Privacy Policy

1. Who we are

The data controller is Piyanos Teknoloji A.Ş., Evliya Çelebi Mah. Sadi Konuralp Cad. IKSV Vakfı No: 5 İç Kapı No: 2, 34430 Beyoğlu / İstanbul, Türkiye. Email: [email protected]. Phone: +90 507 588 04 81.

For the content our customers upload to ScreenHub and show on their screens (images, videos, menus, etc.), the customer is the controller; Piyanos processes that content only to provide the service, on the customer’s instructions, as a processor.

2. Data we process

What we process depends on how you use ScreenHub:

• Website visitors: our website uses no cookies and no tracking tools that identify you. When you visit, your IP address, browser and device details, the page requested and the time are processed by Cloudflare and our server for security and delivery. Visits are measured in aggregate with Cloudflare Web Analytics, which uses no cookies and does not identify individuals.
• Account owners and dashboard users: name, email address, phone number, organization (business) name, password (stored only as an irreversible hash), session tokens, and the country derived from your IP address at sign-up.
• Licensing and payments: chosen plan, number of screens, license period, payment records and related notes. We do not collect or store card details.
• Screen (device) data: device name, IP address, app and Android version (for the web player, the browser and operating system name and version), screen resolution and orientation, storage and memory status, online status and last-seen time, screenshots requested from the dashboard, and playback logs showing which content played, when and for how long.
• Communications: what you share with us by email or phone and the content of that correspondence.

3. Why we process it and on what legal basis

• To create your account, provide the service, pair your screens, publish content and manage licenses and payments — performance of a contract.
• To meet invoicing, accounting and regulatory obligations — legal obligation.
• To keep the service secure, prevent abuse and unauthorized access (e.g. login rate limiting), find and fix errors, improve the service, and let our operations team follow up on new sign-ups and licenses — legitimate interests.
• To establish, exercise or defend legal claims.

We do not sell your personal data or share it with third parties for their marketing.

4. Who we share it with and international transfers

To run the service we share data with the following providers, limited to what each service needs:

• Hetzner Online GmbH — server hosting; our database and application servers run in a data center in Finland (EU).
• Cloudflare, Inc. — DNS, network security and delivery (all traffic passes through Cloudflare), storage of uploaded media and encrypted database backups (Cloudflare R2), and cookieless visit statistics.
• Telegram — internal notifications to our operations team only: new sign-ups (name, email, phone, organization name, country), license follow-ups and system errors.
• Google LLC — distribution of the ScreenHub Player app through Google Play (Google Play’s own privacy policy applies).
• Competent public authorities — only when legally required.

Because these providers operate servers outside Türkiye, your personal data is transferred abroad. Such transfers are carried out in accordance with Article 9 of the KVKK and, where the GDPR applies, with appropriate safeguards.

For the weather widget, the city name you enter is sent through our server to OpenStreetMap Nominatim and MET Norway; for the currency widget, rate requests go to the Central Bank of the Republic of Türkiye and Frankfurter. These requests contain no personal data about visitors or users.

5. How long we keep it

• Account, device, content, screenshot and playback data are kept while your account is open, and deleted or anonymized when the account is deleted.
• Invoices and payment records are kept for the period required by tax and commercial law (generally 10 years).
• Session refresh tokens are valid for at most 30 days. Database backups are kept for at most 30 days, so deleted data also leaves the backups within that period.
• Server and security logs are kept only as long as needed for their purpose.

6. Security

All traffic between the website, the dashboard, the app and our servers is encrypted over HTTPS. Passwords are stored irreversibly and sessions are protected with short-lived access tokens. Each customer’s devices, content and users are kept separate from other customers. Server access is limited to authorized staff, and backups are kept only in private storage.

7. Cookies and local storage

Our website uses no cookies. The dashboard uses only your browser’s local storage (localStorage) to keep you signed in and remember your language. The web player keeps the screen’s identity, current playlist and license status in local storage, and the images and videos it plays in the browser cache for offline playback. This is strictly necessary for the service and is not used for advertising or tracking.

8. Your rights

Subject to applicable law, you have the right to know whether we process your personal data and to access it; to learn the purpose of processing and the recipients it was transferred to; to have inaccurate data corrected; to have your data deleted; to object to a decision made solely by automated means that affects you; and to claim compensation for damage caused by unlawful processing. Under the GDPR you may also restrict processing, receive your data in a portable format, object to processing based on legitimate interests, and lodge a complaint with your local supervisory authority.

9. How to contact us

Send requests about your data to [email protected] or in writing to Evliya Çelebi Mah. Sadi Konuralp Cad. IKSV Vakfı No: 5 İç Kapı No: 2, 34430 Beyoğlu / İstanbul, Türkiye. We respond free of charge within 30 days at the latest.

You can also ask us to delete your account and related data with the account deletion request form.

10. Changes

We may update this policy when our service or the law changes. The current version is always published on this page, with the date of the last update at the top.