Privacy Policy

UrbanLoop, previously branded as EZ Plus / EZTV, provides digital signage software and related services. Operator details are provided in our Terms of Service. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our websites (including urbanloop.ai and app.urbanloop.ai), our tvOS display app and management apps, and integrations with third-party services such as Google Workspace. In this Policy, “we,” “us,” and “our” refer to the service operator.

This Privacy Policy explains our information-handling practices. Your use of the Services is governed by our Terms of Service. Where consent is required, it is obtained through the applicable consent process.

1) Information We Collect

• Account & Contact Info. Name, email, organization, and authentication identifiers when you register or sign in. When you send a website inquiry, we also receive the contact and business details you provide, such as your business name, city or locations, interests, and message.
• Integrations Data (Google).
  • Google Slides (read-only): titles, IDs, metadata such as modifiedTime, thumbnails, and presentation content necessary to display slides on signage.
  • Google Calendar (read-only): calendar lists and event data (summary, time, location, description) used to render schedules on signage.
  • Google Drive (scoped access): for files or folders you select, open, or connect to UrbanLoop, we access the metadata and supported file content needed to synchronize and display your selected materials. This may include downloading files, converting documents into displayable formats, and caching derived display assets. We use metadata such as modifiedTime to decide when displayed content needs refreshing. The scope of access depends on the feature and permissions you grant.
• Device & Usage Data. IP address, device and OS information, app version, logs, and activity within the Services to operate, secure, and improve functionality.
• Display location information. We collect locations you or your organization configure for displays. If you allow the Apple TV app to access device location, we also collect latitude, longitude, and a location description. This information may be precise and is stored with the device record. We use it for local weather, time, and other location-based display features. You can deny or revoke device location permission in your device settings and provide a configured display location instead.
• Support & Communications. Messages, support tickets, and contact information you send us.

2) How We Use Information

• Provide, operate, and improve the Services (including displaying selected Slides/Calendars on signage).
• Authenticate users; maintain accounts; provide customer support and respond to website inquiries.
• Secure our Services, prevent abuse/fraud, and troubleshoot issues.
• Comply with legal obligations and enforce terms.

We do not use personal information for targeted advertising.

3) Google User Data – Limited Use

When you connect your Google account, we access only the data necessary to provide specific features (for example, showing selected Google Slides on TVs or rendering calendar events). Our use and transfer of information received from Google APIs will adhere to Google’s API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time at myaccount.google.com/permissions. We also comply with the Google Privacy Policy.

• We request the minimum Google OAuth scopes required to deliver the features you choose to use.
• We use Google data only to provide or improve user-facing features; we do not use it for advertising or create unrelated profiles.
• We do not sell Google user data. Transfers are limited to those permitted by Google’s API Services User Data Policy, including providing or improving appropriate user-facing features with consent, security purposes, legal requirements, or a business transfer with explicit prior consent where required by that policy.
• Human access to Google data occurs only with your consent, to comply with law, or for security/abuse investigations.

4) Data Protection & Security

We use technical and organizational safeguards designed to protect information processed through the Services. No method of transmission or storage can guarantee absolute security.

We use HTTPS to protect information transmitted to our current websites and APIs. We use account authentication and access controls to help restrict unauthorized access to the Services. We monitor our services and investigate and respond to operational or security incidents as appropriate. No method of transmission or storage can guarantee absolute security.

4a) Sensitive Data

We do not require or intentionally seek special-category information such as government identification numbers, medical records, racial or ethnic origin, religious beliefs, health information, or similar information to create or use an account. Content supplied by you or your organization may contain personal information, which we process to provide the selected display features. The Apple TV app may provide device location so we can show local weather and time; that location may be precise personal information, but we do not use it to infer sensitive characteristics. Please include sensitive information in display content only where your organization has the necessary authority and it is appropriate for the intended audience.

