Privacy Policy

This Privacy Policy describes how the operator of Servyo TV (“we”, “us”, or “our”) collects, uses, discloses, retains, and protects personal information through our website, dashboard, browser-based TV player, Android TV application, APIs, support channels, and related services (collectively, the “Service”). This is a privacy notice, not a waiver of rights provided by applicable law.

1. Information We Collect

a) Information you provide directly

• Account data: Your name or display name, email address, authentication identifiers, account dates, and preferences. Firebase Authentication processes your password; we do not receive or store its plaintext value.
• Billing data: Subscription plan, quantities, status, billing dates, Stripe customer and subscription identifiers, and transaction-related records. Stripe collects and processes payment-card details; we do not store complete card numbers.
• User Content: Images, videos, and other media files you upload to the Service.
• Communications: Feedback, support requests, cancellation requests, and other messages you send us.

b) Information collected automatically

• Service and security data: Request timestamps, IP addresses used for security and rate limiting, authentication events, API and error information, and technical logs made available by our infrastructure providers.
• Device and screen data: Screen identifiers, pairing and credential records, app or browser type, online/offline state, last heartbeat, content-manifest versions, and settings needed to operate paired displays.
• Usage and capacity data: Screen counts, storage consumption, media metadata, schedules, groups, and feature configuration. We do not currently use third-party advertising analytics or cross-site tracking.

c) Cookies & local storage

We and our authentication providers use cookies, IndexedDB, browser storage, and similar local technologies to maintain authentication, remember preferences, retain TV pairing credentials, cache screen manifests and media for offline playback, protect the Service, and operate essential features. Clearing site or application data may sign you out, unpair a screen, or remove cached media. We do not currently use third-party advertising cookies or tracking pixels.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide the Service.
• Process payments and manage subscriptions through Stripe.
• Send transactional emails (e.g., password resets, billing receipts). We do not send marketing emails without your explicit consent.
• Monitor service health, diagnose technical issues, and improve the platform.
• Pair screens, deliver and cache media, apply schedules and groups, and report screen presence.
• Prevent abuse, enforce limits, investigate incidents, and protect users, the Service, and third parties.
• Enforce our Terms of Service and comply with legal obligations.
• Respond to your support requests and communications.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

3. Authority and Legal Bases

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Contract performance: To provide the Service you signed up for.
• Legitimate interests: To improve the Service, prevent fraud, and ensure security.
• Legal obligation: To comply with applicable laws and regulations.
• Consent: Where you have explicitly agreed (e.g., optional marketing communications).

In Canada, we handle personal information based on meaningful consent and other authority permitted by applicable privacy law, including purposes a reasonable person would consider appropriate. We seek fresh consent if required for a materially new purpose. Depending on your location and the circumstances, other legal bases or exceptions may apply.

4. How We Share Your Information

We disclose information only as reasonably necessary for the purposes described here, including to service providers that operate components of the Service:

• Firebase and Google Cloud: Authentication, Realtime Database, media storage, security, and supporting infrastructure.
• Stripe: Checkout, payment processing, fraud prevention, subscription management, invoices, and billing records. Stripe also processes information under its own privacy notice when you interact with Stripe-hosted services.
• Hosting, networking, and support providers: Application hosting, content delivery, operational logging, communications, and technical support where enabled.

We may also disclose information when you direct us to do so; to authorized members of your organization; when reasonably necessary to comply with law or legal process, investigate fraud or security incidents, enforce agreements, or protect rights and safety; or in connection with a financing, merger, acquisition, reorganization, asset sale, or similar transaction, subject to applicable confidentiality and privacy requirements.

We do not share your data with advertisers, data brokers, or analytics platforms that track you across the web.

5. Data Retention

We retain information while your account is active and afterward only for as long as reasonably necessary for the purposes described in this policy, including providing the Service, completing deletion and backup cycles, maintaining security and audit records, resolving disputes, enforcing agreements, and satisfying tax, accounting, payment, and legal obligations. Retention periods vary by information type and provider.

Canceling a subscription does not delete your account or media. You may delete individual media through the dashboard. To request account deletion, contact us using the address below. We will delete or de-identify information that is no longer required, subject to legal holds, required records, fraud prevention, backup cycles, and information retained by service providers under their own lawful schedules. Cached media or credentials on a TV, browser, or Android device may remain until that device refreshes, clears its storage, is reset, or evicts the cache; you are responsible for devices in your possession or control.

6. Data Security

We use administrative, technical, and organizational safeguards designed to protect information in light of its sensitivity, including:

• Encrypted network transport where supported by the Service and providers.
• Access controls and Firebase rules designed to separate customer and screen data.
• Passwords are hashed and stored by Firebase Authentication; we never see or store plaintext passwords.
• Stripe-hosted handling of complete payment-card details.
• Hashed screen-device secrets on the server, scoped TV credentials, rate limiting, validation, and restricted administrative access.

No safeguard, device, transmission, or storage system is completely secure. You are responsible for securing your account, email, paired devices, pairing codes, remote controls, local networks, and physical access. Notify us promptly of suspected unauthorized access. We investigate suspected breaches and provide notices to regulators or affected individuals when applicable law requires.

7. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly. If you believe we have inadvertently collected information from a minor, please contact us at servyotv@gmail.com.

8. International Transfers

We and our providers may process or store information in Canada, the United States, and other countries where we or they operate. Information in another country may be subject to that country's laws and lawful access by courts, law enforcement, or national-security authorities. Where applicable law requires a transfer mechanism or safeguard, we and our providers will use an appropriate mechanism.

9. Your Rights

Depending on your location, you may have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure (“right to be forgotten”): Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise a right, contact us at servyotv@gmail.com. We may verify your identity and authority, request information needed to locate the records, and apply lawful exceptions. We will respond within the time required by applicable law; PIPEDA access requests are generally addressed within 30 days, subject to permitted extensions. You may challenge our response or complain to the applicable privacy regulator, including the Office of the Privacy Commissioner of Canada where PIPEDA applies.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

9A. Information in Customer Content

Business customers decide what User Content to upload and display. If that content contains personal information about employees, customers, or other people, the customer is responsible for having lawful authority, providing required notices, respecting requests and retention obligations, and configuring access appropriately. We process that content to provide the Service and may assist with a verified request as reasonably required by applicable law and our agreement with the customer.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this policy as the Service, providers, or legal requirements change. We will post the revised policy and update the date above. For material changes, we will provide additional notice or obtain consent when required. We will not rely on a policy update alone to use personal information for a materially new purpose when applicable law requires consent.

12. Contact Us

The person responsible for privacy compliance at Servyo TV receives privacy questions, access or correction requests, deletion requests, and complaints at: