Privacy Policy
Effective date: August 7, 2026 · Last updated: September 8, 2026
Screenstead is a digital-signage service operated by Lionman Media LLC (“Screenstead,” “we,” “us”). This policy explains what we collect, why, and the choices you have. We keep it plain because your trust matters more than legalese.
Who this applies to
This policy covers the Screenstead web console (app.screenstead.com), the Screenstead mobile apps (iOS and Android), and the Screenstead TV player apps (Apple TV, Android TV, and Google TV). The TV player apps do not require a personal sign-in on the television; a screen is connected by entering a one-time pairing code that is claimed from an account you control.
Information we collect
| Category | Examples | Why |
|---|---|---|
| Account information | Email address and optional display name | To create and secure your account and identify you within your organization |
| Content you provide | Images, videos, playlists, service plans, notes, and organization/site names you upload or create | To store your content and display it on the screens you connect |
| Connected cloud storage | Provider account identifiers and authorization tokens for connections you choose to make to Dropbox, Google Drive, OneDrive, Box, or another supported provider | To let you browse and import selected files into your Screenstead organization; Screenstead does not use this access to delete the provider's source files |
| Device & usage identifiers | A per-screen pairing credential and screen/user identifiers generated by the app; app version, operating-system version, and available storage reported by each player | To authenticate each screen, deliver the right content, and keep playback healthy |
| Billing information | Subscription status, plan, and screen count | To manage subscriptions. Card and payment details are handled by our payment processor (Stripe) and are never stored on our servers |
We do not collect precise location, contacts, health data, or biometric data. The mobile apps request access to your photo library only when you choose to upload media, and that media is used solely to display it on your screens. We do not use advertising identifiers, and there are no third-party advertising or analytics-tracking SDKs in our apps.
How we use information
- To provide the service: store your content, publish it to your screens, and keep screens playing (including offline).
- To authenticate accounts and individual screens and to protect against abuse.
- To send transactional email you request or that is required to operate your account (for example, sign-in confirmations, password resets, and team invitations).
- To manage subscriptions and comply with legal obligations.
We do not sell or rent your personal information, and we do not use it for advertising or to build advertising profiles.
How we share information
We share information only with service providers who process it on our behalf to run Screenstead, under contracts that limit their use of it:
- Supabase — application database, authentication, and media storage (United States).
- Railway — hosting for the web console and marketing site.
- Resend and Amazon SES — delivery of transactional email.
- Stripe — subscription billing and payment processing.
- Apple and Google — distribution of the mobile and TV apps.
- Google Analytics — optional measurement of visits to the public marketing website, only with your permission.
We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger or acquisition (in which case we will notify you). Aside from these providers, we do not disclose your data to third parties.
Optional website analytics
On www.screenstead.com, we use Google Analytics only after you choose “Allow analytics.” It helps us understand visits to our public marketing pages. The Google tag does not load before you allow analytics, and declining does not affect access to Screenstead.
We send the public page address and title without query parameters, fragments, referring-page details, form entries, account identifiers, or workspace content. Google may process browser and device information and use analytics cookies to measure visits. Advertising signals and personalization are disabled. This website measurement does not run in the web console, browser player, or mobile and TV apps.
Your choice is stored in this browser for up to six months. Use “Privacy choices” on any public page to change it. Declining stops further analytics and removes accessible Google Analytics cookies from this website. Google’s Privacy Policy explains how Google handles information.
Data retention and deletion
We keep account and organization data while it is needed to provide Screenstead. Every signed-in user can permanently delete their personal account from the mobile app under Profile → Data & privacy → Delete my account. Screenstead shows the deletion impact and requires explicit confirmation before it revokes product access and begins irreversible deletion.
Personal-account deletion always removes the person's authentication identity, personal profile data, organization memberships, personally authorized cloud-storage connections and tokens, notification-recipient addresses, and personal attribution. Disconnecting or deleting a Screenstead account does not delete files stored in Dropbox, Google Drive, OneDrive, Box, or another external provider.
