ScreenOS privacy policy

Who we are

ScreenOS is provided by Elitaco Capital Sdn Bhd (Registration No. 202501037017 (1638427-K)), a company incorporated in Malaysia (“we”, “us”).

This policy covers the ScreenOS website at screenos.co, the owner workspace at app.screenos.co, the ScreenOS screen app for iPad and Android, and the ScreenOS phone companion app.

A business that uses ScreenOS decides what its screens show and is responsible for that content. For the content and customer details a business puts into ScreenOS, we process them on that business's behalf.

Information from your account and workspace

When you create an account and use the owner workspace, we collect:

your name and email address, and the way you sign in: a one-time email code, a passkey, or Google or Apple where offered;
sign-in and security records: sign-in attempts, sessions, the browser or device used and its network (IP) address;
your workspace: business and outlet names, team members, their roles and invitations;
the photos, videos, text, designs and schedules you upload or create, and the facts you type when you ask for an AI-drafted design;
billing records for paid plans: the plan, term, status, invoices and payment references. Card details are entered with our payment provider, Stripe, and are not stored by ScreenOS;
messages, attachments and diagnostics you send to support, and the WhatsApp number you link if you choose WhatsApp support;
your notification and privacy choices.

Information from the screen app

The ScreenOS screen app runs on the iPad, Android tablet or TV that shows your content. It has no personal sign-in. After it is paired to a workspace it sends us:

a device identifier and the screen credential issued at pairing;
the pairing code it shows while waiting to be paired;
its app version, display size, connection status and an estimate of free storage;
playback events: what played and when;
error and recovery reports;
on supported screens, a reduced-size picture of what the app drew on the screen, so you and authorised support can check what is showing.

That picture shows your signage content. The app does not use a camera or microphone. These records are linked to the workspace that owns the screen.

The screen app keeps its settings, its credential and downloaded content on the device so it can keep playing during a short loss of connection. Removing the app deletes that copy.

Information from the phone companion

The phone companion uses the same account as the owner workspace. It uses your camera or photo library only when you choose to add a photo or video, and only the item you choose is uploaded.

The website, enquiries and cookies

If you send an enquiry from screenos.co we collect your name, business name, email address and message. A security check from Cloudflare helps us stop automated spam.

We use only cookies that the service needs: to keep you signed in, to remember your language, to protect sign-in and forms, and to run the temporary demo. We use no advertising cookies.

How we use information

to provide ScreenOS: sign you in, deliver the right content to the right screen at the right time, and show whether each screen is online and what it played;
to keep the service and your workspace secure and to prevent abuse;
to give you support and to find and fix faults;
to bill paid plans and send service and billing notices;
to improve ScreenOS with optional product-improvement events, only if you turn them on (they are off by default);
to meet our legal duties.

We do not sell personal data. We do not use advertising identifiers, show you targeted advertising or track you across other companies' apps and websites.

We use other companies to run parts of the service, such as hosting and private file storage (our infrastructure provider), network delivery and security (Cloudflare), payments (Stripe), email (Google) and, when those features are used, an AI provider for drafting and support replies and a WhatsApp transport for linked support conversations. Each receives only what it needs for its role. The current list, with the data each one handles and where, is on our Subprocessors page.

Service and sign-in emails are sent from our own mail server. Replies to them, website enquiries, and a copy of emails sent to our support and privacy addresses reach our team through a mailbox hosted by Google (Gmail). If you sign in with Google or Apple, that provider's own privacy policy also applies.

Authorised ScreenOS support staff can see diagnostic information about your workspace when you ask for help, under limited and time-bound access that is recorded.

We may also disclose information when the law requires it, to protect people or the service, or to another Elitaco company if ScreenOS is transferred to it. If that happens, this policy continues to protect your information and we will tell you.

Where information is processed

Our infrastructure provider runs ScreenOS Cloud in Austria (European Union) and keeps encrypted database backups in Singapore. Some of our other providers also process information outside Malaysia. When information leaves Malaysia, we take the steps the Personal Data Protection Act 2010 requires to keep it protected.

How long we keep it

pictures of what your screens showed: seven days;
support conversations: 120 days by default; the Owner can choose 30 to 365 days;
workspace content and account details: while your workspace is open, then as described on our Delete your account page;
invoices, payments and refunds: at least seven years, as Malaysian tax law requires;
database backups: up to 12 months, after which they expire on their own.

Other records are kept only as long as needed for the purposes above. The records of a deleted workspace that are not erased automatically are listed on our Delete your account page, and you can ask us to erase them.

Security

ScreenOS Cloud is served only over encrypted connections. Private files are stored encrypted, access is limited to the people who need it, and staff access is recorded. No system is perfectly secure, so please keep your sign-in and your devices safe too.

Your rights and choices

Under Malaysia's Personal Data Protection Act 2010 you can ask to see and correct your personal data, ask for a copy to move it to another service, limit how we use it, and withdraw consent where we rely on it. If another law, such as the GDPR, applies to you, you may also ask us to delete your data or object to how we use it.

The workspace Owner can export the workspace, change analytics and support-retention choices, and delete the workspace from the Privacy page in app.screenos.co. For anything else, email [email protected]. We may ask you to confirm who you are, and we reply within 21 days.

If you are not satisfied with our answer, you can complain to the Personal Data Protection Commissioner of Malaysia.

Children

ScreenOS is a service for businesses and is not meant for children. You must be at least 18 years old to create an account.

Changes to this policy

When we change this policy we update the date at the top. If a change is significant we will tell workspace Owners by email or in the workspace before it takes effect.

Contact us

Privacy questions and requests: [email protected]

Help with ScreenOS: [email protected] or our Support page.