Privacy Policy

Who we are

Marquee is operated by OpsRepair. Parent company: https://opsrepair.com. Mailing address: 2709 S Oakland St, Arlington, VA 22206. This policy covers our local screens and signs marketplace, public waitlist, partner program and web player. Support and privacy questions: daniel@opsrepair.com; phone: (571) 540-9001. The service is for adults 18 and over using it for business; it is not directed to children. Marketing emails include our business mailing address and an unsubscribe link, and respect your marketing preferences. Transactional messages such as receipts and password resets are separate from marketing.

Waitlists, accounts and profiles

Host waitlists collect business name, city, ZIP, business type, estimated foot traffic, space types, willingness to carry local ads and email. Advertiser waitlists collect brand name, desired reach, budget range, advertising medium, description of what you would promote and email. We use these to plan launch and contact you about Marquee. Optional marketing consent is separate.

Accounts collect email, password handled by our authentication provider, verification and session information. Business profiles may contain display and business names, phone, avatar, logo, business and shipping addresses, and preferences. We use these for account access, listing, bookings and delivery. We keep the host's shipping address separate from discovery listings. The booking advertiser can see that business ship-to address only after payment; hosts, authorized administrators and fulfillment providers can also access it as needed.

Listings, artwork and sign verification

Listings contain location, photographs, type, dimensions, price, availability, content preferences and digital operating hours. The Studio stores creative text, images, editor layouts, QR codes and exported PNG, PDF or video artwork. Approved listing media can be viewed by marketplace users. Booking artwork is shared with authorized participants, administrators, the relevant player or print provider; signed media links expire but recipients may keep downloaded copies.

Before a sign verification photo, we ask for live camera access and device location. At capture we record the photograph, server timestamp, latitude/longitude, reported accuracy and distance to the listed spot. This is used to verify installation, takedown or a requested mid-flight check, not to track your movements continuously. No location or an out-of-tolerance capture goes to admin review. Photos and verification results are visible to authorized booking participants and administrators. Camera permission does not guarantee that a device's location or photograph cannot be falsified.

Playback, QR offers and redemptions

The web player stores its device capability locally, caches eligible media for offline playback and submits device heartbeats, creative/booking identifiers, play timestamps and duration. This supports availability monitoring and proof of play; play counts are not a count of unique people who saw an ad.

QR offer pages record booking, campaign, space and scan time. If you choose to share contact details, optional email/phone is sent to the named advertiser for the offer. A separate unchecked choice controls future marketing from that advertiser. Redemptions record promo code, booking, reported value and optional attribution answer. These measures support campaign reporting; they do not guarantee revenue or identify every viewer.

Partners and cookies

Partner applications include contact and business details, type, city, client/venue estimate, website and referral source. Partner tools hold account or spot attribution, client invitations, markup, commissions and payout records. With your optional cookie permission, the first valid partner referral is remembered for up to 90 days by default. Business credit windows and rates are shown in the partner program and may be configured separately. We ignore self-referrals.

Essential login/session storage, player capability/offline storage and a cookie-choice record support the service. Essential only does not permit referral cookies or optional analytics. We honor Global Privacy Control by using Essential only. There is currently no optional advertising analytics script installed; operational error reporting is used to keep the service working. We do not sell personal data, use cross-site targeted advertising or make decisions producing legal or similarly significant effects solely through profiling.

Providers and sharing

Stripe processes payments and may receive your contact details, customer ID and booking metadata. We store payment/session references, amounts, payment/refund status and transaction records, not full card numbers. Lovable Cloud provides the backend, authentication and storage using Supabase infrastructure. Lovable operational error reporting may receive technical errors; logs may include request context and have provider-controlled retention.

Google Places receives a print/sign-shop search and approximate search location from our server. Displayed business details may be cached for 24 hours and include Google attribution; open-now information can become stale. Google Maps links and Places data are subject to Google's Terms of Service (https://policies.google.com/terms) and Privacy Policy (https://policies.google.com/privacy). Google Fonts serves our typefaces and receives normal browser request information. Amazon links, when configured, send you to Amazon and may attribute a qualifying purchase to us; Amazon's own policies apply.

For a booking we share the minimum necessary artwork, specifications, delivery address and fulfillment details with the host, advertiser and selected printer/carrier. Printing is currently concierge/manual; automated Gelato/4over and Canva Connect imports are not live. We may disclose records for legal requirements, fraud prevention or a business transfer with appropriate safeguards.

Retention and security

Our retention targets are 24 months for play logs, 24 months for scans, 12 months after flight end for installation/takedown photographs, and launch plus 12 months for waitlists. We retain financial, booking, dispute and tax records for up to 7 years or longer where law or an active dispute requires it. Unneeded account/profile and marketing data should be removed after a deletion request. These are operational retention targets: automated lifecycle deletion is not yet enabled for every category, so do not assume a record is automatically deleted exactly on that date.

We restrict access by account, role and booking relationships, use private storage and short-lived links where appropriate, and verify payment callbacks. No system is perfectly secure. Provider backups and logs may persist according to their own retention schedules.

Your choices and Virginia rights

Contact daniel@opsrepair.com to request access, correction, deletion or a portable copy, or to opt out of marketing. Account settings provide a data download and an account-deletion request. We verify your identity, retain only records necessary for legal/financial obligations, and explain any exception. You can change Marquee update preferences and cookie choices at any time.

Where the Virginia Consumer Data Protection Act applies, you may access, correct, delete and obtain portable personal data and opt out of sale, targeted advertising and qualifying profiling. We do not conduct those activities and honor GPC nonetheless. We aim to respond within 45 days; an additional 45 days may be needed where permitted, with an explanation. You may appeal a refusal by contacting the privacy address with 'Privacy appeal'; we aim to answer within 60 days and explain how to contact the Virginia Attorney General if an appeal is denied. Applicable laws may limit particular rights, and business-use data may be outside VCDPA coverage.

Changes

We update the version and date on this page. Material changes are announced in-app or by service email where we have an address. When agreement versions change, signed-in users are asked to accept the current documents before continuing in the marketplace.