Privacy policy
ViewFerry is a digital signage service: organizations use it to upload content, design layouts and play them on their screens. This policy explains what we collect, why, and the choices you have.
Who this covers
It covers people who sign in to the ViewFerry operations desk at app.viewferry.com, the screens (players) that organizations connect, and people whose information reaches ViewFerry through an organization's connected accounts, such as Google reviewers or YouTube commenters. Organizations decide what content they put on their screens; for that content they are responsible for having the right to use it.
What we collect
| Information | Why we use it |
|---|---|
| Your name and email address, from our sign-in provider | To sign you in, show who did what, and let owners invite and manage their team. |
| Organization content: images, videos, documents, playlists, layouts and schedules | To store it, prepare it for screens and deliver it to the screens you choose. |
| Screen and player information: device model, app version, connection and delivery status, playback records and screen previews | To show whether each screen is working and what it played, and to troubleshoot delivery. |
| An activity history of changes (who changed what, and when) | So owners can review their organization's activity and we can investigate security issues. |
| Technical logs: request time, path, result and network address | To keep the service running and secure. Logs do not include passwords, tokens or the contents of your files. |
We use only the cookies the service needs: a sign-in session cookie, a short-lived cookie that protects sign-in, and a 10-minute cookie used while connecting a Google account. We do not use advertising or analytics cookies, and we do not sell personal information or use it for advertising.
Google and YouTube data
An organization owner can choose to connect a Google account. ViewFerry asks Google only for read-only access, and only for the feature the owner turns on:
- YouTube (scope
youtube.readonly): we read the channel's name, ID and picture, its live broadcasts, and the live chat messages of those broadcasts, so the organization's team can choose comments to show in its own live production. We cannot post, delete or change anything on YouTube. - Google Business Profile (scope
business.manage): we read the account's name, its business locations, and each chosen location's reviews (reviewer display name and photo, star rating, text and date), so the organization can show its reviews on its screens. We do not reply to, change or delete reviews or business information.
When an organization finds its business through Google Maps instead, we use the Google Maps Platform to read the place's public rating and reviews; this needs no Google account.
How we store and share it
- The access Google grants is stored encrypted and is used only by ViewFerry's servers. It is never shown in the app or sent to screens.
- We keep the connected account's name and picture so the owner can see what is connected. Reviews and comments are kept only as long as they are needed for display: review snapshots are replaced at each refresh (at least every 6 hours) and removed when the source is deleted or disconnected. Live chat comments are read only while the organization's team has chat reading switched on; comments that were not shown on air are deleted one day after that session ends, and comments that were shown, with who chose them, after 30 days. A comment YouTube removes, or from an author YouTube bans, is taken out of the queue and off air straight away.
- Google and YouTube data is shown only to the organization that connected it, on its own screens and live productions. We do not share it with anyone else, use it for advertising, or use it to train AI models. People at ViewFerry do not read it except to keep the service secure, to comply with the law, or when an organization asks us for help with it.
ViewFerry's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
ViewFerry uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's use of your information is covered by the Google Privacy Policy.
Disconnecting
An owner can disconnect a Google account at any time from ViewFerry. We then delete the stored access, ask Google to revoke it, and stop reading data for it. You can also remove ViewFerry's access from your Google Account's third-party connections page; we then stop reading the data and remove what we stored within 30 days.
Services that help us run ViewFerry
- Hosting and backups: our servers and encrypted backups, used only to run and recover the service.
- Sign-in: our identity service at auth.viewferry.com, which handles your password and multi-factor authentication. ViewFerry itself never sees your password.
- Google: YouTube, Business Profile and Maps, only for features an organization turns on. Screens that show YouTube videos load them from YouTube's privacy-enhanced player.
- OpenAI: only when someone asks the layout assistant for designs, we send that request and the layout's text and settings, not media files. OpenAI does not use API data to train its models.
We may also disclose information when the law requires it, or to protect people, our users or the service.
How long we keep it
We keep your account and organization content while the organization uses ViewFerry. When content is deleted it is removed from screens and, after any undo period shown in the app, from storage; encrypted backups age out on a rolling schedule within 13 months and are used only to recover the service. When an organization leaves, we delete its content and connected accounts. The activity history and records needed for security or legal reasons may be kept longer.
Security
Traffic is encrypted in transit. Each organization's data is separated in the database, connected-account access and service keys are encrypted at rest, screens hold their own device credentials, and backups are encrypted. No system is perfectly secure; we will tell affected organizations if a breach affects their data.
Your choices and rights
You can see and change your information in the app, and owners can remove team members, content and connected accounts. Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to how we use it. Email support@viewferry.com and we will respond within 30 days. If your information came to us through an organization (for example, as a team member or a reviewer), we may refer you to that organization.
Children
ViewFerry is for organizations and is not meant for children under 16. We do not knowingly collect their information.
Changes
We will update this page when our practices change and change the date at the top. If a change is significant, we will tell organization owners before it takes effect.