Privacy Policy

Last updated: July 26, 2026

CastTower ("CastTower", "we", "us") is a digital signage and screen advertising platform operated by Johnson Creative, LLC. This policy explains what we collect, why, and the choices you have. It applies to the CastTower web console, mobile apps, the screen player, and the ad marketplace.

What we collect

Account data — your email address, name (if provided), and workspace membership/role, used to authenticate you and operate team workspaces.
Content you upload — images, videos, web page URLs, and widget configurations you add to your library, stored so we can deliver them to your screens.
Screen and playback data — screen names, pairing status, device heartbeats ("online / now playing"), optional venue details you enter (location, venue type, audience estimates), and proof-of-play logs (which content played on which screen, when, and for how long). Playback logs power your reports and, if you sell ad time, and completed player-reported play billing.
Billing data — subscriptions, marketplace bookings, and payouts are processed by Stripe. We never see or store full card numbers or bank details; we store Stripe references (customer, subscription, invoice, and transfer IDs) and ledger amounts.
Technical data — standard server logs and the local storage the player uses to keep running offline (cached media, queued playback logs).

What we do not do

We do not sell your personal information.
We do not use your content or logs for advertising profiles. Ad delivery on your screens is controlled entirely by you (your ad slots, your approvals).
The player does not use cameras, microphones, or audience tracking.

How we share data

We share data only with the service providers that make the product work: Supabase (database, authentication, and file storage), Stripe (payments and payouts), and Open-Meteo (weather widgets — receives the city or coordinates configured for a screen, never personal data). If you enable programmatic advertising, participating ad partners receive screen context (screen ID, location, venue type, audience estimate) needed to serve an ad — never your account data. Within the ad marketplace, screen owners and advertisers see the booking details each side needs (listing info, campaign name, creative, completed play counts).

Retention and deletion

Your data is retained while your account is active. Deleting content, screens, or a workspace removes the associated data; playback and ledger records that document billed transactions are kept as long as required for accounting. You can initiate account deletion inside the app or through our account deletion page. We process verified requests within 30 days, except for records we must keep by law.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email us and we will honor verified requests within the timelines required by law. We do not discriminate against you for exercising these rights.

Security

All traffic is encrypted in transit. Workspace data is isolated with database-level row security; screens authenticate with revocable device tokens and never hold your account credentials. Payment credentials live exclusively with Stripe.

Children

CastTower is a business tool and is not directed to children under 16. We do not knowingly collect data from children.

Changes

We will post any changes to this policy here and update the date above. Material changes will be announced in the console.

Contact

Johnson Creative, LLC · support@johnson-creative.com