Effective date: 17 September 2026

Privacy notice

Aron Ásberg Björnsson operates AdPlayr from Hafnarbraut 12A, Kópavogur, Iceland and is responsible for personal information used to administer the service. Contact support@adplayr.com with privacy questions or requests.

Information we use

We process your account and contact details, company memberships and roles, uploaded media, playlists, schedules and shared calendar notes, screen identifiers and last-contact information, billing references and support messages. Technical and security logs help us investigate faults and protect accounts. Paddle handles payment details entered in its checkout; AdPlayr uses transaction and subscription references to manage access and billing information.

Why we use it

We use information to provide the service and respond to support requests, relying on performance of a contract where applicable. Our legitimate interests in operating a secure, reliable service support security, troubleshooting and business account administration, subject to your rights. We retain legally required records to meet applicable obligations. Where optional processing requires consent, we must obtain it before that processing starts.

If a customer uploads personal information in display content, that customer generally decides why it is used. AdPlayr processes it to provide the requested service. The customer is responsible for having an appropriate basis and permissions to upload and display it. Company members with access can see shared company information, and connected screens receive the content assigned to them. Contact us before uploading personal data that requires a customer data processing agreement so that the necessary terms can be arranged.

Service providers

• Supabase: account authentication and database services. Our project’s database region is Ireland (eu-west-1).
• Vercel: application hosting and associated technical logs.
• Cloudflare R2: uploaded media storage and delivery.
• Namecheap Private Email: support mailbox and correspondence.
• Resend: account verification and password-reset email delivery.
• Paddle: payment, subscription and invoice services, under its own privacy notice.
• Google Fonts: the website currently requests fonts from Google, which receives connection information when those requests are made.

Where information is processed

The main application database is hosted in Ireland. Our providers operate international infrastructure, and hosting, delivery, email, support and payment processing may involve other countries, including the United States. An Irish database region does not mean all information stays in Iceland or the European Economic Area (EEA).

Transfers outside the EEA must have a lawful basis, such as an applicable adequacy decision or appropriate contractual safeguards. Our providers’ published data processing terms describe their transfer arrangements, including standard contractual clauses where applicable. You can contact support@adplayr.com for information about the safeguards relevant to your data and how to obtain a copy. Paddle separately explains its processing and transfers in its privacy notice linked above.

Cookies and device storage

Authentication cookies support sign-in. Browser storage also remembers preferences such as theme and calendar filters. Player device storage supports screen pairing, settings and saved playback content. Clearing it can sign you out, remove pairing or remove offline content. Your browser controls cookies and local storage. Payment pages may also use storage governed by Paddle’s privacy notice.

Retention and deletion

Company media remains available in storage when a subscription expires; cancellation does not itself delete it. Deleting a login does not automatically delete shared company data. Contact support to request account or company deletion.

Deleted media is queued for physical removal from storage. Removal is delayed and retried if it fails, so it is not immediate. Previously saved copies can remain on player devices. Deletion from the application does not erase original files or other copies you or your team hold.

How retention is determined

• Account, membership and company information is kept while the account or shared company needs it to use the service. Deletion requests are assessed separately where other members still use the company.
• Support correspondence is kept to handle the enquiry, follow-up issues and any related dispute. Information no longer needed for those purposes should be deleted or anonymised.
• Billing and transaction records are kept for applicable accounting and tax requirements and for resolving payment disputes. Paddle also retains records under its own legal obligations and privacy notice.
• Security and audit records are kept as needed to investigate incidents, prevent misuse and establish what happened when account or company access changes. Provider log retention also depends on the service and account configuration; there is no single retention period for all logs.
• Limited trial history, including a hashed email identifier, can remain after account deletion to enforce the one-trial-per-customer rule. Deleted-file identifiers can remain to prevent accidental reuse of a storage key. These records are distinct from the deleted media files.

Retention may be extended where information is needed for a legal obligation or an unresolved claim. Any remaining backup copies are subject to their own retention and replacement cycles; removal from the active service does not mean immediate removal from every copy. Contact us for details relevant to a particular deletion request. AdPlayr is not a backup service; keep your original media separately.

Your rights

Depending on applicable law, you may request access, correction, erasure, restriction or portability of your personal information, object to certain processing, and withdraw consent where we rely on consent. We may need to verify your identity before responding. Email support@adplayr.com to make a request.

You may also complain to Persónuvernd, the Icelandic Data Protection Authority. This notice does not restrict mandatory rights. Material updates will be communicated as required.