NEON STUDIOS INC.
Privacy Policy
Effective Date: August 4, 2026   |   Last Updated: August 4, 2026

Neon Studios Inc. (“Neon,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard information in connection with our websites, applications, software, hardware, integrations, and services (collectively, the “Services”), which are used by our clients — including corporate-owned and independently operated businesses and their locations — and by the individuals who interact with those locations.This Privacy Policy applies to all Neon products and services, including, without limitation:Neon Digital SignageNeon MusicNeon Guest WiFiNeon Menu ManagerNeon Order ManagerNeon KioskNeon Online OrderingNeon APIs and IntegrationsNeon mobile applicationsAny future products or services offered by NeonThis Policy is designed to align with applicable U.S. state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) and comparable laws in other states. Because Neon also deploys its Services and sells or licenses its platform in Canada and the European Union, Section 15 below sets out additional terms that apply specifically to those jurisdictions and supplement (rather than replace) the rest of this Policy. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy, including Section 15 if it applies to you.

‍1. Who We AreNeon Studios Inc. is headquartered in Phoenix, Arizona. If you have questions regarding this Privacy Policy, please contact us using the information in Section 17.

‍2. ScopeThis Privacy Policy applies to:Visitors to our websitesOur clients and their personnel, administrators, and authorized usersOperators and staff at client locations using the ServicesEnd consumers interacting with client deployments (for example, individuals near a signage screen, connecting to Guest WiFi, or placing an order through a Neon-powered ordering system or kiosk)Users of Neon mobile applicationsProspective clients, vendors, and business partnersThis Policy does not apply to third-party services that integrate with Neon; those services are governed by their own privacy policies.

‍3. Information We CollectDepending on how you or your organization interacts with the Services, we may collect the following categories of information.
‍3.1 Account and Business InformationName, business email, phone number, mailing address, job titleLogin credentials and user permissionsCompany information, store or location details, and corporate/organizational hierarchy
‍3.2 Device InformationInformation about devices connected to the Services, including device identifiers, hardware serial numbers, IP and MAC addresses, browser and operating system information, device health, firmware versions, screen resolution, media player status, network diagnostics, and error logs.
‍3.3 Usage InformationInformation about how the Services are used, including login activity, administrative changes, scheduling and publishing history, playlist activity, content deployment history, menu changes, ordering activity, API and integration usage, search activity, feature usage, and session duration.
‍3.4 Guest WiFi InformationWhere a client enables Neon Guest WiFi, information may include device identifiers, IP and MAC address, browser type, session information, authentication information, captive portal registration details, marketing opt-in preferences, and survey responses. The specific information collected through Guest WiFi at a given location is determined by that client's own configuration, and the client is responsible for providing any notices or obtaining any consents required for its use.
‍3.5 Ordering and Kiosk InformationWhere a client uses Neon Order Manager, Neon Kiosk, or Neon Online Ordering, information may include order details, menu selections and customizations, pickup or delivery preferences, contact information, loyalty identifiers, payment confirmation data, and transaction metadata. Neon does not store complete payment card numbers; payment card data is processed by authorized third-party payment processors. Neon may receive limited payment-related information such as payment status, transaction identifiers, and billing address.
‍3.6 Support InformationWhen you contact Neon for support, we may collect emails, chat messages, support tickets, call recordings (where permitted), screen recordings, diagnostic logs, and attachments.
‍3.7 Cookies and Similar TechnologiesWe use cookies, pixels, SDKs, local storage, and similar technologies to authenticate users, remember preferences, improve security, measure performance, and understand product usage. You may disable cookies through your browser settings, though certain functionality may no longer operate properly. Where required by law, we will obtain consent before placing non-essential cookies.
‍3.8 Information from Third PartiesWe may receive information from point-of-sale providers, identity providers, CRM systems, marketing platforms, analytics providers, payment processors, other technology partners, and public business directories.

