Privacy Policy

1. Data controller

The data controller for your personal data is Digisini LLC ("Digisini"), the legal entity responsible for service delivery.

• Contact email: [email protected]
• Website: https://digisini.com

2. What data we collect

We collect only the minimum data required to provide the service:

• Account: name, email, hashed password, preferred language, detected country.
• Organisation: business name, sector, plan, timezone.
• Billing: tax address, VAT number (optional), payment history. Card data is NOT stored on our servers: it is processed by Stripe directly.
• Service usage: connection IP, login date/time, uploaded content (assets), screen metrics (heartbeat, errors).
• Support: ticket content you open and emails you send us.
• Web analytics: pages visited on digisini.com via Plausible Community Edition (no cookies, no personally identifiable data).

3. Why we use it (purposes)

• Provide the contracted service (screen management, content playback).
• Billing and tax compliance.
• Transactional communications (payment notices, technical alerts, status changes).
• Support when you request it.
• Product improvement (aggregated analytics).
• Email marketing only if you opt in explicitly at registration (unsubscribe link in every email).

4. Legal basis

• Performance of contract (Art. 6.1.b GDPR): to provide the service.
• Legal obligation (Art. 6.1.c GDPR): tax retention of invoices (6 years).
• Legitimate interest (Art. 6.1.f GDPR): platform security, fraud prevention, service improvement.
• Consent (Art. 6.1.a GDPR): for marketing emails (explicit opt-in).

5. Data sharing

We do NOT sell data to third parties. We share strictly what is necessary with GDPR-compliant processors:

• Stripe Payments Europe (Ireland) — payment processing.
• Amazon SES (AWS, eu-west-1 Ireland) — transactional email delivery.
• Cloudflare (EU/Global) — CDN, R2 storage, DNS, DDoS protection.
• Scaleway (EU) — server and database hosting.
• Plausible CE — self-hosted at stats.digisini.com (does not share outside Digisini).

We do not use Google Analytics, Facebook Pixel, or third-party advertising trackers.

6. International transfers

Your data is stored mainly in the European Union (Scaleway, Cloudflare R2 EU, AWS SES eu-west-1). Stripe may process payments in the US under Standard Contractual Clauses approved by the European Commission.

7. Retention period

• Active account: while you keep the account open.
• After deletion: erased within 30 days, except tax data (invoices) retained 6 years by legal obligation.
• Technical logs: 90 days.
• Backups: 30-day rotation, then overwritten.

8. Your rights (GDPR)

As a data subject you have the right to:

• Access your data.
• Rectify it if inaccurate.
• Erasure ("right to be forgotten").
• Restrict processing.
• Object to processing based on legitimate interest.
• Portability: receive your data in structured format.
• Withdraw consent at any time.
• Lodge a complaint with the supervisory authority of your country of residence (EU/EEA data subjects retain GDPR rights regardless of where Digisini LLC is incorporated) if you believe we have violated your rights.

To exercise any right, email [email protected]. We will respond within 30 days max.

9. Cookies

Digisini.com does NOT use third-party cookies. Plausible CE (analytics) operates without cookies. We only use strictly necessary functional cookies for the session at app.digisini.com (no consent required). Details in our cookie policy.

10. Minors

The service is not directed at minors under 16. If we detect that we collected data from a minor without parental consent we will delete it immediately.

11. Changes to this policy

We may modify this policy to reflect legal or service changes. Substantial changes are notified 30 days in advance by email to active users.

12. Contact

Email: [email protected] · If we appoint a DPO in the future, contact details will be published here.