SimplylocalX On Air Privacy Policy

1. Our Commitment to Privacy

SimplylocalX On Air prioritizes user privacy in designing its hyperlocal community platform and digital signage solution. The company collects minimal necessary personal information and grants users maximum control over data visibility. This Privacy Policy covers apps, websites, digital signage products, features, software, and services collectively termed “Services.”

2. Using SimplylocalX On Air

Users can access certain Services (viewing signage, browsing public posts) without accounts. Interactive features (posting, joining groups, managing signage) require registration.

3. Information We Collect

Account Creation

• Email address (mandatory, private)
• Name (optional, private)
• Profile picture (optional, displayable in reduced size, hideable)
• Digital signage customer data (business name, contact details, location, content)
• Callsign/username (publicly visible)

Digital Signage Specific Data

The company does not store displayed screen content except user-uploaded material. System usage logs (device status, software version, uptime) are retained for support and diagnostics. Basic analytics track update frequency.

Location Information

The platform does not track location. Only neighbourhood networks users select are stored. Digital signage customers voluntarily provide locations for placement management.

Usage, Log & Device Data

Collected information includes diagnostic data, device specifications, IP addresses, network information, and connection logs for platform reliability and security improvement.

Instagram Integration

SimplylocalX On Air integrates with Meta's Instagram API to allow users to sync and display their Instagram content on digital signage screens. Through this integration, we may collect the following data:

• Instagram User ID — to identify your linked Instagram account
• Username — to display attribution alongside your content
• Access Token — to authenticate and retrieve your media on your behalf
• Media Data — images, videos, captions, and timestamps from your Instagram feed

This data is used solely to display your Instagram content on your connected screens. We do not sell, share, or use this data for advertising purposes. Syncing is initiated by the user and can be revoked at any time (see Section 5).

4. Data Retention

• Account information is retained while the account remains active.
• Instagram tokens are valid for 60 days with automatic refresh.
• Synced media is retained while the Instagram account remains linked.
• System logs are retained for 90 days.
• Deletion records are retained for legal compliance.

Data is anonymized or deleted within 30 days of account deletion.

5. Data Deletion and Your Rights

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Deletion — request removal of your personal data
• Data Portability — receive your data in a portable format
• Withdrawal of Consent — revoke previously given consent at any time
• Objection — object to processing carried out on the basis of our legitimate interests, including for direct marketing
• Restriction — ask us to limit how we process your data while a query or objection is being resolved
• Nomination — nominate another person to exercise these rights on your behalf in the event of your death or incapacity, as provided under India’s Digital Personal Data Protection Act, 2023
• Grievance Redressal — raise a complaint with us and, if you are not satisfied, escalate it (see the Grievance Officer and Complaints section below)

To exercise any of these rights, email info@simplylocalx.com. We respond to requests within 30 days. We do not charge a fee, and we will not treat you differently for exercising a right.

Instagram Data Deletion

You can delete your Instagram data through any of the following methods:

• In-app unlinking of your Instagram account
• Revoking access via Instagram settings
• Submitting a deletion request through Meta
• Emailing info@simplylocalx.com

6. Legal Basis for Data Processing

• Consent — you have given clear consent for us to process your personal data for a specific purpose.
• Performance of a Service — processing is necessary to deliver the services you have requested.
• Legitimate Interest — processing is necessary for our legitimate interests, provided those interests are not overridden by your rights.

7. Prohibited Uses of Data

The following uses of data obtained through our Services are strictly prohibited:

• Surveillance of individuals
• Discrimination based on personal data
• Selling or licensing user data to third parties
• Re-identification of anonymized data
• Building advertising profiles using Meta Platform Data

8. Third-Party Services and Data Processors

We work with third-party service providers to operate the platform. They process data on our behalf under contractual agreements that require confidentiality and appropriate security. We do not sell your personal data to anyone, and we do not share it with advertisers.

The providers we rely on are:

9. Where Your Data Is Stored and Transferred

Our primary database is hosted in Mumbai, India. Media files, outbound email and payment processing are also handled within India.

