Privacy statement

1. What we never collect

• No cameras. Our TV Sticks and screens have no camera, and we never ask for one.
• No Wi-Fi or Bluetooth tracking. We never detect, count or follow phones near a screen.
• No shopper identifiers. We never collect anything that identifies the people in a venue.
• No audience measurement. We count plays, not people.

This is absolute. The people walking past a screen are never part of MyLocalAds' data, and we don't use any service that would collect them.

2. What we collect

• Your account: your name, email address, the business you represent, your role, and your mobile number if you add one for SMS alerts.
• Your business: business name, ABN, GST registration, venue addresses, opening hours and the kind of venue.
• Your ads and promotions: the images and videos you upload, and the review decisions on them.
• Screens: each TV Stick's identifier, software version, whether it's online, and a record of every play (which ad, which screen, when).
• Money: invoices, statements and payouts. Card and bank details are collected and held by Stripe, not by us.
• Using the console: sign-in records (including your IP address and browser), an activity log of changes made in your workspace, and error reports when something breaks.
• Asking to join: the email address you leave when you request early access on our website.
• Our public website: if you accept in the cookie banner, Google Analytics measures visits to the public pages. If you don't, it never loads, and the console is never measured.

3. How we use it

• To run the network: decide what plays where, play it, and prove it ran.
• To bill advertisers, pay venues, and keep the tax records the law requires.
• To send you the emails and texts you need, such as invitations, review decisions and offline alerts. You can switch off the optional ones in your account.
• To keep MyLocalAds secure and fix problems.

We don't sell your information, and we don't use it to advertise to you on other sites.

4. Who we share it with

Only the providers that help us run MyLocalAds, under contracts that limit what they can do with it:

• Supabase (database, storage and sign-in; a Sydney region is planned for the pilot)
• Vercel (hosting the website and console; United States)
• Stripe (payments, invoices and payouts; United States and Australia)
• Resend (email; United States) and ClickSend (SMS; Australia)
• Sentry (error reports; United States)
• Google Analytics (public website visits, only with your consent; United States)
• OpenStreetMap's Nominatim (turns a venue's address into a map position; United Kingdom)

When you view a map, your browser fetches map tiles from Mapbox (United States), which also counts how many times a map is opened, or from CARTO or MapTiler; each sees your IP address. The proof-of-play page uses CARTO or MapTiler only. Suburb boundaries drawn on maps come from the Australian Bureau of Statistics (CC BY 4.0) and are served by us. Advertisers see where and when their own ads played; venues see what played on their own screens. We may also share information when the law requires it.

5. How long we keep it

We keep play records, invoices and statements for seven years, because they are financial records. Other account information is kept while your account is open; when you close it, ask us and we delete or anonymise it, unless the law requires us to keep it longer.

6. Your rights

• You can ask to see the personal information we hold about you, and ask us to correct it.
• You can ask us to delete your account, subject to the records we must keep.
• To ask, or to make a complaint, email privacy@mylocaleyes.com.au. We'll reply within 30 days. If you're not happy with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

7. Changes

If we change this statement in a way that matters to you, we'll tell you by email before the change takes effect. The list of things we never collect will not get shorter.