Last Updated: July 2026
ApexPoster is a cloud-based digital signage service provided by Apex Technology Group, Inc. (“Apex,” “we,” “us,” or “our”), a Delaware corporation. It lets you upload images, video, and documents, arrange them into playlists and schedules, and display them on screens you control.
This Privacy Policy explains what personal information we collect, why, who we share it with, and what you can do about it. It covers the ApexPoster website at apexposter.net, the ApexPoster dashboard, our player applications for Fire TV, Android TV, Tizen, webOS, and Windows, and our APIs (together, the “Services”). It is a companion to the ApexPoster Terms of Service.
The short version. We collect what we need to run your account and bill you: your email, your screens, your media, and technical logs. We never see your card number. We don't sell your information, we don't run advertising trackers inside the dashboard, and our players have no cameras, microphones, or audience measurement of any kind. Delete your account and we delete your data.
There are two distinct roles in ApexPoster, and which one applies changes who is responsible for your information.
We never see your password. Sign-in is handled by Google Firebase Authentication. Passwords are set, stored, and verified by Firebase and never reach our servers. Our systems only ever receive a signed token confirming that you authenticated successfully.
We do not store card numbers. Payment card details are collected, transmitted, and stored by Stripe on PCI-compliant infrastructure and never pass through or rest on our servers. Billing addresses, tax identifiers, and invoices are held by Stripe on our behalf.
When you install a player application on a device, that device registers with us. We collect and store:
Device identifiers are not tied to any individual. They identify a piece of hardware on your account, not a person.
Media files you upload — images, video, PDFs — along with their filenames, sizes, upload times, and any thumbnails, previews, or rasterized pages we generate from them so they can be displayed. Also the playlists, schedules, layouts, and any feed URLs or widget settings you configure. See Section 9 for how we treat this.
We use IP address to secure the Services, diagnose faults, and detect abuse — including the creation of multiple free accounts to evade plan limits, which our Terms prohibit.
If you email us or submit a support request, we keep the message and our reply for as long as needed to resolve the issue and to maintain a record of support history.
These are commitments, not omissions. If any of them change, we will update this policy first.
| Purpose | Information used | Legal basis |
|---|---|---|
| Creating your account, authenticating you, and providing the Services | Email, name, account settings, screens, content | Performance of our contract with you |
| Delivering content to your screens and keeping them running | Device identifiers and tokens, heartbeats, screen configuration | Performance of our contract with you |
| Charging you and keeping billing records | Billing identifiers, plan, screen count, billing audit | Performance of our contract; compliance with tax and accounting law |
| Sending transactional email — payment failures, plan changes, offline alerts, account notices | Email addresses you designate | Performance of our contract; our legitimate interest in telling you about your own account |
| Securing the Services, preventing abuse, and enforcing plan limits | IP addresses, logs, account and usage records | Our legitimate interest in protecting the Services and our customers |
| Diagnosing faults and improving the product | Logs, error diagnostics, aggregate usage counts | Our legitimate interest in operating a working service |
| Responding to support requests | Your correspondence and account context | Performance of our contract; our legitimate interest in supporting customers |
| Complying with law and responding to lawful requests | Whatever the obligation requires | Legal obligation |
Where we rely on legitimate interests, you may object based on your particular situation. See Section 14.
We distinguish between our public marketing pages and the authenticated dashboard, and treat them differently.
The dashboard uses only what it needs to work: a session or authentication token so you stay signed in, and local browser storage for interface preferences. These are strictly necessary and cannot be switched off without breaking sign-in. We place no advertising, marketing, or session-recording technologies inside the dashboard.
Our public pages currently load web fonts from Google Fonts, which discloses your IP address to Google when the page renders. Beyond that, our marketing pages currently carry no analytics or advertising cookies.
We may in future add analytics or advertising-measurement technologies to our public marketing pages — for example, to understand which pages lead people to sign up, or to measure the results of advertising we pay for. If we do, we will update this policy before doing so, we will request consent where the law requires it, and we will provide a way to manage your preferences. Our commitment in Section 3 that the authenticated dashboard stays free of advertising and session-recording technologies is not subject to that change.
You can also configure your browser to block or delete cookies. Blocking strictly necessary cookies will prevent you from signing in.
We do not send marketing email. ApexPoster sends transactional messages only — the ones you need in order to run your account:
You can control where operational alerts go, and turn them off, in your account settings. Billing and account notices cannot be turned off while your account is active — if your card fails, we have to be able to tell you.
If we ever introduce a newsletter or product announcements, it will be opt-in, and every message will carry a one-click unsubscribe link.