5) Data Retention & Deletion

We retain account information while your account is active. When you delete your account, we remove the account. If no other users remain in your organization, we also delete the content you created. If other users remain, shared organization content may remain available to them and is managed under the organization’s instructions. Information we must retain to meet legal obligations is handled separately.

• Account data is retained while your account is active. Upon account deletion, we delete or anonymize personal data within 30 days, unless we must retain it to meet legal obligations.
• OAuth tokens are retained only while integration is active and are deleted within 7 days after you revoke access or delete your account.
• Derived signage assets (e.g., slide screenshots) are cached to operate the service and are purged when you unlink the source or within 30 days of last use, whichever comes first.
• You may request deletion at any time (see Contact below) or revoke Google access at myaccount.google.com/permissions.

6) When We Share Information

• Service providers (processors): cloud hosting, analytics, logging/monitoring, email delivery, and similar vendors under contract and confidentiality obligations.
• Legal requirements: when we believe disclosure is necessary to comply with law, regulation, or legal process, or to protect rights, safety, or security.
• Business transfers: if we engage in a merger, acquisition, or asset sale, your data may transfer as part of that transaction, subject to this Policy. Google user data remains subject to the Limited Use restrictions in Section 3, including any required consent.

We do not sell or share your personal information for cross-context behavioral advertising.

To request our current subprocessor list, email behrang@urbanloop.ai.

7) Your Rights & Choices

• Access, correct, delete: you may request access to, correction of, or deletion of your personal data.
• Portability: request a copy of certain data in a portable format.
• Revoke Google access: visit myaccount.google.com/permissions.
• California (CCPA/CPRA): California residents may exercise the rights to know, correct, delete, and opt-out of sale/share (we do not sell/share), and to limit use of sensitive personal information. You will not be discriminated against for exercising rights.
• EEA/UK (GDPR): where applicable, we process account and contact information as necessary to provide the Services and fulfill our contract; for legitimate interests in administering accounts, operating and securing the Services, and responding to inquiries; to comply with legal obligations; or on the basis of valid consent where applicable. When we process an organization’s content on its behalf, we act under its instructions and the applicable agreement. Depending on the circumstances, you may request access, correction, deletion, restriction, or portability, object to processing based on legitimate interests, withdraw consent where applicable, and complain to your data-protection authority.

To exercise rights, contact us (see Contact below). We may verify your request consistent with applicable law.

For EEA/UK users, UrbanLoop is the data controller for personal data collected via our websites and apps (unless we act as a processor on behalf of your organization, such as a school or district). For school deployments, please direct student data requests to the educational institution; we will support the institution in responding.

8) Children, Schools & Student Data

Our Services are intended for use by organizations (e.g., schools, districts, businesses) and are not directed to children under 13. When used by educational institutions, we act as a service provider/processor under the institution’s direction. We do not use student personal information for advertising or create student profiles unrelated to providing the Services.

9) Cookies & Local Storage

We use cookies and similar device/browser storage to operate the Services, remember preferences, and support sign-in features you choose. Our management apps use Google Analytics for Firebase to help us understand usage and improve the product. Our current website and web app also use Cloudflare Web Analytics to measure traffic and performance. Cloudflare describes this analytics service as operating without analytics cookies or fingerprinting. Browser settings let you control cookies and local storage, although disabling storage may affect some features. We do not use these tools for targeted advertising.

Do Not Track: Some browsers send “Do Not Track” signals. Because there is no common industry standard, we currently do not respond to these signals. We do not sell or share your personal information for cross-context behavioral advertising.

10) International Data Transfers

UrbanLoop operates in the United States. Information may be transferred to and processed in the United States and other countries where our service providers operate. Where applicable law requires a transfer safeguard, we use the safeguard available for the relevant transfer and provide additional information on request at behrang@urbanloop.ai.

11) Changes to this Policy

We may update this Policy from time to time. The effective and last-updated dates above identify the current version. If changes materially affect your rights, we will provide additional notice.

12) Contact

Email: behrang@urbanloop.ai
Location: UrbanLoop, San Francisco, CA 94109, USA.