Privacy Policy

Effective: 2026-05-22 · Version: 1

1. Introduction

pbisignage is committed to protecting the privacy of our platform users. This Privacy Policy describes how we collect, use, store, and protect your personal information. By using our platform, you agree to the practices described in this policy.

The controller of the personal data collected is Jedizer Tecnologia Ltda, CNPJ 41.130.328/0001-00 ("we", "pbisignage").

2. Data we collect

pbisignage collects and stores only the following information:

• Full name (provided by your Microsoft account).
• Email address (provided by your Microsoft account).
• Microsoft Entra account identifier (object ID) and tenant identifier, for audit purposes.
• Authentication tokens needed to access Power BI (access and refresh tokens, stored encrypted at rest).
• Billing data: billing name, billing email, tax ID (CPF/CNPJ where provided), billing address, and Stripe customer identifier. Credit card data never touches pbisignage servers — it is processed directly by Stripe.
• Paired device identifiers (UUIDs generated by us) and player session tokens (stored as cryptographic hashes only, never in plain text).

3. Data we do NOT collect

Important: pbisignage does NOT have access to, NOT collect, and NOT store the data contained in your Power BI reports or your semantic models (datasets). We do not have access to the content, structure, or information of your dashboards. We only facilitate the display of reports through temporary tokens generated by the Power BI API, never accessing or storing the business data they contain.

4. How we use your data

The data we collect is used exclusively to:

• Authenticate and identify you on the platform.
• Manage your account, preferences, and subscription.
• Communicate important service information (plan changes, payment failures, material updates to these Terms).
• Provide technical support when requested.
• Comply with legal obligations, including the issuance of NFS-e (Brazilian electronic service invoice) for Brazilian customers as required by tax law.

5. Data sharing

pbisignage NEVER sells, rents, or shares your personal information with third parties for commercial or marketing purposes. Your data may be shared only:

(a) With essential processors required to operate the service, under confidentiality and data processing agreements:

• Microsoft Azure / Microsoft Entra / Power BI — authentication and access to reports.
• Supabase — database hosting and authentication.
• Stripe, Inc. — payment processing and recurring billing.
• Vercel (or equivalent provider) — web application hosting.

(b) When required by law, court order, or competent authority.

(c) To protect the rights, property, or safety of pbisignage, our users, or the public at large.

6. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Specifically:

• All client-server communication runs over HTTPS.
• Player session tokens and pairing codes are stored as hashes; never in plain text.
• 6-digit pairing codes are compared in constant time to resist timing attacks.
• Admin and service-role keys are isolated in server environment variables and never exposed to the client.
• Row Level Security (RLS) is enabled on every table that holds user data.

However, no method of transmission or electronic storage is 100% secure. In the event of an incident affecting personal data, we will notify you and the competent authorities within the deadlines required by applicable law.

7. Data retention

We retain your personal information only for as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law:

• Account data (name, email, Microsoft identifiers) — while the account is active, and for up to 12 months after cancellation, for dispute resolution and legal obligations.
• Fiscal data (tax IDs, invoices, receipts) — for the period required by Brazilian tax law (generally 5 years).

You may request the deletion of your account and personal data at any time (see section 8).

8. Your rights

In accordance with Brazil's General Data Protection Law (LGPD — Law 13.709/2018) and, where applicable, the General Data Protection Regulation (GDPR — EU 2016/679), you have the right to:

(a) Access your stored personal data.

(b) Correct incomplete, inaccurate, or outdated data.

(c) Request the anonymization, blocking, or deletion of your data.

(d) Request portability of your data in a structured, interoperable format.

(e) Revoke consent previously granted.

(f) Obtain information about the entities with whom we share your data.

(g) Object to processing carried out on a basis other than consent.

To exercise any of these rights, send your request to talkto@pbisignage.com. We will respond within 15 days.

9. Cookies and similar technologies

pbisignage uses only essential cookies for the service to function:

• Supabase authentication cookie: keeps your session active after sign-in.
• Language preference cookie (NEXT_LOCALE): remembers your chosen language among English, Portuguese (Brazil), Spanish, Italian, German, French, Dutch, and Arabic.

We do not use analytics, advertising tracking, or behavioral profiling cookies. We do not share cookies with ad networks. A notice is shown in the footer on your first visit.

10. International transfers

pbisignage operates on cloud infrastructure that may include servers in the United States and other regions. By using the service, you consent to the possible transfer of your data outside Brazil, with adequate safeguards required by LGPD (standard contractual clauses, processor certifications, or an adequacy decision where applicable).

11. Changes to this Policy

We may update this Policy periodically to reflect changes in our practices, or for other operational, legal, or regulatory reasons. We will notify you of material changes via in-platform notice or email. Continued use of the platform after such changes constitutes your acceptance of the revised policy.

12. Contact

Questions about this Policy, exercise of rights, or privacy-related requests:

talkto@pbisignage.com

Data Protection Officer (DPO): to be formally designated. Until then, all privacy-related communications should be directed to the email above.