Privacy Policy

Who we are

Flipvo, LLC, a Florida limited liability company, operates Attract Screen and is the controller of the personal data described in this policy: we decide how it is used, and we are responsible for it.

What we collect

When you sign up and use Attract Screen, we keep:

• Your account — your email address, your name if you give one, and your password as a one-way hash. We never store the password itself.
• Your brand details — whatever you choose to put on your screen: operator name, phone, logo, vCard photo, and screen labels.
• Your subscription — the plan, its status, and the dates of the current billing period. Card details go straight to Stripe; we never see them.
• Messages you send us — any email you send to an address at attractscreen.com, and your replies to our emails.

We never collect or store the identity of your passengers or anyone else who sees your screen.

What we also log

Running the service also produces records about how it is used:

• Security log — each sign-in and failed sign-in, sign-up, email confirmation, password reset, change to your screen settings, data export, account deletion, and billing change, with the IP address and browser details it came from. When our staff sign in as you to help with a problem, that is logged too. Entries are deleted after twelve months.
• Agreements — the date, the Terms version, and the IP address when you accept the Terms at sign-up, and the same when you confirm you may collect contact details on a Full Capture screen.
• Screen counts — when a screen launches and which capture a viewer taps, with the theme, the time, and the kind of device (iPhone, Android, or other). These power your own dashboard. They say nothing about who tapped.
• Setup progress — which setup steps you have opened and finished, so you can pick up where you left off, and your answer to whether you operate in New York City.
• Rate limits — short-lived counters, keyed by IP address, email, or account, that slow down repeated sign-ins, sign-ups, password resets, uploads, and other requests. They expire on their own within an hour.

The attract screen never loads third-party analytics. The screen counts above stay on our own servers.

How we use it

Your brand details power your hosted attract screen, and your account and subscription let you sign in and pay. We email you only about your account:

• confirming your email address and resetting your password
• telling you when your password changes
• telling you when someone tries to sign up with your address
• delivering a data export you asked for
• billing notices: a subscription started, a payment failed, or a subscription ended
• answering a message you sent us

We don't send marketing email or newsletters. The security log and rate limits exist to keep accounts safe and to investigate abuse. Google Analytics on our public pages, when you allow it, tells us how visitors find us.

Service providers

We run Attract Screen on a small set of established providers, and we share only the data each one needs to do its job:

• Amazon Web Services — hosts our servers, the database, and the logos and vCard photos you upload.
• Stripe — processes subscription payments. Your card details go directly to Stripe; we never see or store them.
• Resend — sends our emails to you. It also receives mail sent to any address at attractscreen.com and passes it to us, and we forward it to our own inbox.
• Google — hosts that inbox in Gmail, so the messages you send us and your replies to our emails are stored there. Google Analytics measures traffic on our public pages, only after you accept the cookie banner (see cookies).
• Cloudflare — runs the bot check on the sign-up form. Your browser loads the check from Cloudflare and we pass your IP address to Cloudflare to confirm the result, so Cloudflare sees that address and the browser signals it measures. It runs on the sign-up form only, and it is how we keep scripted sign-ups off the service.
• Sentry — receives a technical report when something breaks, in your browser or on our servers, so we can fix it. We scrub personal details before a report is sent, and Sentry is not used to track visits.

We do not sell your personal information, and we do not share it with anyone outside the providers listed here.

Export or delete your data

Both controls sit on one page in your dashboard: Settings, then Data rights. Sign in first — the page asks you to, then takes you there.

• Export — we gather every record attached to your account into one file and email you a download link. The link expires after an hour, and you can request one export per hour.
• Delete — your sign-in email is released immediately and can be used to register a new, separate account. The account is disabled at once, every signed-in session ends, and any subscription is cancelled.

Thirty days after you delete, we permanently remove the rest: your screen settings, the logos and photos you uploaded, your screen counts, your subscription record, and any export file still sitting in storage. Our security log keeps a dated record that the account existed and was closed, with your IP address, browser details, and any settings values stripped out of it; those entries are themselves deleted after twelve months.

Encrypted backups are a separate copy kept for disaster recovery, not a live copy of the account. Data can remain in a backup for up to 120 days before that backup expires and is removed, and we cannot pull one account out of a backup ahead of that. Email privacy@attractscreen.com to confirm erasure.

Cookies and browser storage

Some cookies and browser storage are needed for the site to work. They are set by our own site and are not used for tracking:

• Sign-in cookies — keep you signed in, and protect the sign-in form from forged requests. A visit to the site can set the form-protection cookies before you sign in.
• Your cookie choice — remembers whether you accepted or declined analytics, in this browser only.
• Light or dark — remembers the theme you picked.
• Attract screen — remembers, for as long as the tab is open, that the screen was launched in locked mode.

Google Analytics loads only after you accept the cookie banner, and only on our public pages: the home page, the chauffeurs page, pricing, themes, about, press, contact, and the legal pages. It sets first-party cookies whose names start with _ga, and sends Google the page address, the page you came from, and an approximate location. Decline and it never loads. The attract screen, your dashboard, and the sign-in and sign-up pages never load it.

Changing your mind. Cookie settings, at the bottom of every public page, withdraws your choice at once: Google Analytics stops sending, its cookies are removed from your browser, and the banner asks again.

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a no to analytics: the banner stays hidden and Google Analytics never loads.

Google processes analytics data under its own privacy policy. You can opt out of Google Analytics on every site you visit with Google's opt-out browser add-on.

Contact

Questions about this policy or your data can be sent to privacy@attractscreen.com. Every other way to reach us is on the contact page.