Privacy Policy
Last updated: September 13, 2026
In plain language: We use the information needed to provide and secure Helm Signage, manage screens, process subscriptions, and support customers. We do not sell personal information.
Helm Signage is a digital signage platform operated by CAPTAINS MEDIA LIMITED, a company incorporated in Hong Kong (“Captain’s Media,” “Helm Signage,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use our websites, dashboard, applications, players, support, and related services (collectively, the “Service”).
Our registered address is No. 5, 17/F, Strand 50, 50 Bonham Strand, Sheung Wan, Hong Kong.
1. Scope and our role
This policy applies to account owners, administrators, authorized users, prospective customers, website visitors, and users of Helm Signage applications. For account, billing, website, security, and support information, Captain’s Media generally determines why and how information is processed.
When a customer uploads or displays content containing personal information, the customer generally determines the purpose of that processing and Captain’s Media processes the content to provide the Service. Customers are responsible for providing required notices and obtaining the necessary rights and permissions for their content.
The Service is intended for businesses and organizations and is not directed to children.
2. Information we collect
| Category | Examples |
|---|---|
| Account and contact information | Name, business name, email, telephone number, account role, login and authentication information. |
| Subscription and transaction information | Plan, screen count, billing contact, invoices, transaction status, currency, tax information, and limited payment information received from payment providers. We do not intentionally store complete payment-card numbers unless expressly stated at checkout. |
| Customer content | Images, video, audio, text, templates, slides, playlists, schedules, social content, and other material uploaded, created, imported, or displayed through the Service. |
| Screen and device information | Screen name, pairing information, device or installation identifier, player and operating-system version, device model, display configuration, IP address, network and storage status, playback status, proof-of-play records, errors, and diagnostics. |
| Usage and logs | Login activity, features used, actions, timestamps, browser type, approximate location derived from IP address, crash reports, API requests, and security events. |
| Support information | Messages, attachments, troubleshooting information, meeting notes, and feedback. |
| Connected services | Authorization tokens, account or page identifiers, and content you choose to access or import from a supported third-party service. |
| Cookies and similar technology | Session cookies, authentication tokens, local storage, and similar technologies required for login, security, preferences, and operation. Optional analytics, if enabled, are described through the applicable cookie notice or consent tool. |
We collect information from you, your organization, connected devices, your use of the Service, services you authorize, and vendors that help us process subscriptions or operate the Service.
3. How we use information
- Provide, administer, maintain, secure, and improve the Service.
- Authenticate users; pair and manage screens; deliver content; and provide reports.
- Process subscriptions, payments, renewals, refunds, invoices, and accounting records.
- Provide support and diagnose technical problems.
- Prevent fraud, abuse, unauthorized access, and security incidents.
- Send billing, security, maintenance, and other operational communications.
- Send marketing communications where permitted and consistent with your choices.
- Comply with law, enforce agreements, and respond to valid legal requests.
Where applicable law requires a legal basis, we process information to perform a contract, comply with legal obligations, pursue legitimate interests such as security and service improvement, or based on consent. You may withdraw consent where processing depends on consent without affecting earlier lawful processing.
4. Customer content and screen viewers
Helm Signage does not use ordinary displays to identify people viewing a screen. The core Service does not require facial recognition, biometric identification, or audience surveillance. If a customer uses third-party cameras, sensors, interactive tools, QR-code analytics, or audience-measurement technology, that activity is controlled by the customer or applicable provider and must be disclosed separately by them.
We process Customer Content only to host, transform, transmit, display, back up, secure, and support it as necessary to provide the Service, comply with law, or follow the customer’s documented instructions.
5. Third-party connections
You may choose to connect supported third-party services. Available integrations may change.
- Design services, including Canva and PosterMyWall: to browse or import designs or media you select.
- Meta services, including Facebook and Instagram: where enabled, to retrieve authorized Page, account, post, or media information for display.
- Stock-media providers, including Unsplash, Pixabay, and Klipy: to search for and import media.
We use connected-service information only for requested functionality and within granted permissions. The third party’s terms and privacy policy also apply. You may revoke a connection through Helm Signage or the third party. Revocation stops future access but does not automatically remove content already imported into Helm Signage.
Authorization credentials are protected using reasonable controls appropriate to their sensitivity. We do not use connected accounts to publish or modify third-party content unless a feature expressly tells you otherwise and you authorize it.
6. How we disclose information
We do not sell personal information. We may disclose information:
- To authorized users and administrators of your organization.
- To hosting, storage, content-delivery, authentication, payment, email, support, monitoring, analytics, and security providers acting for us.
- To a connected service when necessary to complete an action you request.
- To resellers or managed-service partners responsible for administering your account.
- To professional advisers and parties to a proposed merger, financing, acquisition, reorganization, or sale, subject to appropriate protections.
- When reasonably necessary to comply with law, enforce agreements, or protect rights, safety, property, customers, or the Service.
7. International processing
Captain’s Media is based in Hong Kong, and customers and service providers may be located elsewhere. Information may be stored or processed outside your country, where privacy laws may differ. Where required, we use contractual or other recognized safeguards for international transfers.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encrypted network communications, access controls, authentication, logging, and protections appropriate to stored credentials. No service can guarantee absolute security. You are responsible for protecting credentials and the screens and networks you control.
9. Retention
We retain information only as long as reasonably necessary to provide the Service, maintain security and continuity, resolve disputes, and satisfy legal, tax, accounting, and contractual obligations. Retention depends on information type, customer instructions, account status, legal requirements, and backup cycles.
After account deletion, active copies of Customer Content are scheduled for deletion within 30 days unless longer retention is required for security, fraud prevention, disputes, or legal compliance. Residual copies may remain in protected backups until overwritten through normal cycles. Transaction, tax, and accounting records may be kept for the legally required period. We may retain information that has been reliably de-identified or aggregated.
10. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may update certain information and manage connections through the dashboard. We may verify identity and authority before acting. An organization administrator may control information associated with an organization account.
You may opt out of marketing email using its unsubscribe link. Necessary transactional and security communications will continue.
11. Account deletion
You may request deletion through available account controls or by emailing privacy@helmsignage.com. If an application permits account creation within the application, we will provide a reasonably discoverable in-app deletion-request option and an external web method. Account deletion removes or de-identifies associated personal information and Customer Content, subject to the retention exceptions above. Disabling or suspending an account is not treated as deletion.
Step-by-step instructions, including what we delete and what we keep, are on our Delete your data page.
12. Children’s privacy
The Service is not directed to children. We do not knowingly collect personal information directly from children. Contact us if you believe a child has provided personal information without appropriate authorization.
13. Third-party links
The Service may contain links to services we do not control. Their privacy practices are governed by their own policies.
14. Changes
We may update this policy to reflect changes in the Service, our practices, or legal requirements. We will post the revised policy with a new date and provide additional notice of material changes where appropriate or required.
15. Contact and complaints
CAPTAINS MEDIA LIMITED
No. 5, 17/F, Strand 50
50 Bonham Strand, Sheung Wan
Hong Kong
Email: privacy@helmsignage.com
You may also have the right to complain to the privacy authority where you live or work. In Hong Kong, this is the Office of the Privacy Commissioner for Personal Data.