Some of the providers listed above are global services operated by companies based outside India — in particular sign-in, content screening, maps and analytics, which are Google services. Where those services process personal data, that processing may take place outside India, including in the United States and the European Union.

Where personal data of individuals in the European Economic Area or the United Kingdom is transferred outside those regions, the transfer is made under the European Commission’s Standard Contractual Clauses or an equivalent safeguard offered by the provider, together with the security measures described in this policy.

10. Automated Processing of Content

Content uploaded to a noticeboard is screened automatically to detect material that is unsafe or breaches our content rules. This screening is a filter, not a decision about you: it can flag or hold a post, and a human reviews anything it flags before any lasting action is taken.

We do not use automated decision-making that produces legal effects concerning you, and we do not build advertising or behavioural profiles about individuals. If a post of yours is held or removed, you can contact us to have that decision reviewed by a person.

11. Managing Your Information

Users can modify their profiles, hide profile pictures, delete posts, and exit groups at any time. Digital signage customers control their content through dedicated management portals.

12. Security & Encryption

Personal information is encrypted where feasible. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

13. Cookies & Analytics

This website uses cookies and similar tracking technologies to help us understand how visitors use our site and to improve your experience.

Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (GA4) to collect anonymised usage data such as pages visited, session duration, and general geographic region. GA4 is loaded on every page visit; however, it will only set analytics cookies if you give your explicit consent via the banner shown on your first visit. If you decline, GA4 operates in a cookieless mode and sends only anonymised, aggregate pings.

The following cookies may be set by Google Analytics if you accept:

• _ga — Distinguishes unique users. Expires after 2 years.
• _ga_<container-id> — Maintains session state. Expires after 2 years.

Functional Cookies (Always Active)

One strictly necessary cookie is always set regardless of your analytics choice:

• NEXT_LOCALE — Remembers your preferred language. Set by the website itself. Expires after 1 year. This cookie is essential for the website to function correctly and cannot be disabled.

Your Choices

When you first visit the site, a banner will ask for your consent to analytics cookies. You may accept or decline. Your choice is stored in your browser's local storage and is respected on all subsequent visits. You can change your preference at any time by clearing your browser's local storage for this site.

14. Children

Our Services are intended for users aged 13 and above, and users aged 13 to 17 are welcome to use them.

India’s Digital Personal Data Protection Act, 2023 treats anyone under the age of 18 as a child. Where that Act or another law requires it, a parent or legal guardian must consent to a user under 18 using SimplylocalX On Air and to our processing of their personal data. For users under 18 we do not use personal data for behavioural advertising, and we do not track or monitor them for advertising purposes.

We do not knowingly collect personal information from children under 13. If we learn that an account belongs to a user under 13, we will terminate that account and delete its associated data. A parent or guardian who believes a child under 13 has provided us with personal information, or who wishes to withdraw consent for a user aged 13 to 17, can contact us at info@simplylocalx.com and we will act on the request.

15. Legal Requirements

We may disclose your personal information only when legally mandated by applicable law, regulation, legal process, or governmental request.

16. Data Breach Notification

If a security incident affects your personal data, we will investigate it, take steps to contain it, and notify you and the relevant authorities where we are required to do so — including the Data Protection Board of India under the Digital Personal Data Protection Act, 2023, and, where the incident affects individuals in the European Economic Area or the United Kingdom, the applicable supervisory authority within 72 hours of becoming aware of it.

Our notification will describe what happened, what data was involved, what we are doing about it, and what you can do to protect yourself.

17. Grievance Officer and Complaints

If you have a concern about how we handle your personal data, contact our Grievance Officer:

We acknowledge complaints within 7 days and aim to resolve them within 30 days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India. If you are in the European Economic Area or the United Kingdom, you may instead complain to your local data protection supervisory authority.

18. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, practices, or legal requirements. Updates will be posted on this page with a revised effective date.

19. Contact

If you have any questions about this Privacy Policy or your personal data, please contact us: