Privacy Policy

Your privacy matters to us. This policy is written in plain language so it is easy to understand.

Who we are

X24Play (“X24Play”, “we”, “us”) makes digital-signage software that lets businesses play their own ads and content on TV screens. Our services include the website x24play.com, the X24 TV apps (Xlite, Xpro and XPromax), the X24 Hub, the X24 web app and the X24cloud storage feature (together, the “Services”).

This policy explains what information we collect, how we use it, and the choices you have. Questions: [email protected].

Information we collect

When you use our website

Demo requests: name, company, phone/WhatsApp number, email, city/country, number of screens, plan of interest and your message.
Reviews (testimonials): name, business and role, city/country, language, your review and your consent to publish it.
WhatsApp and email: the details and messages you send us when you contact us.
Security data: our hosting provider processes your IP address and browser information to deliver the site and block bots. With form submissions we store only a one-way, salted code derived from the IP address (not the IP address itself) to prevent spam.

When you use the Services

Account and licence details: organisation name, contact person, email, phone, licence type, expiry date and screen limit.
Device information: TV/device name, model, app version, online/offline status, storage status and pairing details.
Usage and playback information: schedules, playlists, what played and when (proof-of-play reports) and error logs.
Your content: the images, videos and text you upload to play on your screens.

How we use information

To reply to demo requests, give quotes and provide support.
To provide, activate, renew and secure your licences and Services.
To publish reviews you have agreed we may show.
To prevent spam, fraud and misuse, and to enforce our Terms of Service.
To improve our products and fix problems.
To meet legal, tax and accounting obligations.

We do not sell your personal information and we do not use it for third-party advertising.

We share information only with providers that help us run the Services, under their own privacy and security terms:

Cloudflare: website hosting, security and the Turnstile bot check on our forms.
Supabase: secure database for demo requests, reviews and the brand logos shown on our website.
X24cloud storage provider: sign-in and cloud storage for XPromax customers (details in X24cloud sign-in and storage).
WhatsApp (Meta): if you choose to contact us on WhatsApp.

We may also disclose information if required by law, to protect our rights or users, or as part of a merger or sale of our business (with notice to you).

How long we keep information

Demo requests: as long as needed to follow up, and no longer than 24 months unless you become a customer.
Reviews: until you ask us to remove them.
Customer account data: while your licence is active, and afterwards only as long as needed for billing, legal or security reasons.
Your media in X24cloud: stays in your own X24cloud storage under your control until you delete it.

Security

We protect information with HTTPS encryption, strict database access rules, two-step verification for administrator access, bot protection on forms and signed device communication. No system is perfectly secure, so please keep your passwords and devices safe and tell us at once if you suspect misuse.

Your choices and rights

You can ask us to access, correct, export or delete your personal information, or withdraw consent (for example, to remove your published review). Email [email protected] and we will respond within 30 days. Depending on where you live, you may also have the right to complain to your local data-protection authority.

Cookies and browser storage

Our website does not use advertising or tracking cookies. Cloudflare may set strictly necessary security cookies to protect the site and run the bot check. Our admin tools use your browser’s storage only to keep you signed in during a session. If we add analytics in the future, we will update this policy first.

Children

Our Services are for businesses and are not directed to anyone under 18. We do not knowingly collect information from children.

International transfers

Our providers may process information in countries other than yours. When they do, we rely on their security commitments and legal safeguards to protect it.

X24cloud sign-in and storage (Google)

XPromax and X24cloud let you sign in with your own Google account and keep your signage files in your own Google Drive. When you connect a Google account, X24Play requests only:

Basic profile and email address, to identify your account and show which account is connected.
Google Drive “drive.file” access, which only covers files and folders that the X24 apps create or that you open with X24. X24 cannot see or change any other files in your Google Drive.

How we use it

To create and maintain the X24cloud folder in your Google Drive and store your media, schedules, playlists, screen settings and reports there.
To let your own TVs and your X24 Hub / web app download, play and manage that content.
To show you screen status, playback reports and alerts.

How it is stored and shared

Your media and signage files stay in your own Google Drive. X24Play does not copy your media to its own servers.
Sign-in tokens are kept on your own devices and X24 apps only, and are used only to provide the features above.
For managed-service customers, X24Play keeps a backup of account configuration (such as customer name, licence and device list, but not your media) so we can restore your service.
We do not sell Google user data, use it for advertising, or use it to build user profiles. We do not transfer it to anyone except as needed to provide the Services, for security, to comply with law, or with your consent.
No person at X24Play reads your Google Drive data unless you ask us to (for example, for support), it is needed for security or abuse investigation, or the law requires it.

X24Play’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

You can disconnect X24 at any time from your Google account at myaccount.google.com/permissions. You can delete the X24cloud folder from your Google Drive to delete the files stored there, and you can email us to delete any account information we hold.

Changes to this policy

We may update this policy as our Services change. We will post the new version here with a new “Last updated” date, and notify customers of important changes.

Contact us

X24Play · [email protected] · x24play.com