‍4. How We Use InformationWe use information to provide and operate the Services (including signage delivery, music, Guest WiFi, menu management, order processing, and kiosk operation); authenticate users and manage accounts; provide customer support; improve reliability and develop new features; prevent fraud; monitor system health and diagnose issues; process payments; communicate with clients and send service or product notifications; conduct analytics; and meet legal obligations and enforce our agreements.

‍5. AI, Analytics, and Product ImprovementNeon may use aggregated, anonymized, or de-identified information to improve the Services, develop new products, improve recommendations, analytics, and reporting, and enhance automation, machine learning models, security, and product performance. Neon will not use a client's personal data to train publicly available artificial intelligence models without that client's authorization.

‍6. Aggregated and De-Identified DataNeon may generate aggregated, statistical, anonymized, or de-identified information derived from information collected through the Services. Such information does not identify any individual or client. Neon may use this de-identified information for product development, benchmarking, analytics, research, security, and other lawful business purposes, consistent with our client agreements and applicable law.

‍7. Client Data OwnershipExcept for the limited rights described in this Policy or in the applicable client agreement, our clients retain ownership of the personal information and business data they or their customers provide through the Services (“Client Data”). Neon receives only the rights reasonably necessary to host, process, transmit, display, secure, analyze, back up, and otherwise provide the Services.

‍8. Legal Bases for ProcessingWhere required by applicable law, Neon processes personal information based on one or more of the following legal bases: performance of a contract, compliance with legal obligations, legitimate business interests, user consent, and protection of vital interests.

‍9. How We Share InformationNeon does not sell personal information. We may share information with:Service providers, including hosting, cloud infrastructure, payment processing, customer support, analytics, and communications vendorsIdentity providers and integration partnersProfessional advisors, auditors, and insurance providersGovernment authorities, where legally requiredSuccessors, in connection with a merger, acquisition, financing, or asset saleEach recipient receives only the information reasonably necessary to perform the applicable services. Neon requires its subprocessors — including providers of cloud infrastructure, communications, analytics, customer support, and payment processing — to protect information consistent with our contractual and legal obligations.

‍10. Data RetentionWe retain information only for as long as reasonably necessary to provide the Services, meet contractual and legal obligations, resolve disputes, prevent fraud, maintain security, and enforce our agreements. After applicable retention periods expire, information is securely deleted or de-identified where reasonably practicable.

‍11. Data SecurityNeon maintains administrative, technical, and physical safeguards designed to protect information, which may include encryption in transit and at rest where appropriate, multi-factor authentication, access controls, role-based permissions, audit logging, network monitoring, security testing, backup and disaster recovery procedures, and employee security training. No security system is completely secure, and Neon cannot guarantee absolute security. If Neon becomes aware of a confirmed security incident involving client data, we will notify affected clients in accordance with applicable law and our contractual obligations.

‍12. Client ResponsibilitiesClients are responsible for complying with applicable privacy and data protection laws in connection with their own use of the Services. This includes obtaining any notices or consents required for their use of Guest WiFi, marketing communications, customer surveys, employee information, ordering systems, kiosk deployments, in-store device usage, or cookies at their locations.

‍13. Your Privacy RightsDepending on your state of residence, you may have rights under applicable U.S. state privacy laws (such as the CCPA/CPRA and comparable laws in other states), which may include the right to know, access, correct, delete, or obtain a copy of your personal information; to opt out of the sale or sharing of personal information and certain targeted advertising or profiling; and not to receive discriminatory treatment for exercising these rights. Neon does not sell personal information for monetary consideration.Because Neon often processes personal information on behalf of our clients, requests relating to information collected at a specific location may need to be directed to, or coordinated with, that client. We will honor verifiable requests consistent with our legal obligations and contractual role. To exercise these rights, please contact us using the information in Section 17; we may need to verify your identity before completing certain requests.

‍14. Children's PrivacyThe Services are intended for business use by adults and are not directed to children under 13, or any higher minimum age required under applicable law. Neon does not knowingly collect personal information directly from children through the Services.

