Effective date: September 22, 2026

This Privacy Policy explains how Duke Technologies LLC, doing business as Display NOW ("Display NOW," "we," "us"), collects, uses, and protects personal information when you visit displaynow.io, use the Display NOW platform and apps (the "Service"), or interact with us. Capitalized terms not defined here have the meanings in our Terms of Service.

The short version

We don't sell your personal information. We use it to run, secure, support, and improve the Service.
Your content belongs to you. We process media, playlists, and data you upload only to provide the Service to you.
We don't train AI on your content. Our AI providers don't train their models on it either.
Connected accounts stay scoped. Google and other integrations reach only what you choose to connect.
You have choices. You can access, correct, export, or delete your data, and opt out of marketing emails at any time.
Details live in one place. Our security practices and subprocessor list are at our Trust Center.

1. Who We Are and Our Role

1.1 Controller. Display NOW is the controller of personal information we collect for our own purposes. This includes website visitor data, account and billing information, sales and support communications, and usage data about the Service.

1.2 Processor. When our customers upload or connect content that contains personal information, such as employee photos, schedules, or data from connected spreadsheets, the customer is the controller and Display NOW processes that information on the customer's behalf, under our Terms of Service and Data Processing Addendum. If your information appears in a Display NOW customer's content or screens, please contact that organization directly. We will help them respond to your request.

1.3 Scope. This policy does not cover third-party websites, apps, or integrations you connect to the Service. Their own privacy policies apply.

2. Information We Collect

2.1 Information you give us.

Account information: name, email, phone, company name, job title, password, and account preferences.
Billing information: billing contact, billing and shipping address, tax ID or exemption details, and purchase history. Card and bank details are collected and stored by our payment processors, not by us; we receive only limited details such as card type, last four digits, and expiration date.
Customer Content: media, playlists, schedules, templates, text, and data you upload, create, or connect.
Communications: messages, support tickets, chat transcripts, call recordings where you are notified, survey responses, and feedback.
Revenue Engine information: if you use advertiser payments, information needed to verify your identity and send payouts, collected by our payment processor, and information about advertisers and campaigns you register.
Event and marketing information: details you share when booking a demo, registering for a webinar, or joining our referral or partner programs.

2.2 Information we collect automatically.

Website data: IP address, browser and device type, pages viewed, referring URLs, approximate location derived from IP, and interactions, collected through cookies and similar technologies (see Section 7).
Service usage data: features used, actions taken, log-in times, and errors in Display NOW Manager and our apps.
Screen and device data: player and device identifiers, device model, operating system, app version, network status, IP address, uptime, playback logs, proof-of-play records, screenshots used for remote preview, and diagnostic data from players connected to your account.
QR code analytics: when someone scans a Display NOW dynamic QR code, we record scan time, approximate location derived from IP, and device and browser type.

2.3 Information from third parties.

Connected accounts: content and account details from services you connect, such as Google, Microsoft, Canva, or social media, limited to the permissions you grant.
Partners and resellers: contact and order details when you buy through a Display NOW partner.
Business and marketing sources: business contact information from data providers, event organizers, and public sources, used for B2B sales outreach.
Payment and fraud providers: payment status and fraud-risk signals.

3. How We Use Information

We use information for the purposes below. For visitors in the EEA and UK, the legal basis for each purpose is shown in parentheses.

Provide the Service (contract): create accounts, deliver content to screens, run integrations and AI Features, and process payments.
Support and communicate (contract; legitimate interests): answer tickets and send service notices, renewal reminders, and security alerts.
Secure the Service (legitimate interests; legal obligation): detect fraud, abuse, and security incidents, and enforce our Terms.
Improve the Service (legitimate interests): analyze usage and diagnostics, fix bugs, develop features, and create de-identified aggregate statistics.
Marketing (consent where required; otherwise legitimate interests): send product news and offers, run advertising, and measure campaigns.
Legal and financial (legal obligation; legitimate interests): handle taxes, accounting, audits, and legal claims, and respond to lawful requests.

We process Customer Content only to provide the Service to that customer, as described in our Terms and DPA. We do not use Customer Content for our own marketing or advertising.

You can unsubscribe from marketing emails at any time using the link in any email. We will still send service and account messages.

4. AI Features

When you use AI Features, such as AI menu boards or image generation, the text, images, and files you submit ("Inputs") are sent to our AI technology providers to generate results ("Outputs"). Our providers are listed on our Trust Center.

Our AI providers do not use your Inputs or Outputs to train their models.
We do not use your Customer Content to train generative AI models without your permission.
Providers may retain Inputs and Outputs briefly for abuse monitoring and legal compliance, as described in their terms.
Please do not include sensitive personal information, such as health or financial account data, in Inputs.

5. Connected Accounts, Integrations, and Websites

The Service lets you connect other accounts and display content from them. You decide what to connect, and you can disconnect at any time. For every integration:

we request only the permissions needed for the features you use;
we use connected data only to display it on your screens and provide the connected feature;
we do not sell it, use it for advertising, or use it to train generalized AI models;
we store access tokens encrypted and keep only cached copies needed for playback, which refresh as the source changes; and
when you disconnect, we stop accessing that account and promptly delete stored data from it, except where the law requires us to keep it or it remains in backups until they rotate out.

5.1 Google. If you connect Google Workspace services such as Google Sheets, Slides, Drive, or Calendar, we access only the files and data you select through Google's file picker, or that are needed for the feature you enable.

Display NOW's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:

sell Google user data;
use or transfer it for advertising, including retargeting or personalized ads;
use it to train, develop, or improve generalized AI or machine-learning models;
allow humans to read it, except with your consent, for security or legal reasons, or when aggregated and anonymized for internal operations.

You can disconnect Google in the Service or in your Google Account permissions.

5.2 Microsoft 365. If you connect Microsoft 365 to display PowerPoint presentations, Excel workbooks, or Power BI reports, we access data through Microsoft's permission system (Microsoft Entra ID) using only the permissions shown on the consent screen. Your organization's administrator may need to approve those permissions and can revoke them at any time. We comply with the Microsoft APIs Terms of Use and handle Microsoft data under the commitments at the top of this section. You can disconnect Microsoft 365 in the Service or remove Display NOW from your Microsoft account's apps; administrators can also remove it in the Microsoft Entra admin center.

5.3 Other integrations. We regularly add integrations, such as design tools (for example, Canva), social media feeds, business intelligence dashboards, automation tools (for example, Zapier), and smart-building platforms (for example, SmartThings). Each is covered by the commitments at the top of this section. When you connect one, the provider's own privacy policy also applies to data you share with it. Current integrations are listed in the Service and our Help Center.

5.4 Websites you display on screens. You can use our web page app to show websites on your screens. When you do:

Third-party websites. The website may receive information about the device or service displaying it, such as an IP address, and may set its own cookies or trackers. Display NOW does not control those websites or their privacy practices.
Login-protected pages. If you give us credentials or session details so a screen can show a password-protected page or dashboard, we protect them and use them only to display that page.
Your responsibility. Screens are often in public view. Before displaying a website, especially an internal dashboard, make sure it doesn't expose personal or confidential information to people who shouldn't see it.

6. How We Share Information

We do not sell personal information for money. We share it only as follows:

Service providers and subprocessors that help us operate, such as cloud hosting, content delivery, payment processing, tax calculation, email, customer support, analytics, AI, and shipping and fulfillment providers. They may use personal information only to provide services to us. Our subprocessor list is on our Trust Center.
Integrations you choose. When you connect a Third-Party Service, we exchange data with it as needed for that integration.
Within your organization. Account administrators can see the activity and content of Authorized Users in their account. If you use a work email, your organization may be able to take control of your account.
Partners and resellers, when you buy or receive support through them, limited to what they need to serve you.
Advertising and analytics partners, such as Meta, through cookies on our website and hashed contact list matching, as described in Section 7.
Legal and safety reasons, when we believe in good faith it is necessary to comply with law or legal process, enforce our Terms, or protect the rights, property, or safety of Display NOW, our customers, or others.
Business transfers. If Display NOW is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy or one that is at least as protective.
With your consent, or at your direction.

7. Cookies, Advertising, and Remarketing

Our website and web app use cookies, pixels, and similar technologies. The categories are:

Strictly necessary: sign-in, security, load balancing, and remembering your preferences. These can't be turned off because the site needs them to work.
Analytics: understanding how visitors use our site and product.
Marketing: measuring campaigns and showing Display NOW ads on other sites.
Functional: chat, scheduling, and saved preferences. Turning these off may stop some features from working.

We use tools such as Google Tag Manager, Google Analytics, HubSpot, and advertising pixels, including the Meta Pixel. You can block or delete cookies at any time through your browser settings, and you can opt out of our advertising uses of your information by emailing [email protected]. We are working on adding self-service privacy controls to our website and will update this policy when they launch.

Why we advertise. Display NOW competes against much larger, well-funded companies. For a company our size, online advertising, including remarketing, is essential to reaching the businesses that need us, staying competitive, and keeping our prices low. We would rather be upfront about how it works than bury it, so here are the details and how to opt out.

How our advertising works.

Website pixels. We use advertising pixels, including the Meta Pixel, on our website. They record visits and actions, such as viewing pricing or starting a trial, so we can show Display NOW ads to people who have visited our site and measure whether our ads work.
Contact list matching. We may share contact information of prospects and customers, such as email address and phone number, with advertising platforms including Meta (Facebook and Instagram). The information is hashed (converted to an unreadable code) before or on upload. The platform uses it to match people who have accounts there so we can show relevant ads, exclude existing customers from ads they don't need, or reach similar businesses. Under the platforms' terms, they may use this data only to deliver and measure our ads and must delete information that does not match.

