Privacy Policy

1. Who we are

This Privacy Policy explains how Skalder ("Skalder", "we", "us") handles personal data in connection with the Skalder digital signage platform. For most of the data described below, your organization is the data controller and Skalder acts as a data processor on its behalf — for example, the content your organization chooses to display, or the list of people it invites as members. For account and billing data tied directly to your organization's relationship with us, Skalder acts as the controller.

2. What we collect

• Account & organization data — name, email address, and role of each user; your organization's name and settings.
• Billing data — handled by Stripe on our behalf; we do not store your card number. We keep a record of your subscription plan and billing history.
• Screen & pairing data — a hashed device token per paired screen, screen names/locations you assign, and basic connectivity status (last-seen time).
• Content you upload — images, video and text used in your slides and playlists, stored via our media library.
• Usage & logs — standard request logs (IP address, timestamps, user agent) kept for security and troubleshooting.

3. How we use it

We use this data to operate the service you've signed up for: authenticating users, rendering your content to your paired screens, processing subscription payments, sending transactional email (invitations, billing receipts, screen alerts), and keeping the platform secure and running.

4. Legal basis

We process account and billing data under contract (to provide the service you subscribed to) and legitimate interest (security, fraud prevention, service improvement). Where required, your organization is responsible for having a lawful basis for any personal data it chooses to display on its own screens.

5. Third parties & sub-processors

We share data with a limited set of providers needed to run Skalder:

• Stripe — payment processing and subscription billing.
• Hosting & email providers — infrastructure and transactional email delivery (finalized before launch).

Some slide types fetch live public data (weather, transit, flight, sports, and similar feeds) directly from third-party providers at display time. These requests don't include your personal data — only the location/query your organization configures for that slide.

6. Data retention & deletion

We keep your data for as long as your organization's account is active. If an organization is deleted, its screens, playlists, slides and member data are removed. If you'd like your organization's account and data deleted, contact us or ask your organization's owner to request it — deletion can be carried out on request.

7. Your rights (GDPR)

If you're in the EU/EEA or Norway, you have the right to access, correct, delete, restrict or object to our processing of your personal data, and the right to data portability. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority — in Norway, Datatilsynet.

8. Cookies

Skalder currently uses only strictly-necessary session cookies to keep you signed in — no analytics, advertising, or tracking cookies. If that changes in the future, we'll update this section and add a cookie consent notice where required.

9. International transfers

Where data is processed outside the EU/EEA by one of our sub-processors, we rely on appropriate safeguards such as Standard Contractual Clauses. Full details will be finalized alongside our hosting provider selection.

10. Children's privacy

Skalder is a business tool and isn't directed at children. We don't knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do.

12. Contact

Questions about this policy or a request to exercise your data rights? Reach out via your organization's Studio or the contact details on our website.