‍15. International Deployments — Canada and the European UnionNeon makes its Services available to clients and locations in Canada and the European Union/European Economic Area (“EU/EEA”), in addition to the United States. This Section 15 supplements the rest of this Policy and applies where you are located in, or your personal information is processed in connection with, a deployment in these regions. Where this Section conflicts with other provisions of this Policy for an individual in Canada or the EU/EEA, this Section governs.

‍15.1 Canada (PIPEDA and Provincial Law, including Quebec’s Law 25)For personal information collected or processed in connection with Canadian deployments, Neon complies with the federal Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial privacy legislation, including Quebec’s Act respecting the protection of personal information in the private sector (“Law 25”) where applicable. In addition to the rights described in Section 13, individuals in Canada have the right to:Know the purposes for which their personal information is collected, used, and disclosed, identified at or before the time of collectionWithdraw consent to the collection, use, or disclosure of their personal information, subject to legal or contractual restrictions and reasonable noticeRequest access to, and correction of, personal information we hold about themFile a complaint with the Office of the Privacy Commissioner of Canada, or the applicable provincial regulator (e.g., the Commission d’accès à l’information for Quebec)Consistent with Law 25, before deploying any feature in Quebec that could identify, locate, or profile an individual (such as camera-based audience measurement or similar technology), Neon and/or the applicable client will conduct a privacy impact assessment and provide clear notice at the relevant location. Neon does not use biometric identification or biometric characterization technology in its standard deployments.

‍Canadian Privacy Officer / Contact: Neon Legal Counsel, privacy@neonscreens.com

‍15.2 European Union / EEA (GDPR)For personal information relating to individuals in the EU/EEA, Neon (or, where Neon acts as a processor on behalf of a client, the applicable client as controller) processes personal information in accordance with the General Data Protection Regulation (“GDPR”). This includes the following additional disclosures:Roles: Where a client determines the purposes and means of processing personal information (for example, end-consumer or personnel data tied to its own locations), the client acts as the data controller and Neon acts as a data processor under a Data Processing Agreement (“DPA”). Where Neon determines the purposes and means of processing (such as for its own business operations, billing, and Site administration), Neon acts as the controller.Legal Bases for Processing: Neon and/or the applicable client rely on one or more of the following legal bases: performance of a contract, compliance with a legal obligation, legitimate interests (such as operating and securing the Services), and, where required, consent.International Transfers: Where personal information is transferred from the EU/EEA to the United States or another country without an adequacy decision, such transfers are made subject to appropriate safeguards, including the EU Standard Contractual Clauses, as required by GDPR.Data Subject Rights: Individuals in the EU/EEA have the right to access, rectify, erase, or restrict processing of their personal information; to object to processing based on legitimate interests; to data portability; and to withdraw consent at any time where processing is based on consent.Supervisory Authority: Individuals in the EU/EEA have the right to lodge a complaint with their local data protection supervisory authority.EU Representative: Where required by GDPR, Neon has appointed, or will appoint, a representative in the EU/EEA for data protection matters.

‍EU Representative / Contact: Neon Legal Counsel, privacy@neonscreens.comNeon enters into a GDPR-compliant Data Processing Agreement with each client operating locations in the EU/EEA, governing the categories of personal information processed, the purposes of processing, sub-processor arrangements, and each party’s obligations regarding data subject rights and security.

‍16. Changes to This Privacy PolicyNeon may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, technology, or business operations. The revised version will be posted with an updated Effective Date, and material changes may also be communicated through the Services or by other reasonable means where required by law.

‍17. Contact UsIf you have questions about this Policy or wish to exercise your privacy rights, please contact us at:
‍Neon Studios Inc.9633 S. 48th St., Suite 155, Phoenix, AZ 85044
‍Email: privacy@neonscreens.com
‍Phone: 602-699-3383

If you are located in a jurisdiction that provides the right to lodge a complaint with a supervisory authority, you may also contact the applicable data protection authority in your jurisdiction.