We never share Customer Content, Google user data, or payment card details with advertising platforms.

Your choices. To opt out of our advertising uses of your information, including contact list matching, email [email protected] with the subject "Opt out of advertising." We will exclude your information from future uploads and refresh our advertising audiences without it. You can also block cookies in your browser, adjust your ad preferences directly with Meta, and opt out of interest-based ads from many companies through the Digital Advertising Alliance. Opting out does not stop all ads; you may still see Display NOW ads that are not based on your activity.

8. Screen Viewers, QR Codes, and Customer Data

People who see Display NOW screens in a store, office, school, or other location generally do not interact with Display NOW directly. Display NOW players do not currently use cameras, facial recognition, or audience-measurement sensors. If we add features like these, we will update this policy before they launch.

If a customer adds cameras, sensors, QR codes, forms, or other features that collect information from viewers, that customer is responsible for providing any required notices and obtaining any required consents. When someone scans a Display NOW dynamic QR code, we process scan data as described in Section 2.2, on behalf of the customer who created the code.

For questions about content on a specific screen, contact the organization operating it.

9. Data Retention and Deletion

We keep personal information only as long as needed for the purposes in this policy.

Customer Content: during your subscription, plus a 30-day export window, then deleted from active systems within 60 days and from backups on their normal rotation.
Account information: while your account is open, then as needed for legal, tax, and dispute purposes.
Billing and tax records: as required by tax and accounting law, typically 7 years.
Screen logs and diagnostics: as long as needed to operate, secure, and troubleshoot the Service, then deleted or de-identified.
Free plan accounts: until you or we close the account.
Marketing contacts: until you unsubscribe or ask us to delete your information.
Support communications: as long as needed to support you and keep accurate records.

We may keep de-identified or aggregated data that no longer identifies you, and data we must retain to comply with law or resolve disputes.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, logging and monitoring, employee confidentiality obligations, and vendor security reviews. Details and our current compliance reports are available at our Trust Center.

No system is perfectly secure. You are responsible for keeping your credentials safe and for enabling multi-factor authentication where available. If we confirm a security incident affecting your personal information, we will notify you as required by law.

11. International Transfers

Display NOW is based in the United States and serves customers in many countries. We and our service providers primarily process personal information in the United States. When we transfer personal information from the European Economic Area, United Kingdom, or Switzerland, we rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, as set out in our DPA.

12. Your Privacy Rights

Depending on where you live, you may have the right to:

Access the personal information we hold about you and receive a copy in a portable format;
Correct inaccurate information;
Delete your information;
Object to or restrict certain processing, including processing based on legitimate interests;
Opt out of marketing, targeted advertising, and any "sale" or "sharing" of personal information;
Withdraw consent where we rely on it, without affecting earlier processing;
Appeal our decision on your request; and
Complain to your local data protection authority.

How to make a request. Email [email protected]. You can also update most account information directly in the Service. We will verify your identity before acting, usually by confirming control of your account email. You may use an authorized agent where the law allows; we may ask for proof of their authority. We respond within the time the law requires, typically 30 to 45 days, and will not discriminate against you for exercising your rights.

If you are a customer's end user or viewer, we will refer your request to the customer who controls your information, and help them respond.

13. U.S. State Privacy Disclosures

This section applies to residents of California and other U.S. states with comprehensive privacy laws.

Categories collected in the past 12 months: identifiers (name, email, IP address, device IDs); commercial information (purchases and subscriptions); internet and network activity (website and Service usage); approximate geolocation derived from IP; professional information (company and job title); audio or electronic information (support call recordings, with notice); and inferences used for marketing. Sources and purposes are described in Sections 2 and 3, and recipients in Section 6.

Sale and sharing. We do not sell personal information for money. Our use of advertising cookies and contact list matching with advertising platforms such as Meta may be considered "selling" or "sharing" for cross-context behavioral advertising under some state laws. You can opt out by emailing [email protected] with the subject "Do Not Sell or Share." We do not knowingly sell or share personal information of anyone under 16.

Sensitive information. We do not use or disclose sensitive personal information for purposes that would require offering a right to limit under California law.

Nevada. We do not sell covered information as defined by Nevada law.

14. Children, Changes, and Contact

Children. The Service is intended for businesses and users 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you believe a child has given us personal information, contact us and we will delete it. Schools and other customers that display content involving students are responsible for obtaining any required permissions.

Changes. We may update this policy from time to time. If we make material changes, we will notify customers by email or in the Service before they take effect, and update the effective date above.

Contact. Questions or requests about privacy:

Duke Technologies LLC d/b/a Display NOW 944 Dorchester Ave, Unit 23 Boston, MA 02125, United States

Email: [email protected]
Phone: (781) 375-1989
Security and subprocessors: trust.displaynow.io

Privacy Policy