We do not sell your information and we do not disclose it to third parties for their own purposes. We rely on the following service providers to operate ApexPoster. Each is bound by contract to process information only on our instructions and to protect it appropriately.
| Provider | What they do | What they receive |
|---|---|---|
| Google (Firebase Authentication) | Sign-in and identity for the dashboard | Email address, password (set and held by Google, never by us), authentication events |
| Stripe | Payment processing, invoicing, tax calculation, the billing portal | Name, email, billing address, payment card details, subscription and invoice records |
| Amazon Web Services | Hosting, media storage, and transactional email delivery | All service data at rest and in transit, including uploaded media and outbound email |
| MongoDB | Database for account, screen, playlist, and media metadata | Account and configuration records |
| Google Fonts | Web fonts on our public marketing pages | IP address and browser information of visitors to those pages |
A current list of our subprocessors is maintained and made available on request; we will give reasonable notice before adding a new one that processes customer data.
We may also disclose information:
Apex is based in the United States and our infrastructure is located there. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.
We do not currently participate in the EU-U.S. Data Privacy Framework. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), which we will enter into on request as part of a data processing agreement. Contact us at support@apexposter.net to put one in place.
Content you upload is yours. We store it, transcode and generate previews from it, and deliver it to your screens — nothing else. We do not review it for commercial purposes, use it for advertising, or use it to train models. We access it only where necessary to operate the Services, to respond to a support request you have made, or where we are required to by law.
You are the controller of what you display. If your content includes personal information — staff photographs, names on a welcome board, birthday announcements, customer testimonials, images of identifiable people — you are responsible for it: for the legal basis, for any notices or consents required, and for responding to requests from the people concerned. We will provide reasonable assistance if you receive such a request.
A data processing agreement recording this arrangement is available here and can be executed with us on request.
If you are a member of the public who has seen your information on an ApexPoster screen: the business operating that screen chose to display it and is responsible for it. Please contact that business. We can pass a request on but we cannot decide it for them.
| Information | Retention |
|---|---|
| Account details and settings | For as long as your account is active |
| Uploaded media and playlists | Until you delete them, or 30 days after your account terminates |
| Screen configuration and heartbeat history | For as long as the screen exists on your account |
| Billing and tax records | As long as required by tax and accounting law after the relationship ends, typically seven years |
| Billing audit records | Retained as an append-only record of why an account was charged, changed, or refunded |
| Server and application logs | Typically 30 to 90 days, longer where needed to investigate a security incident |
| Support correspondence | As long as needed to resolve the matter and maintain support history |
| Dormant free accounts | May be deleted after 12 months without a sign-in, following at least 30 days' notice, as described in the Terms |
Backups are retained on a rolling basis and are overwritten in the ordinary course. Information deleted from the live service may persist briefly in backups before being cycled out.
You can request deletion of your account from the dashboard or by emailing support@apexposter.net from the address on the account. We confirm the request by email before acting on it, so that nobody can delete an account they do not control. If a request looks suspicious, we will investigate before proceeding.
When a deletion is carried out:
We retain the billing and tax records described in Section 10, and an audit record that the deletion occurred. Everything else is gone and cannot be recovered — export anything you need first.
We take reasonable technical and organizational measures appropriate to the risk, including:
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any required authority as the law requires and without undue delay.
ApexPoster is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16. If we learn that we have, we will delete it. If you believe a child has provided us with personal information, contact us at support@apexposter.net.
Note that if you display content featuring children on your screens, you are responsible for the consents that requires.
We honor the following rights for anyone who asks, regardless of where they live, subject to verification of your identity and to any legal obligation that requires us to retain information:
Automated decision-making. We do not make decisions producing legal or similarly significant effects about you by automated means, and we do not profile you.
To exercise any of these, email support@apexposter.net. We will respond within 30 days, or tell you why we need longer. There is no charge unless a request is manifestly unfounded or excessive.
Under the CCPA as amended by the CPRA, you have the rights above, plus the right to know the categories of personal information we collect, the purposes for collecting it, and the categories of third parties we disclose it to — all of which are set out in Sections 2, 4, and 7. You may designate an authorized agent to make a request on your behalf.
We do not sell personal information and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months, including with respect to anyone under 16. Because of that, we do not offer a "Do Not Sell or Share My Personal Information" link — there is nothing for it to opt you out of. We do not process sensitive personal information for the purposes that would give rise to a right to limit its use.
Where the GDPR or UK GDPR applies to our processing, we honor the rights above, and you have the right to lodge a complaint with your local supervisory authority. We do not currently participate in the EU-U.S. Data Privacy Framework; see Section 8 for how we handle transfers. Where we act as a processor for one of our customers, that customer is responsible for responding to your request and we will assist them.
We may update this policy. When we do, we will change the date at the top and post the revised version here. If a change materially affects how we use your personal information — including any addition of analytics or advertising technologies to our public pages — we will give notice by email to account holders, or by a notice in the dashboard, before it takes effect.
Questions about this policy, or requests about your personal information:
support@apexposter.net
Apex Technology Group, Inc.
apexposter.net