Privacy Policy

IPTVbp ("we", "us") provides a multi-tenant billing and subscription platform for IPTV resellers. This policy covers data we hold for the marketing site (iptvbp.com) and the vendor portal. Tenant-specific privacy disclosures (i.e. data your IPTV reseller holds about you) are governed separately by that vendor's policy.

Account data. When you sign up as a vendor or staff member: email, name, hashed password, role, and the shop(s) you create.

Usage data. Login timestamps, IP address (for security and rate-limiting), user agent, and an audit log of impersonation + privileged actions.

Billing data. When you upgrade a plan we use Stripe / PayPal as a payment processor — they collect card data directly. We retain only the resulting subscription state (plan, period, status) and a customer ID pointer to the processor.

Analytics. If you accept cookies (see below), aggregated visit data via Google Analytics 4 with IP anonymization. Reject and we load nothing.

Essential cookies. Authenticated session token, CSRF token, theme preference. We can't run the platform without these — they stay regardless of your analytics choice.

Analytics cookies. Loaded only after explicit consent via the banner. Reject all and no third-party scripts run. Choice persisted in localStorage as iptvbp-cookie-consent.

Clear that key from your browser to revisit the banner and change your choice.

Passwords stored as bcrypt hashes. Session tokens hashed at rest. All traffic over HTTPS with HSTS. Postgres + Redis run on private network behind firewall. Audit log tracks privileged actions. Rate limiting on authentication endpoints to deter credential stuffing.

Account data is retained while your account is active. On account closure we delete personal identifiers within 30 days; pseudonymized billing records may be retained up to 7 years to satisfy tax/accounting obligations.

Audit and login attempt logs are kept for 90 days then purged. Email logs (transactional send history) are kept for 12 months.

You have the right to:

• Access — request a copy of personal data we hold about you
• Rectify — correct inaccurate data
• Erase — delete your account and associated personal data
• Export — receive your data in a machine-readable format
• Object — opt out of analytics (use the cookie banner) or marketing emails
• Lodge a complaint with your local data protection authority

To exercise any of these, email [email protected] — we respond within 30 days.

Privacy questions: [email protected]

General support: sign up and message us from the in-app chat at iptvbp.com/portal/register

We may update this policy as our processing changes. Material changes will be noted on this page with an updated date and surfaced via in-app notification for vendors.