Privacy Policy

1. Introduction

StreamVault ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share and protect information about you when you use our live TV streaming service, website and applications (collectively, the "Service").

We operate in accordance with the General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA) and other applicable data protection legislation worldwide.

Please read this Privacy Policy carefully. By using our Service, you acknowledge that you have read and understood this policy. If you do not agree with our practices, please discontinue use of the Service.

For the purposes of EU/UK data protection law, StreamVault acts as the data controller of your personal information.

2. Information We Collect

We collect information you provide directly to us, information collected automatically, and information from third parties.

2.1 Information You Provide

• Account Registration: When you create a StreamVault account, we collect your name, email address, username and password.
• Payment Information: When you subscribe, we collect billing details. Payment card information is processed directly by our secure payment processors and is not stored on our servers in its full form.
• Communications: When you contact our support team, we collect the content of your messages, your email address and any information you choose to provide.
• Profile Information: Information you add to your account profile, including profile picture, language preferences and parental control settings.

2.2 Information Collected Automatically

• Usage Data: Information about how you use our Service, including channels watched, viewing duration, search queries and feature usage.
• Device Information: Device type, operating system, browser type and version, unique device identifiers, and app version.
• Log Data: IP address, access times, pages visited, referring URL and other diagnostic data.
• Streaming Quality Data: Bitrate, buffering events, stream start times and error reports — used to improve streaming performance.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location data unless you grant explicit permission.
• Cookies and Tracking Technologies: As described in Section 8 below.

2.3 Information from Third Parties

• If you register or log in using a third-party service (such as Google or Apple), we receive information from that provider as permitted by their terms and your privacy settings.
• Payment processors may provide us with limited account verification information.
• Analytics and advertising partners may provide aggregated audience data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: Creating and managing your account, processing your subscription, delivering live streaming content and enabling all Service features.
• Customer Support: Responding to your enquiries, troubleshooting technical issues and resolving billing disputes.
• Personalisation: Customising your content recommendations, interface preferences and viewing experience based on your usage patterns and preferences.
• Service Improvement: Analysing usage patterns to improve our streaming technology, interface design, channel selection and overall service quality.
• Communications: Sending you service-related notifications, subscription updates, billing reminders and security alerts. With your consent, we may also send you marketing communications about new features, promotions and offers.
• Security and Fraud Prevention: Monitoring for suspicious activity, protecting against unauthorised account access and preventing abuse of our Service.
• Legal Compliance: Complying with applicable laws, regulations, legal processes and lawful requests from public authorities.
• Analytics: Understanding how users interact with our Service in aggregate to inform business and product decisions.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data on the following legal grounds:

• Contract Performance (Article 6(1)(b) GDPR): Processing necessary to perform our contract with you — providing the streaming service, processing payments and managing your account.
• Legitimate Interests (Article 6(1)(f) GDPR): Processing for our legitimate business interests, such as fraud prevention, security monitoring, service analytics and improving our platform — where these interests are not overridden by your rights.
• Legal Obligation (Article 6(1)(c) GDPR): Processing required to comply with our legal obligations, including tax and financial reporting requirements.
• Consent (Article 6(1)(a) GDPR): Processing based on your explicit consent, such as marketing communications and non-essential cookies. You may withdraw consent at any time.

5. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: We share data with carefully selected third-party vendors who assist in operating our Service, including cloud hosting providers, payment processors, customer support platforms, analytics services and email delivery services. All service providers are contractually bound to process data only as instructed by us and in accordance with applicable data protection law.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.
• Legal Requirements: We may disclose your information if required to do so by law, legal process, governmental request, or where necessary to protect the rights, property or safety of StreamVault, our subscribers or the public.
• With Your Consent: We may share information with third parties when you have given us explicit permission to do so.
• Aggregated Data: We may share anonymised or aggregated data that cannot reasonably be used to identify you with business partners, advertisers or other third parties.

6. Data Retention

We retain your personal data for as long as necessary to provide you with the Service and fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained for the duration of your subscription and for up to 3 years after account closure for legitimate business and legal purposes.
• Payment Records: Retained for 7 years to comply with financial and tax reporting obligations.
• Usage and Analytics Data: Typically retained for 24 months, after which it is anonymised or deleted.
• Support Communications: Retained for 2 years from the date of your last interaction with our support team.
• Marketing Data: Retained until you withdraw consent or unsubscribe from marketing communications.

When data is no longer required, we securely delete or anonymise it in accordance with our data retention schedule.

7. Your Rights

Under the GDPR, UK GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access (Article 15 GDPR): You have the right to request a copy of the personal data we hold about you and information about how it is used.
• Right to Rectification (Article 16 GDPR): You have the right to request correction of inaccurate or incomplete personal data we hold about you.
• Right to Erasure (Article 17 GDPR): Also known as the "right to be forgotten", you may request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to Data Portability (Article 20 GDPR): You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller.
• Right to Object (Article 21 GDPR): You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Restrict Processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Rights Related to Automated Decision-Making (Article 22 GDPR): You have the right not to be subject to solely automated decisions that have a significant effect on you.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at privacy@streamvault.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the EU, you can find your local authority at edpb.europa.eu. In the UK, the relevant authority is the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies and similar tracking technologies to operate and improve our Service, remember your preferences and analyse usage patterns. Our Cookie Policy provides full details of the cookies we use, their purposes and how to manage them.

Essential cookies are required for the Service to function and cannot be disabled. Non-essential cookies (analytics, marketing and preference cookies) are only placed with your consent, which you can provide or withdraw via our cookie consent banner.

Please see our full Cookie Policy for detailed information.

9. International Transfers

StreamVault operates globally and your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) or United Kingdom, including countries that may not provide the same level of data protection as your home country.

Where we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreements (IDTAs)
• Transfers to countries with adequacy decisions from the European Commission
• Binding Corporate Rules where applicable

For information about the specific safeguards in place for transfers affecting you, please contact us at privacy@streamvault.com.

10. Children's Privacy

StreamVault is not directed at children under the age of 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect or solicit personal data from children under 16.

If you believe we have inadvertently collected information from a child under 16, please contact us immediately at privacy@streamvault.com and we will take steps to delete that information promptly.

Parental controls are available within the Service to help parents and guardians manage the content accessible to younger viewers on a shared account.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements or for other operational, legal or regulatory reasons.

When we make material changes to this Privacy Policy, we will notify you by:

• Sending an email to the address associated with your account
• Displaying a prominent notice within the StreamVault application or website
• Updating the "Last Updated" date at the top of this policy

Your continued use of the Service following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you should discontinue use of the Service and may request deletion of your account.

12. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection team:

We take privacy enquiries seriously and will respond to all requests within 30 days.