Legal
Privacy policy
Effective 1 October 2026 · Draft for legal review
Who we are
Northscreen provides branded TV channels for organizations such as churches, clinics, and gyms. For the organization's channel content and its viewer list, the organization decides what to publish and who may watch; Northscreen processes that information on the organization's behalf.
What we collect
- Operators (people who run a channel): name, email, a salted password hash, role, and a record of billing, access, and team changes they make.
- Viewers with a pass: email, optional name, pass status and billing period, and a random identifier for each device that used the pass (up to the channel's device limit).
- Playback: resume positions keyed to a random device identifier, kept 30 days.
- Payments: processed by Stripe or Roku. We receive status, amounts, and dates, never full card numbers.
- Technical logs: IP address and request metadata for security and rate limiting, kept up to 30 days.
How we use it
To run channels, bill organizations, sell and validate viewer passes, send account and billing emails (sign-in codes, receipts, renewal reminders, security alerts), prevent abuse, and fix problems. We don't sell personal information, don't run third-party ads in the Northscreen apps, and don't use viewer data for advertising.
Service providers
Vercel (hosting), Neon (database), Cloudflare (video and image delivery), Stripe (payments), Roku (on-TV subscriptions), Resend (email), and Sentry (error reports, with personal data minimized). Each is bound by a data-processing agreement.
Children
Channels marked “made for kids” follow COPPA and Roku's Kids & Family rules: no behavioral advertising, and no personal information collected from children. Viewer passes are purchased by adults.
Health information
Northscreen isn't designed to store protected health information. Clinics should publish general program content and not put patient-identifying details in titles or descriptions.
Your choices and rights
Viewers can see, change, or cancel their passes at /account. Operators can update their profile in the console. To access, correct, export, or delete your data, email support@northscreen.tv; we respond within 30 days. Depending on where you live (for example California or the EU), you may have additional rights, including to appeal a decision.
Retention and security
We keep account data while the account is active and for up to 90 days after closure, and billing records as long as tax law requires. Passwords are hashed with bcrypt, session tokens are stored only as hashes, traffic is encrypted in transit, and sensitive actions are audit-logged.
Contact
support@northscreen.tv