Privacy Policy

Last updated: replace this date when you publish.

Iberia Stream (“we”, “us”) respects your privacy and is committed to protecting it through this Privacy Policy. This document explains what data we collect, how we use it, who we share it with, and the rights you have over your data under the EU GDPR, UK GDPR and the California Consumer Privacy Act (CCPA).

1. What we collect

Account data: the email address you use to sign up and an internal user ID.
Order data: plan purchased, currency, country (for tax), payment provider transaction ID — we never store full card numbers.
Service data: connection logs (timestamp, IP, app/user-agent) retained for up to 30 days for fraud and abuse prevention.
Support data: messages you send us by email or WhatsApp.

2. Why we use it

To provide the service you paid for.
To process payments and issue invoices.
To prevent unauthorised account sharing and credential abuse.
To answer your support requests.
To send transactional emails (renewals, receipts, password resets).

3. Legal basis (GDPR)

We process personal data on the basis of (a) performance of contract, (b) legitimate interest in fraud prevention, and (c) consent for any optional marketing communication.

4. Who we share data with

We share data only with processors strictly necessary to operate the service: payment providers (Stripe, PayPal), email delivery (Postmark/Mailgun), CDN/hosting partners, and support tooling. We never sell user data and we never share it with advertisers.

5. Data retention

Account data is kept for the lifetime of your account plus 24 months (for legal/accounting reasons). Service logs are kept up to 30 days. You may request deletion at any time.

6. Your rights

Right of access — request a copy of your personal data.
Right to rectification — correct inaccurate data.
Right to erasure — request that we delete your data (“right to be forgotten”).
Right to data portability — receive your data in machine-readable format.
Right to object — object to certain processing activities.
Right to lodge a complaint with your local supervisory authority.

7. Cookies

See our separate Cookie Policy for details on how we use cookies and how to opt out.

8. Contact

For any privacy request email privacy@iberiastream.example. We respond within 30 days.