Privacy Policy

Draft published October 2026 — not yet in effect.

GAIA Tech Solutions LLC ("Canvix," "we," "us") operates the Canvix digital-signage platform: the web portal at app.canvix.online, the marketing site at canvix.online, and the NODE player apps that run on screens (Samsung/Tizen, LG/webOS, Android/Fire TV, Windows, Linux, and browsers). This policy describes what personal data we collect through them, why, and what you can do about it.

1. Who this applies to

• Account holders — people who sign up for an organization's Canvix account to manage screens, content and schedules.
• Screen operators — people who claim a screen by scanning its QR code.
• Visitors to a touch kiosk (ORBIT) — a much narrower case, see §7.

This policy does not cover the content organizations choose to display on their own screens (that's between the organization and its own audience).

2. What we collect

2.1 Account data (you provide this)

• Email address, name, phone number (optional), and the password you choose. Passwords are hashed (argon2id) — we never store or can see the plain password, including our own staff.
• The organization's name, country, and an optional description of what it plans to show.
• If you sign in with Google instead of a password, we receive your Google account's email and name from Google; we don't receive your Google password.

2.2 Screen data (the NODE app sends this when a screen is set up)

When a screen is installed, before anyone claims it, the NODE app registers with a hardware identity so reinstalling the app doesn't create a duplicate screen record:

• Platform, OS version, device model/manufacturer, screen resolution and orientation.
• A hardware identifier: Tizen's DUID and MAC address, webOS's device ID, Android's device ID and Wi-Fi MAC (where the OS permits reading it), a Windows/Linux machine ID, or — for a plain browser, which can't read any of these — a random ID we generate and the browser stores itself.
• The screen's IP address and a periodic "still online" heartbeat, so the portal can show whether a screen is online.

2.3 Content you upload

Images and videos you upload for your screens are stored in our cloud storage (Amazon S3) and delivered to screens through a content-delivery network (CloudFront). This content never passes through or is inspected by our own servers beyond the automated checks in §5.

2.4 Cookies and similar technology

We use a single session cookie to keep you signed in (HttpOnly, Secure, SameSite=Lax, valid up to 30 days on a rolling basis). We do not use third-party advertising cookies or cross-site tracking of any kind.

2.5 What we do not collect

We don't collect payment card details directly (a future paid plan would go through a third-party payment processor, which would have its own privacy policy). We don't buy personal data from third parties, and we don't sell personal data to anyone.

3. Why we use it, and on what basis

We do not use any of this data to build advertising profiles, and we do not send marketing email based on it.

4. Who can see your data

Canvix is multi-tenant: each organization's locations, screens, content and schedules are visible only within that organization, to members with an appropriate role (org admin, editor, viewer). Our own platform administrators can see account and organization details across the platform in order to review sign-ups, investigate abuse, and provide support — not the content of your private media library beyond what automated review requires (§5).

We do not share personal data with third parties for their own marketing purposes. Data is shared only with the service providers that run the infrastructure itself:

• Amazon Web Services — hosting, database, file storage and content delivery (region: us-west-2).
• Amazon SES — delivering the account emails described in §2.1 and §3.

5. Automated review of uploaded content

We don't yet run automated screening of uploaded content beyond basic file-type and size validation. If we add an automated screening step in the future, this section will be updated to describe it before it goes live.

6. How long we keep data

• Account data is kept while your account is active, and for a limited time after deletion for the backups described below.
• Screen hardware identity and heartbeats are kept while the screen is claimed, and are deleted along with the screen record if you remove it.
• Database backups: a nightly backup is kept for 30 days, and a nightly whole-server backup for 7 days, purely for disaster recovery. Deleting your account does not immediately purge you from a backup already taken, but backups age out on the schedule above and are never restored except to recover from an actual incident.
• Uploaded content is kept until you delete it or your account is closed.

7. ORBIT touch kiosks

A kiosk shows a visitor a menu of galleries to browse. It does not ask visitors who they are, and it does not collect or store any personal data about the people using it — only which gallery and how long it was shown, used the same way regular screen playback is, for the organization's own operational dashboard.

8. Your choices

• Access and correction: sign in and update your account details, or ask your organization's admin to do so.
• Deletion: you can request account deletion from the portal (or by asking your organization's admin, or Canvix support). This removes your login, sessions and membership records; see §6 for what backups retain in the meantime.
• Export: contact support below — a self-service export isn't built yet.

9. Children's privacy

Canvix is a business tool for organizations and is not directed at children. We do not knowingly collect personal data from children under 13.

10. Changes to this policy

If we make a material change to this policy, we'll notify account holders by email or an in-portal notice before it takes effect.

11. Contact us

GAIA Tech Solutions LLC
ops@gaiatech.dev
Registered company address to be added here.