Overview
NovaStream ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard information when you use our media player application available on Roku devices and our companion web portal at qyvo.cc.
Important Notice
NovaStream is a media player only. We do not host, store, distribute, or provide any video content, channels, or media files. You are solely responsible for the content you access through the application using your own playlists and credentials.
1. Information We Collect
1.1 Information You Provide
- Device MAC Address: A unique identifier for your Roku device, used to associate your device with your playlists and subscription status.
- Playlist Credentials: Xtream Codes API credentials (host, username, password) or M3U/M3U8 URLs that you provide to access your own content libraries.
- Email Address: If you choose to create an account or contact support.
- Payment Information: Processed securely by Stripe. We do not store your credit card numbers or payment credentials.
1.2 Information Collected Automatically
- Device Information: Roku device model, firmware version, and unique device identifier.
- Usage Data: App launch frequency, feature usage, and error logs (anonymized).
- IP Address: For security, fraud prevention, and geographic analytics.
- Playback Telemetry: Technical metrics like buffering events, codec compatibility, and playback success rates (no content metadata).
1.3 Information We Do NOT Collect
- We do not collect, store, or analyze the content you watch.
- We do not track which channels, movies, or series you access.
- We do not monitor, review, or endorse any content added by users.
- We do not sell your personal data to third parties.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To authenticate your device, manage your playlists, and process subscription payments.
- Security: To detect and prevent fraud, abuse, and unauthorized access.
- Support: To respond to your inquiries and troubleshoot technical issues.
- Improvement: To analyze aggregated, anonymized usage patterns and improve app performance.
- Legal Compliance: To comply with applicable laws and regulations.
3. Data Storage and Security
Your data is stored securely using industry-standard encryption and security practices:
- Database: Supabase (PostgreSQL) with Row Level Security (RLS) policies.
- Encryption: All data in transit is encrypted via TLS 1.2+. Credentials stored in Supabase are encrypted at rest.
- Payment Processing: Stripe (PCI DSS Level 1 compliant). We never touch your payment credentials.
- Access Controls: Strict role-based access with audit logging for all administrative actions.
4. Your Rights (GDPR, CCPA, and Other Jurisdictions)
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing of your data for specific purposes.
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.
To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days.
5. Data Retention
We retain your personal data only for as long as necessary to provide our services:
- Active Accounts: Data retained while your subscription is active.
- Expired Accounts: Device MAC and subscription history retained for 12 months for audit and fraud prevention.
- Deleted Accounts: Personal data deleted within 30 days of request. Anonymized analytics may be retained.
- Payment Records: Retained for 7 years as required by tax and accounting regulations.
6. Third-Party Services
We use the following third-party services to operate NovaStream:
- Supabase: Database and backend infrastructure (Privacy Policy).
- Stripe: Payment processing (Privacy Policy).
- Vercel: Web hosting for qyvo.cc (Privacy Policy).
- Cloudflare: DNS, CDN, and security (Privacy Policy).
7. Children's Privacy (COPPA)
NovaStream is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected], and we will delete the information.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country. We ensure appropriate safeguards are in place to protect your data, including Standard Contractual Clauses (SCCs) where required.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: