Ad In
LocationsFor store ownersHow it worksSign inBuy ads →
Draft template — not legal advice. Have a licensed attorney review and adapt this before relying on it.

Privacy Policy

Last updated: [date] · Ad In Media

Ad In Media operates an in-store digital advertising network across Southern California. This policy explains what information we collect from advertisers, venue hosts, and people who scan our on-screen QR codes — and, just as importantly, what we deliberately do not collect.

The short version: our screens don't watch you

Our in-store screens and their attached foot-traffic sensors do not use cameras, do not capture images or video, and do not perform facial recognition or any biometric identification. Foot traffic is measured by a small infrared door sensor that counts entries and exits and estimates how busy a venue is and how long, on average, visitors stay. It produces anonymous, aggregate counts only — never a picture, an identity, or a record tied to any individual shopper. A shopper walking past one of our screens is never personally identified or tracked by us.

Information we collect

Account information

When an advertiser or venue host creates an account, we collect a name, email address, and (for businesses) a business name, and we store a securely hashed password. Hosts who apply to carry a screen also provide venue details such as address, venue type, hours, and estimated foot traffic, and — so we can pay their revenue share — a payout contact such as a Zelle email or phone number. We do not collect or store host bank account or routing numbers.

Advertiser creative and campaign data

Advertisers upload the ad creative they want to run (image or video files) and campaign settings such as targeting, budget, schedule, and any destination URL for a trackable QR code. We keep the campaign records and reporting associated with your account.

Payment information

Advertiser card payments are processed by Stripe. We do not receive or store full card numbers on our servers — Stripe handles card data directly under its own security standards, including the authorization hold placed when you submit an ad and the charge captured on approval. We retain the non-sensitive records Stripe returns to us, such as that a payment succeeded, the amount, and a payment reference. Host revenue shares are paid either by Zelle to the payout contact the host provides, or through Stripe — we never hold host bank account numbers.

Anonymous foot-traffic and QR measurement

From each screen we receive the aggregate, anonymous counts described above (entries, exits, occupancy, average dwell) and the number of times a campaign's on-screen QR code has been scanned. QR scans are counted in aggregate to attribute interest to a campaign; the scan tracker records the redirect, not the identity of the person scanning.

Cookies and session data

We use a single session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies on this site.

How we use information

  • To operate your account, run advertiser campaigns, and deliver ads to screens.
  • To measure and report campaign performance (impressions estimated from anonymous foot traffic, QR scan counts, proof-of-play).
  • To calculate and pay venue hosts their revenue share, and to reconcile it against advertiser payments.
  • To review advertiser creative for compliance and to operate, secure, and improve the service.
  • To send you service-related email (campaign status, receipts, host payout notices).

We do not sell your personal information, and we do not use the anonymous in-store sensor data to build profiles of individual shoppers.

Third-party processors

We share the minimum data necessary with a small set of service providers who act as our processors:

  • Stripe — payment processing (advertiser payments and host payouts).
  • OptiSigns — content management and delivery of ads to the physical screens.
  • Resend — sending transactional email on our behalf.
  • Our hosting provider — running the application and storing account and campaign data.

These providers are bound to use the data only to provide their service to us. Each maintains its own privacy practices.

Data retention

We keep account, campaign, and payment records for as long as your account is active and as long as needed for legitimate business, tax, and legal purposes. Aggregate foot-traffic and QR-scan counts, which are not personal to any individual, may be retained for reporting and analytics. You can ask us to close your account and delete your personal information, subject to records we must keep by law.

Security

We protect information with measures appropriate to its sensitivity: encrypted transport (HTTPS), hashed passwords, access controls, and reliance on PCI-compliant Stripe for card handling. No system is perfectly secure, but we work to keep your data safe and will notify affected users and authorities as required if a breach occurs.

Our anonymous-sensing commitment

We commit that our foot-traffic measurement uses infrared door sensors only. There are no cameras, no image or video capture, no facial recognition, and no collection of biometric or other personal data from the sensing hardware. If we ever change this, we will update this policy prominently before doing so.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to:

  • Know what personal information we collect, use, and disclose about you.
  • Access a copy of the personal information we hold about you.
  • Delete personal information we have collected, subject to legal exceptions.
  • Correct inaccurate personal information.
  • Opt out of any "sale" or "sharing" of personal information — we do not sell or share your personal information as those terms are defined.
  • Non-discrimination — we will not treat you differently for exercising these rights.

To exercise any of these rights, email privacy@ad-in-media.com. We will verify your request against your account and respond within the timeframes the law requires. You may use an authorized agent to submit a request on your behalf.

Children's data

Our service is intended for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will change the "last updated" date above and, for material changes, provide additional notice.

Contact

Questions about privacy? Email privacy@ad-in-media.com.

Privacy Policy Terms of Service Home