LimeVuWho is responsible
LimeBat LTD operates LimeVu, limevu.com, tv.limevu.com and the LimeVu screen-player applications. Our contact address is 64 Krum Popov Street, Sofia 1421, Bulgaria. Contact [email protected] for privacy questions and rights requests.
This policy covers the LimeVu service. The player may also connect to a separately selected B2BWebs/CDS service. Accounts and campaigns are separate; that service’s operator and privacy terms govern its own backend. Selecting a different service does not transfer a LimeVu account or campaign.
Information we handle
Account information: your name, email address, password hash, account role, plan, trial and access dates. If you choose Google sign-in, we receive your verified email, name and Google account identifier. We do not receive your Google password; OAuth access tokens are not retained as account credentials.
Content: photos, videos, filenames, file sizes, YouTube identifiers, campaign names, schedules and presentation settings that you submit. Files are stored privately and delivered to authorized users and activated screens. Content is visible to people who can see your display; do not publish personal information without a lawful basis.
Device and activity information: an application/browser-generated device identifier, activation-code association, device label, browser or app user-agent, connection times, playback status and aggregate slide play counts. A play count records a start/display event, not a verified completed viewing or audience measurement. We do not use device cameras to measure viewers.
Technical and support information: IP address, request and security logs, session information, support correspondence and account-deletion requests. If payments are enabled and you buy a plan, we keep plan, payment-provider, transaction, subscription and receipt references. Card details are entered with the payment provider, not stored in LimeVu’s application database.
The current native players use network access and local application/WebView storage for activation, the selected service and playback. They do not request camera, microphone, contacts or precise-location permissions. Uploading from a browser sends only the files you choose; it does not grant access to the rest of your photo library.
Why we use information
We use account, campaign and device data to provide the service you request, authenticate users, deliver content, enforce plan/device limits, keep screens connected and handle support and purchases. Where GDPR applies, this processing is necessary to perform our contract or take steps you request before a contract.
We use limited technical and security information for legitimate interests in preventing abuse, protecting accounts and maintaining reliable service, balanced against your rights. Records required for accounting, tax or valid legal requests are processed to comply with legal obligations.
Optional public-website analytics uses consent. You may reject or withdraw it without losing campaign or player access. We do not use your campaign content for targeted advertising, sell personal data, or make legal or similarly significant decisions solely by automated profiling. Automatic device/plan checks apply the limits of your service.
Providers and sharing
Access is limited to authorized staff and providers needed to operate hosting, backups, email, security and payment services. Cloudflare may process connection and security data for the website proxy and, when enabled, Turnstile verification. Google processes Google sign-in if you choose it.
When an administrator enables Google Analytics, it loads on public marketing pages only after your consent. Our integration omits page query strings and referrers and disables advertising signals; Google still receives the connection and analytics information needed to provide its service. It is not loaded on account, admin or player pages.
Playing a YouTube slide connects the display to Google/YouTube, which receives connection and playback information under its own policies. Stripe or myPOS receives payment information when that payment method is enabled and used. These optional services have their own privacy notices, linked below.
We may disclose limited information when legally required or necessary to establish, exercise or defend legal claims. Service providers must protect information for the purposes for which they receive it. Providers may process data outside Bulgaria or the EEA. Where data-protection law requires transfer safeguards, the applicable adequacy decision or contractual safeguards must apply; contact us for information about the providers and safeguards relevant to your use.
The contact page connects to Google Maps only when you choose to show the map.
Storage and security
We use HTTPS, hashed account passwords, access controls and encrypted saved integration credentials. Files require account or device authorization; activation codes bind one browser/app profile. No internet service or device is completely secure. Protect account passwords and activation codes, and release a device binding if the device is lost or replaced.
Retention and deletion
Account and campaign information is kept while needed to provide your account and until deletion is completed. Trial or plan expiry stops access but does not itself delete stored content. A verified account-deletion request covers the account profile, Google link, campaigns, uploaded media, activation codes, device associations and related identifiable usage information.
Sessions and password-reset data expire according to their security purpose. Playback-report deduplication records are short-lived; aggregate counts remain with the slide until the slide/account is deleted. Temporary uploads expire and are removed during upload cleanup. Inactive connection records are pruned during subsequent activity.
Financial records may be retained for the period required by applicable accounting/tax law. Limited security, dispute and request-completion records may remain for as long as needed to investigate abuse, resolve a dispute or demonstrate compliance. We restrict these records and do not retain the account for ordinary use. Backup copies are isolated from normal use and disappear as backups are rotated; if a backup is restored, completed deletions must be reapplied. Contact us for the retention criteria applicable to a specific record.
Use the Account & data deletion page to initiate deletion in a browser without reinstalling an app. Requests are processed manually: we aim to complete verified requests within 30 days and notify you of completion or any lawful extension and retained records. Uninstalling an app, logging out or releasing an activation code does not delete the service account.
Your choices and rights
Where applicable, you may request access, correction, erasure, restriction or portability of your personal data and object to processing based on legitimate interests. You may withdraw consent for future consent-based processing. We may ask for proportionate proof that the account is yours; do not send a password or full payment-card number.
Contact [email protected]. You may also complain to your local data-protection authority or Bulgaria’s Commission for Personal Data Protection. When a business uploads personal data into a campaign, that business is responsible for its decision to publish it; contact the business as well as us where relevant.
Children and changes
LimeVu is intended for business and organizational display use and is not directed at children. Do not create an account if you cannot legally enter the service agreement. Contact us if a child’s information has been submitted improperly. We update this policy as the service changes and show the revision date; material changes will receive appropriate notice.