1. Who we are
This Privacy Policy is issued by Guycon Pty Ltd (ABN 36 618 914 480), trading as PUTTV ("PUTTV", "we", "us"). We are an Australian company and we handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
This policy replaces section 9 of the Customer Agreement, as that section anticipates. Everything else in the Customer Agreement continues to apply.
2. What this policy covers
It covers the PUTTV website (puttv.io), the dashboard (app.puttv.io), the browser display at tv.puttv.io, our REST and Socket.IO API, and the software that runs on screens you pair to your account.
It does not cover other companies' sites we link to, or the content you choose to display on your own screens.
3. What we collect
- Account data — your name, email address and authentication data, processed through our sign-in provider, Auth0. We never receive or store your password.
- Customer Content — the templates, images, text and data feeds you create or upload so they can be shown on your screens.
- Device and usage data — device identifiers, pairing status, group and screen names, connection state, IP addresses, and server logs used to operate, secure and troubleshoot the service.
- Billing data — your plan, screen count and payment status. Card payments are handled by our payment provider; we never see or store full card numbers.
- Website analytics — see section 4.
We do not collect sensitive information (such as health, biometric or political information), and we ask that you do not send it to us.
5. How we use your information
- To provide the service — pairing screens, storing your content, and pushing it to the right devices.
- To keep the service secure — authenticating requests, rate limiting, and investigating abuse or faults.
- To bill you and to manage your plan.
- To support you when you contact us.
- To improve the product, using aggregate usage patterns.
- To meet our legal and accounting obligations.
7. Where your data is stored
Our application servers, database and stored content are hosted in the European Union (Frankfurt, Germany). Because we are an Australian company, this means your personal information is disclosed to overseas recipients for the purposes of Australian Privacy Principle 8. The providers listed in section 6 may also process data in other countries, including the United States.
We take reasonable steps to ensure those recipients handle your information consistently with this policy.
8. How long we keep it
We keep your account data and content for as long as your account is open. When your account is closed we delete or de-identify it within a reasonable period, except where we must keep records for legal, tax or accounting reasons. Server logs and backups are kept on a rolling basis and are overwritten in the ordinary course.
9. How we protect it
All traffic to our sites, API and devices is encrypted in transit with TLS. Device secrets and API keys are stored hashed, not in plain text, and an API key only ever reaches screens owned by the account that created it. Access to production systems is restricted and uses key-based authentication. We take daily encrypted backups.
No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
10. Your rights
You can ask us to give you a copy of the personal information we hold about you, or to correct it if it is wrong. Email info@puttv.io and we will respond within a reasonable period, normally 30 days. We may need to verify your identity first.
You can delete most of your content yourself from the dashboard, and you can ask us to close your account at any time.
If you are unhappy with how we have handled your personal information, contact us first. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
If you are in the European Economic Area or the United Kingdom, you may also have rights to erasure, restriction, portability and objection under the GDPR, and a right to complain to your local data protection authority. Contact us at the address above to exercise them.
11. Children
PUTTV is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the service changes. The version number and date at the top of this page always reflect the current version. If a change materially affects how we handle your personal information, we will tell you by email or in the dashboard before it takes effect.
13. Contact us
Privacy questions, access and correction requests, and complaints: info@puttv.io.
Guycon Pty Ltd (ABN 36 618 914 480), trading as PUTTV, Victoria, Australia.