Tailor

Privacy Policy

Last updated: May 15, 2026

1. Who we are

Tailor (“we”, “us”, “our”) operates a retail media platform that enables retailers to manage in-store digital screens and allows suppliers to advertise on those screens. This policy covers:

  • The web platform at app.tailor.is (used by retailers, suppliers, and platform administrators)
  • The Android TV app (installed on in-store screens to play scheduled content)

2. Data we collect

Account data (web platform)

When a retailer or supplier account is created, we collect the user’s email address and a hashed password. We also store the user’s role (retailer, supplier, or platform admin) and the organisation they belong to.

Device data (TV app)

Each TV device generates a random device identifier on first launch. This ID is used solely to pair the device with a specific screen in the platform. Once paired, the device receives an authentication token and a screen identifier. No personal information is collected from the TV device.

Playback impressions

The TV app records which content assets were displayed, when playback started, and how long each asset was shown. These impression records contain asset identifiers, playlist item identifiers, timestamps, and duration in seconds. No camera, microphone, or viewer-identifying data is collected.

Device heartbeats

Paired TV devices send periodic heartbeat signals to confirm they are online. These contain only the device’s authentication token and timestamp.

3. How we use your data

  • Account data — to authenticate users, enforce access control, and manage multi-tenant permissions between retailers and suppliers.
  • Device identifiers — to pair screens with locations, deliver the correct playlist, and monitor device connectivity.
  • Impression data — to provide reporting to retailers and suppliers on what content was displayed and for how long.

We do not use your data for behavioural advertising, profiling of individuals, or any purpose unrelated to operating the platform.

4. Data sharing

We do not sell your data. We share data only with the following service providers, who process it on our behalf:

  • Supabase — database hosting, authentication, and file storage
  • Vercel — web application hosting
  • Resend — transactional email delivery

Impression data (which content played, when, and for how long) is shared between connected retailers and suppliers as part of normal platform operation.

5. Data security

All data is transmitted over HTTPS. Passwords are hashed before storage. Access to retailer and supplier data is enforced through row-level security policies scoped to each tenant. The TV app communicates exclusively over encrypted connections in production.

6. Data retention and deletion

Account data is retained for as long as your account is active. When a record is deleted through the platform, it is soft-deleted (marked as removed) rather than permanently erased, to maintain referential integrity. You may request full deletion of your account and associated data by contacting us at the address below.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to restrict or object to its processing. To exercise any of these rights, contact us at tailor@tailor.is.

8. Children

Our platform is a business-to-business service and is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the platform or by email. The “last updated” date at the top reflects the most recent revision.

10. Contact

For questions about this privacy policy or your data, contact us at tailor@tailor.is.