Media, playlists, layouts, plans, imports, and other material created inside a Screenstead organization are organization-controlled business content. Each customer organization selects the policy that applies when a member deletes their personal account: retain and transfer that member's attributable workspace contributions to the organization (the default), with the departing person's attribution removed, or delete the attributable workspace records and Screenstead-hosted copies used exclusively by those records. A hosted file that is still referenced by a retained organization record, device snapshot, or branding setting remains organization-controlled with the departing person's Storage ownership and personal attribution removed. If a person belongs to more than one organization, each organization's policy applies independently. The app shows the applicable outcome for each affected organization before the person confirms deletion.
Personal-account deletion is distinct from the owner-controlled whole-workspace erasure action in the web console under Settings → Data & privacy. Whole-workspace erasure permanently removes the organization and all of its Screenstead-hosted workspace content. It does not delete source files stored by a connected external cloud provider. If a departing owner has another organization member, administrative ownership transfers to a successor. If the departing owner is the organization's only member, the deletion-impact screen explains that confirming personal-account deletion will also erase that workspace and its Screenstead-hosted content. Authorized users can also download a JSON export of organization data from the console.
Most account-deletion requests complete within minutes. If external-service cleanup cannot finish immediately, the request remains pending and automatic retries continue until cleanup is verified. After sign-out, the mobile app uses a private deletion receipt to show only whether the request is pending or completed; it does not expose the deleted account or organization details. After completion, Screenstead may keep bounded one-way hashes of the normalized email and former user identifier for no more than 24 hours solely to stop an in-flight notification or authorization callback from recreating deleted identifiers. The trusted deletion worker automatically erases those hashes; they cannot restore the account or provide access to it.
When administrative ownership transfers, personal-account deletion does not cancel the retained organization's subscription or delete its Stripe customer; the organization, subscription, stored payment relationship, and payment methods remain with the customer organization. The Stripe Customer contact email is updated to the current organization owner, and personal actor references are removed. If the departing owner is the organization's only member, confirming personal-account deletion also erases that workspace, cancels its active subscription, and deletes the related Stripe customer and active payment relationship. The separate owner-controlled whole-workspace erasure action has the same billing effect. Stripe or another service provider may retain transaction, tax, dispute, fraud-prevention, security, or other records only where required by law or the provider’s legitimate compliance obligations; those retained records are not active Screenstead app data. Our authentication and infrastructure providers, including Supabase, and our transactional-email providers may likewise retain limited security, abuse-prevention, audit, or delivery logs under their own legal and operational requirements. We do not promise a fixed provider-log retention period.
Security
Data is encrypted in transit (HTTPS/TLS). Access to your content is scoped to your organization by row-level security, and screen credentials are stored only as one-way hashes. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.
Your rights and choices
You can access, correct, export, or delete your personal data using Screenstead's account tools. Workspace content is controlled by the customer organization and its authorized administrators, subject to applicable law and that organization's member-departure policy. Depending on where you live, you may have additional rights:
- California (CCPA/CPRA): you have the right to know what we collect, to request deletion, and to not be discriminated against for exercising these rights. We do not sell or “share” personal information as those terms are defined by California law.
- Brazil (LGPD): you have rights of access, correction, portability, and deletion of your personal data.
To exercise any right, use the in-app tools or email us at hello@screenstead.com.
Children’s privacy
Screenstead is a tool for organizations and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
International users
Screenstead is operated from the United States, and your information is processed there. Screenstead is offered in the United States, Canada, Mexico, Brazil, and South Korea; it is not currently offered to residents of the European Economic Area or the United Kingdom.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Continued use of Screenstead after a change means you accept the updated policy.
Contact us
Questions about privacy? Email hello@screenstead.com. Screenstead is a product of Lionman Media LLC, United States.