Privacy Policy

Vertical Impression ("we", "our", or "us") operates the advertising platform at app.verticalimpression.com (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform to book digital out-of-home advertising campaigns.

By using the Platform you agree to the practices described in this Policy. If you do not agree, please do not use the Platform.

Vertical Impression offers "Sign in with Google" as a convenient way to create and access your account. When you choose this option, we access your Google account data strictly as described below, in accordance with the Google API Services User Data Policy.

Data we access

When you sign in with Google we receive only the following data from your Google account via OAuth 2.0:

• Email address — used as your unique account identifier and to send you transactional emails (booking confirmations, invoices, and campaign status updates).
• Display name— used to personalise the platform interface (e.g., "Welcome back, [Name]").
• Profile picture (avatar) — optionally displayed in the account area. We do not store the image ourselves; we reference the URL Google provides.

We do not request access to your Google Drive, Gmail, Calendar, Contacts, or any other Google service beyond the basic identity scopes listed above (openid, email, profile).

How we use this data

• Authentication — to verify your identity and allow you to log in securely without a separate password.
• Account creation — to create and maintain your Vertical Impression account record.
• Communication — to send booking confirmations, invoices, campaign updates, and support responses to your email address.
• Personalisation — to display your name within the Platform.

We use your Google data only for the purposes listed above. We do not use it for advertising, profiling, or any purpose unrelated to operating your account on the Platform.

How we store and protect this data

Your email address and display name are stored in our secure database (Supabase, hosted on AWS infrastructure) in an encrypted environment. Access is restricted to authorised personnel and automated systems required to operate the Platform. We retain this data for as long as your account is active. You may request deletion at any time (see Section 7).

Data sharing

We do not sell, rent, or share your Google user data with third parties for their own marketing or advertising purposes. Data is shared only:

• With Supabase (our database and authentication provider) to store and authenticate your account.
• With Stripe(our payment processor) — your email address only, to pre-fill checkout and send payment receipts. Stripe's privacy policy applies to data they handle.
• When required by law or to protect our legal rights.

Google OAuth token handling

Vertical Impression uses Supabase Auth to manage the OAuth flow. We do not store your Google OAuth tokens directly. Supabase exchanges the tokens for a secure session and discards the raw tokens. We do not use refresh tokens to access your Google account in the background or when you are not actively using the Platform.

In addition to Google Sign-In data, we collect the following when you use the Platform:

• Booking information — advertiser name, business name, phone number, campaign dates, selected screens, and payment details (handled entirely by Stripe; we store only the campaign record, not card numbers).
• Creative files — images or videos you upload for your ad campaigns, stored securely in Supabase Storage.
• Usage data — pages visited, browser type, and IP address collected automatically via standard web server logs for security and performance purposes.

We use a session cookie solely to keep you logged in to the Platform. We do not use tracking, analytics, or advertising cookies. You can clear cookies in your browser at any time, which will sign you out of the Platform.

• To operate and provide the Platform and its features.
• To process campaign bookings and payments.
• To send transactional emails (booking confirmations, invoices, status updates).
• To respond to support enquiries.
• To comply with legal obligations.

We do not sell your personal data. We do not use your data for behavioural advertising or for tracking you across third-party sites.

We retain account data while your account is active and for up to 3 years after your last login or last campaign, whichever is later, to comply with financial record-keeping obligations. Creative files are retained for the duration of your campaign and up to 90 days after completion. You may request earlier deletion at any time (see Section 7).

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted storage, and role-based access controls. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security but will notify you promptly in the event of a data breach affecting your personal information.

You may at any time:

• Access your personal data by logging in to your account or contacting us.
• Correct inaccurate information by contacting us at the email below.
• Delete your account and all associated data by emailing privacy@verticalimpression.com. We will complete deletion requests within 30 days.
• Revoke Google access at any time via your Google Account permissions page. Revoking access will sign you out of the Platform but will not automatically delete your account data — please contact us if you also wish your data deleted.

The Platform is intended for businesses and adults aged 18 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by email. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised Policy.

If you have any questions about this Privacy Policy or how we handle your data, contact us: