The fine print, plainly spoken
Privacy Policy
Last updated: August 25, 2026. This policy explains how billboard.dev handles information when you create an account, reserve billboard time, submit creative, make a payment, or contact us.
1. Information we collect
We collect account details such as name, email address, authentication records, account status, and timestamps. We collect booking data such as selected date and hour, message, image and product URL, payment status, Stripe Checkout Session ID, payment-attempt identifiers, and booking history. We may collect IP address, browser and device information, approximate location inferred from network data, logs, error reports, and security events.
2. Payments and fraud prevention
Stripe processes payment details. We do not store full card numbers. Stripe may provide payment status, amount, currency, customer references, Checkout Session IDs, and fraud or dispute signals. We use this information to confirm bookings, reconcile delayed webhooks, prevent duplicate or fraudulent reservations, handle disputes, and provide support.
3. Images and public content
Images are stored using Vercel Blob and the database stores the required URL or storage reference. A paid advertisement may be publicly displayed and its resource URL may be accessible to anyone who obtains it. Do not upload confidential, sensitive, illegal, or personal information you do not intend to publish. Removing an ad may not remove copies, cached resources, backups, screenshots, or third-party records immediately.
4. How we use information
We use information to create accounts, authenticate users, process and reconcile bookings, display approved content, enforce availability and limits, prevent fraud and abuse, moderate content, operate and secure the service, respond to requests, maintain records, comply with law, and improve reliability. We do not sell personal information as a core business practice.
5. Legal bases and sharing
Where data-protection law applies, we process information to perform our contract with you, take steps at your request, pursue legitimate interests such as security and service operation, comply with legal obligations, and with consent where required. We share information with service providers that help us run the service, including hosting, database, authentication, object storage, payment, security, analytics, and email providers. They may process information only to provide their services. We may disclose information when required by law or during a merger, acquisition, financing, or asset transfer.
6. Retention
We retain account, booking, payment, moderation, and security records for as long as reasonably necessary for the purposes described here, legal obligations, accounting, dispute resolution, fraud prevention, and enforcing our agreements. Public display data may remain in backups or third-party caches for a limited period after removal. Retention periods vary by record and risk.
7. Cookies and technical tracking
We use necessary cookies and similar technologies for authentication, security, session continuity, and preferences. We may use privacy-conscious analytics or operational logs to understand reliability and usage. Your browser may provide controls for cookies; disabling necessary cookies can prevent sign-in or booking features from working. Third-party providers may set or receive their own identifiers under their policies.
8. International processing and security
Our providers may process information in countries other than yours. Where required, we use appropriate safeguards for international transfers. We use reasonable administrative, technical, and organizational measures, but no internet transmission, storage system, or payment process is completely secure. Never send passwords or card details to us by email.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, withdraw consent, and complain to a supervisory authority. Some requests are limited by legal, security, accounting, or fraud-prevention requirements. Contact us through the support contact published on billboard.dev and provide enough information to verify your request.
10. Children
The service is not directed to children who cannot legally use it. We do not knowingly collect personal information from children without appropriate authorization. Contact us if you believe a child submitted information so we can review and delete it where required.
11. Account blocking and deletion
Administrators may block users or ads to protect the service. Blocking does not necessarily erase records needed for payment, security, legal compliance, or dispute handling. You may request account deletion, but content already publicly displayed or records required for legitimate purposes may persist as described above.
12. Changes and contact
We may update this Policy as the service or law changes. We will post the revised version and update the date. Material changes may be highlighted where appropriate. Questions, rights requests, and privacy complaints should be sent through the support contact published on billboard.dev. You can email us at hey@billboard.dev.