Legal

Privacy Policy

Version 1.1 · Last updated 20 August 2026 · Applies to puttv.io and every PUTTV account.

Plain-English summary (the numbered sections below are the actual policy — if they conflict with this summary, they win):
  • We collect what we need to run the service: your account details, the content you put on your screens, and technical data from your devices.
  • We don't sell your personal information, and we don't use it for advertising.
  • Our website analytics run without cookies — we don't set a tracking cookie or build a profile of you.
  • Your data is stored on servers in the European Union. We're an Australian company.
  • You can ask us what we hold about you, ask us to correct it, or complain — email info@puttv.io.

1. Who we are

This Privacy Policy is issued by Guycon Pty Ltd (ABN 36 618 914 480), trading as PUTTV ("PUTTV", "we", "us"). We are an Australian company and we handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

This policy replaces section 9 of the Customer Agreement, as that section anticipates. Everything else in the Customer Agreement continues to apply.

2. What this policy covers

It covers the PUTTV website (puttv.io), the dashboard (app.puttv.io), the browser display at tv.puttv.io, our REST and Socket.IO API, and the software that runs on screens you pair to your account.

It does not cover other companies' sites we link to, or the content you choose to display on your own screens.

3. What we collect

  • Account data — your name, email address and authentication data, processed through our sign-in provider, Auth0. We never receive or store your password.
  • Customer Content — the templates, images, text and data feeds you create or upload so they can be shown on your screens.
  • Device and usage data — device identifiers, pairing status, group and screen names, connection state, IP addresses, and server logs used to operate, secure and troubleshoot the service.
  • Billing data — your plan, screen count and payment status. Card payments are handled by our payment provider; we never see or store full card numbers.
  • Website analytics — see section 4.

We do not collect sensitive information (such as health, biometric or political information), and we ask that you do not send it to us.

4. Cookies and website analytics

We use Umami to understand which pages and links people use, so we can improve the site. Umami does not use cookies. It sets nothing on your device, assigns you no persistent identifier, and cannot follow you across other websites. To count a visit only once per day it derives a one-way hash from your IP address, your browser's user-agent string and a salt that changes daily; the hash cannot be reversed, and because the salt rotates it cannot be linked to you from one day to the next.

What it records is aggregate: pages viewed, the country your visit came from, referring site, browser and device type, and clicks on our sign-up, sign-in and download buttons. We do not use Google Analytics.

We do not run advertising or remarketing tags, and we do not sell or share personal information for advertising.

When you sign in, our sign-in provider stores a session token in your browser so you stay logged in. That is necessary for the service to work and is not used for tracking.

5. How we use your information

  • To provide the service — pairing screens, storing your content, and pushing it to the right devices.
  • To keep the service secure — authenticating requests, rate limiting, and investigating abuse or faults.
  • To bill you and to manage your plan.
  • To support you when you contact us.
  • To improve the product, using aggregate usage patterns.
  • To meet our legal and accounting obligations.

6. Who we share it with

We do not sell personal information. We share it only with the providers we need to run the service, and only as far as each needs:

  • Auth0 (Okta) — sign-in and account authentication.
  • Chargebee — subscriptions and billing.
  • Umami Cloud — website analytics, in the cookieless configuration described in section 4. It receives page and click events only, never your account details or your content.
  • Our hosting provider — the servers our infrastructure runs on, located in the European Union.

We may also disclose information where the law requires it, to enforce our terms, or if our business is sold or transferred — in which case this policy continues to apply to information already collected.

7. Where your data is stored

Our application servers, database and stored content are hosted in the European Union (Frankfurt, Germany). Because we are an Australian company, this means your personal information is disclosed to overseas recipients for the purposes of Australian Privacy Principle 8. The providers listed in section 6 may also process data in other countries, including the United States.

We take reasonable steps to ensure those recipients handle your information consistently with this policy.

8. How long we keep it

We keep your account data and content for as long as your account is open. When your account is closed we delete or de-identify it within a reasonable period, except where we must keep records for legal, tax or accounting reasons. Server logs and backups are kept on a rolling basis and are overwritten in the ordinary course.

9. How we protect it

All traffic to our sites, API and devices is encrypted in transit with TLS. Device secrets and API keys are stored hashed, not in plain text, and an API key only ever reaches screens owned by the account that created it. Access to production systems is restricted and uses key-based authentication. We take daily encrypted backups.

No system is perfectly secure. If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

10. Your rights

You can ask us to give you a copy of the personal information we hold about you, or to correct it if it is wrong. Email info@puttv.io and we will respond within a reasonable period, normally 30 days. We may need to verify your identity first.

You can delete most of your content yourself from the dashboard, and you can ask us to close your account at any time.

If you are unhappy with how we have handled your personal information, contact us first. If we cannot resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If you are in the European Economic Area or the United Kingdom, you may also have rights to erasure, restriction, portability and objection under the GDPR, and a right to complain to your local data protection authority. Contact us at the address above to exercise them.

11. Children

PUTTV is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the service changes. The version number and date at the top of this page always reflect the current version. If a change materially affects how we handle your personal information, we will tell you by email or in the dashboard before it takes effect.

13. Contact us

Privacy questions, access and correction requests, and complaints: info@puttv.io.

Guycon Pty Ltd (ABN 36 618 914 480), trading as PUTTV, Victoria, Australia.