Privacy Policy
Last updated: July 2026
1. Overview
OOH Media LLC (“OOH Media”, “we”, “us”) operates the OOH Media platform at oohmedia.ai (the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using the Service, you agree to the practices described here.
2. Information We Collect
We collect the following categories of information:
- Account information — name, email address, organization name, and password (hashed) when you register.
- Venue and screen data — location, screen specifications, operating hours, and details you provide when setting up displays.
- Ad serving data — proof-of-play logs, impression counts, fill rates, and revenue figures generated by your screens.
- Usage data — pages visited, actions taken in the dashboard, browser type, operating system, and IP address.
- Uploaded content — photos, creative assets (images and video), and documents you upload to the Service.
- Communications — emails, support tickets, contact form submissions, and messages you send us.
- Payment information — if you subscribe to a paid plan, payment is processed by Stripe. We do not store your card details; we receive your billing email, subscription status, and a customer reference from Stripe.
- IP address and security data — we record your IP address when you sign up, log in, or submit our contact form, for rate limiting and fraud prevention.
- Analytics data — if you consent, we collect page-level analytics data via Google Analytics as described in the Cookies and Analytics section.
3. How We Use Your Information
- To operate the platform and deliver programmatic ad demand to your screens
- To generate proof-of-play reports and revenue summaries
- To power optional AI Agents that automate parts of running your account, when you enable them (see Section 5)
- To process subscription payments through Stripe
- To send transactional emails (account verification, password reset, proposals, support replies)
- To improve the platform and troubleshoot issues
- To prevent abuse, enforce rate limits, and detect fraud
- To understand how visitors use our public website (analytics, with consent)
- To comply with legal obligations
We do not sell your personal information to third parties.
4. Third-Party Ad Partners
To serve programmatic advertising, we share your venue and screen specifications (location, size, resolution, operating hours, audience demographics you provide) with demand-side partners including Vistar Media and Screenverse Nova. These partners use this data to match advertiser campaigns to your screens. They operate under their own privacy policies, which we encourage you to review. We do not share your personal account details (name, email, password) with ad partners.
5. AI Features
The Service includes optional AI Agents that can automate parts of running your account, such as reviewing creatives, detecting screen anomalies, qualifying advertiser inquiries, and delivering scheduled reports. These agents are currently in preview and are not yet processing your account data. When they become available and you enable one, the relevant account data (such as venue counts, campaign and revenue figures, creative approval status, or proposal status) is transmitted to our AI provider, xAI, to generate the response or action. We send only the data needed for the task. We do not send your password, payment details, or the personal details of your clients beyond what appears in the account summaries described above.
We do not use your data to train AI models. xAI processes this data under xAI's privacy policy.
AI-generated output may contain errors. It is informational only and is not financial, legal, or professional advice. AI features are optional, and you can use the full platform without them.
6. Service Providers
We use the following third-party providers to operate the Service. Each receives only the data needed to perform its function:
- Vistar Media & Screenverse Nova — programmatic ad demand (venue specs, screen details, proof-of-play data). See Section 4.
- xAI — AI Agent responses (account data summaries), when you enable AI features. See Section 5.
- Stripe — subscription billing (your email, name, and payment details, which Stripe collects directly). If you connect QuickBooks, invoice data is shared with Intuit.
- Mailtrap — transactional email delivery (recipient address and email content).
- DigitalOcean — cloud hosting, database, and file storage for all Service data, including uploaded photos and creative assets.
- OpenStreetMap (Nominatim)— geocoding. When you enter a venue address, it is sent to OpenStreetMap's service to look up coordinates.
- Google Analytics — website analytics, only with your consent. See the Cookies and Analytics section.
8. Registered Users and the Dashboard
When you create an account and log in to the OOH Media dashboard, you have accepted our Terms of Service, which includes acknowledgment of our data collection practices as described in this policy. Google Analytics is active across the Service including the dashboard. The dashboard does not use session replay software, advertising pixels, or third-party chat tools that would collect or transmit your communications to outside parties.
9. Data Retention
We retain your account data for as long as your account is active. Individual proof-of-play records are automatically deleted after 90 days; aggregated revenue summaries derived from them are retained for billing and audit purposes. When you delete your account from the dashboard, your users, venues, campaigns, play logs, creatives decisions, proposals, and screen tokens are deleted immediately. Support tickets, billing records held by our payment processor, and data we are legally required to keep may be retained longer.
10. International Data Transfers
The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.
11. Children's Privacy
The Service is a business platform intended for users 18 years of age or older. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.
12. Your Rights
Depending on where you live (including under the GDPR if you are in the EU/UK, or the CCPA/CPRA if you are a California resident), you may have the right to:
- Access the personal data we hold about you and request a copy of it
- Request correction of inaccurate data
- Request deletion of your data (you can also delete your account directly from dashboard settings)
- Object to or restrict certain processing
- Withdraw consent for analytics at any time by clearing your cookies and declining on revisit
- Not be discriminated against for exercising any of these rights
We do not sell or share your personal information for cross-context behavioral advertising, and we do not use your personal information for automated decisions that produce legal or similarly significant effects about you.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
13. Security
We implement industry-standard security measures including TLS encryption in transit, encrypted storage for sensitive credentials, and access controls limiting who can view your data. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you without undue delay and in accordance with applicable law.
14. Changes to This Policy
We may update this policy from time to time. We will update the date at the top of this page and notify you by email for material changes. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
15. Contact
For privacy questions or requests, contact us at [email protected].