Privacy Policy

Effective October 20, 2026

Who we are and what this covers

Welland Collective LLC operates Service Producer. This policy covers the Service Producer website, producer and display apps on macOS, Windows, iOS and tvOS, Raspberry Pi displays, and connected display/control clients. Contact support@wellandcollective.com or write to Welland Collective LLC, c/o InCorp Services, 1585 Mallory Ln, Suite 104, Brentwood, TN 37027-3036, United States. Your organization determines which people, plans and service content it puts in its workspace and who can access them; contact its administrator about that content as well.

Information we process

Account information includes your name, email, password hash, workspace membership, role, invitations and sign-in/session records. Workspace content includes service plans, titles, timing, cues, people and team notes, locations, rooms, layouts and announcements. Display information includes the name you give a device, its identifier, pairing credentials, assigned content and connection/heartbeat information. We process network and technical information such as IP address, request/error logs, browser/app version and support messages to deliver and troubleshoot the service. Plans and notes can contain personal information or reveal religious affiliation; only include information your organization is authorized to share.

Connected services and local outputs

When an administrator connects Planning Center or Resi, we process the authorized account details, imported plans, cues and other data needed for that integration. Integration credentials and renewal tokens are stored encrypted on the server. A Resi password entered to establish a connection is sent to Resi for sign-in; the integration uses saved session material for renewal rather than retaining that password. Disconnect an integration in its settings to stop future access from Service Producer; imported workspace content is separate. Local monitor, NDI, Blackmagic and control/decoder connections send selected content or commands to the destinations you configure. People and equipment on a venue network may be able to receive an NDI stream; control network access and output destinations accordingly.

Why we use information

We use information to authenticate users, enforce workspace roles, pair and manage devices, synchronize service content and clocks, deliver account/invitation emails, provide integrations and support, diagnose faults and protect the service. Where a legal basis is required, we rely on performance of our agreement for service delivery, legitimate interests in security and support, compliance with legal obligations, and consent where required. We do not use Service Producer information for advertising, sell it, or share it for cross-context behavioral advertising.

Who receives information

Authorized workspace members and approved displays receive the information their permissions and assignments allow. A display may be visible to anyone in its physical location. Cloudflare provides hosting, database, storage, security, email delivery and operational logging. Planning Center and Resi receive requests when you enable their integrations and apply their own policies. Apple processes App Store/TestFlight distribution, optional tester feedback and diagnostics under its policies; Microsoft WebView2 and Raspberry Pi OS components may contact their vendors for runtime/OS services and updates. We may disclose information when legally required, to protect rights or security, or in a business transfer with appropriate safeguards. We do not grant unrelated Communified workspaces access to Service Producer data.

Device storage and permissions

Essential cookies keep staff signed in. Local browser storage or platform Keychain stores display pairing credentials; preferences may use local storage or UserDefaults. Forgetting a display or clearing app data removes its local pairing; an administrator can revoke its server-side access. Camera or microphone access is requested only when you choose a feature that needs it. Display-only clients do not need camera or microphone access. We do not use advertising cookies or an advertising identifier. Browser/OS privacy controls remain available, although blocking essential storage can prevent sign-in or pairing.

Retention and deletion

Account and workspace information is retained while needed to operate the service and fulfill the organization's instructions, support, security and legal obligations. Expired authentication sessions and password links are periodically removed; authentication audit records are normally cleaned after 90 days. Backup exports use a retention schedule of up to 90 days for daily copies and one year for monthly copies; deleting active records does not immediately remove locked backup copies. Retained backup data is restricted to recovery, security and legal needs. Contact us to request access, correction, export or deletion. Deleting your individual account does not delete an organization's shared service records or unrelated paired displays. We will explain any information we must retain and the applicable reason.

Your choices and rights

You can delete your individual account in Settings → Account → Delete my account after confirming your password. You can update workspace information through authorized controls, ask an administrator to change membership or revoke a device, and disconnect integrations. Depending on where you live, you may have rights to access, correct, delete or obtain your information, object to or restrict processing, withdraw consent, or appeal a decision. Send requests to support@wellandcollective.com; we may verify your identity and coordinate with your organization. You can complain to your local data protection authority. We do not discriminate for exercising privacy rights.

Security, international processing and children

We use encrypted network connections, hashed passwords, access controls and protected integration credentials. No system is completely secure. Our operator is in the United States and service providers may process data in other countries; applicable safeguards are required where the law requires them. Service Producer is intended for authorized organization staff and volunteers, not for children under 13 to create personal accounts. Contact us if you believe a child has provided account information without appropriate authorization.

Changes

We will post an updated date when this policy changes and provide additional notice of material changes where required. This policy is effective October 20, 2026.