at myaccount.google.com/permissions, which stops access straight away.

Billboard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used to develop, improve or train any general-purpose artificial intelligence or machine learning model, and is never passed to a third-party service that would do so.

How long we keep it

We keep your account information and content for as long as your account is active. Records of which screens are active are short-lived and used only for the current count. Forecasts are cached briefly against a rounded location that every nearby screen shares, not against you or your account. If you delete a gallery or your account, we delete the associated content and personal information, though some data may remain in backups for a limited period before being overwritten, and we may keep billing records where the law requires.

Security

We take the security of your information seriously and use commercially reasonable measures to protect it, including transmission over encrypted connections, access controls that limit who can reach your data, and reputable hosting providers. No method of transmission or storage is ever completely secure, so while we work hard to protect your information we can't guarantee absolute security.

Your choices and rights

You can access or update your account details from your dashboard at any time. You can ask us to provide, correct or delete your personal information by emailing us. You can opt out of non-essential emails using the unsubscribe link or by contacting us; we'll still send messages that are necessary to run your account.

Children

The Service is intended for use by schools, universities, businesses and other organisations, and by adults acting on their behalf. It isn't directed at children, and children don't create accounts or provide information to us. Content shown on screens is controlled by the account holder, not by us.

Complaints

If you have a concern about how we've handled your personal information, contact us first and we'll work to resolve it. If you're not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We may update this policy from time to time. For material changes we'll take reasonable steps to notify account holders, for example by email, and we'll update the date above.

Contact

Questions or requests about your privacy? Email us at privacy@getbillboard.app.

Billboard is operated by Anthony Vyner (ABN 11 533 983 556).