This policy explains what personal information COMPANY LEGAL NAME ("CombCast", "we") collects, why, and your choices. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, the Act respecting the protection of personal information in the private sector (as amended by Law 25).
Privacy Officer: NAME / TITLE, CONTACT EMAIL, ADDRESS.
1. What we collect
Agents (account holders)
- Email address and password. Passwords are stored in a protected form that cannot be read back, even by us.
- Display name, account status, and who referred you (if you joined through an invite link).
- Shipping details for your starter kit: name, phone, street address, city, province and postal code.
- Order, payment status, shipping and delivery records.
- Records of your stores, screens, quotes, ad sales and earnings.
Venue contacts (entered by agents)
- Venue name, address, city, contact name and contact phone.
Advertisers
- Name, and optionally email and phone, entered by your agent on a quote. Only your name is shown on the payment page.
- The images and videos uploaded for your ad.
- Payment details are entered directly with our payment processor. We receive confirmation of payment, not your full card number.
Screens and ad players
- A random device identifier, the screen's name and store, when it was last online, and whether it was playing an ad. We use this to run the screen and show agents whether it is working.
Website visitors and chat
- Messages you type to Mia, our AI assistant, are sent to our AI provider to generate a reply.
- We save chats (your messages, Mia's replies, the time and the page you were on) so our team can follow up and improve our answers. If you share your name, email or phone in the chat, we use it to contact you about what you asked. We may pass your request to a CombCast agent near you, who may contact you about it.
- We sort chats automatically (for example, to set aside spam and to note whether you're interested in becoming an agent or advertising). This only helps us decide who should reply; it does not lead to any decision about you.
- Standard technical data (IP address, browser type, time of request) is processed by our hosting provider for security, rate limiting and troubleshooting.
Cookies and similar storage
- We use only essential cookies to keep you signed in and to protect the Service. Screens use the browser's local storage to remember their pairing. We do not currently use advertising or analytics cookies. If that changes, we will update this policy and ask for consent where required.
2. Why we use it
- To create and run your account and the back office.
- To process orders, payments, shipping, revenue sharing and referral rewards.
- To schedule and play ads on screens, and show their status.
- To send service messages (for example receipts, shipping updates, security notices).
- To send marketing messages only if you opt in (you can unsubscribe at any time).
- To keep the Service secure, prevent fraud and abuse, and meet legal, tax and accounting obligations.
We do not sell personal information.
3. Who we share it with
We share information only as needed to provide the Service:
- Chat follow-up: if you ask for follow-up in the chat, your name, contact details and the chat may be shared with one CombCast agent so they can contact you.
- Within the agent network: an advertiser's name and ad appear to the agent who sold the ad; agents see only their own stores, screens and clients. Referrers see limited, masked details of the people they referred (for example "ab***@domain"), never their clients or venues.
- Venues: ads you buy play publicly on screens in venues.
- Service providers (subprocessors):
| Provider | Purpose | Data location |
|---|---|---|
| Vercel Inc. | Website and application hosting | TO CONFIRM — USA / regions |
| Supabase Inc. | Database, sign-in and file storage | Canada (ca-central-1) |
| Stripe, Inc. / Stripe Payments Canada | Payment processing and payouts to agents | Canada / USA |
| OpenAI, L.L.C. | Generates replies for the Mia chat assistant | USA |
| Resend, Inc. | Sending service emails (for example sign-in, password and follow-up notices) | USA |
- Legal reasons: when required by law, or to protect rights, safety and the Service.
- Business transfers: if our business is sold or reorganized, information may transfer under equivalent protection.
4. Storage outside Quebec or Canada
Some providers store or process information outside Canada (mainly the United States), where it may be accessible to authorities under local law. We use contracts and safeguards to protect it.
5. How long we keep it
- Account, order, payment and earnings records: as long as your account is open, then 7 years for tax and accounting purposes.
- Advertiser media: for the ad's run and 12 months — TO CONFIRM afterwards, then deleted.
- Screen status records: TO CONFIRM.
- Marketing consent records: as long as needed to prove consent.
- Chats with Mia: chats where you shared contact details are kept while we follow up and for up to 24 months — TO CONFIRM afterwards; other chats are deleted after 12 months — TO CONFIRM. You can ask us to delete a chat at any time.
6. Your rights
You can ask to access, correct, or delete your personal information, withdraw consent (for example to marketing), or (in Quebec) ask for data portability and information about automated decisions. Email CONTACT EMAIL. We will reply within 30 days. Some records must be kept by law even after you close your account.
You may also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).
7. Security
We protect information in transit, limit each agent to their own data, store passwords and screen keys in a protected form that cannot be read back, and keep uploaded files private. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the regulator as the law requires.
8. Children
The Service is not for people under 18. We do not knowingly collect their information.
9. Changes
We will post updates here with a new date and notify account holders of material changes.
Contact
COMPANY LEGAL NAME · Privacy Officer · ADDRESS · CONTACT EMAIL