This Privacy Policy describes how Riva Stream (“we”, “us”) collects, uses, and shares information when you use www.rivastream.com and the Riva Stream application.
1. Who we are
Riva Stream operates browser-based media-player software and an optional software subscription. We do not provide, curate, host, sell, or bundle media, channels, playlists, or third-party subscriptions. Users connect media sources they are legally authorised to access. Contact: support@rivastream.com.
2. Information we collect
- Account data: email address, authentication identifiers, and account preferences.
- Subscription data: plan status, billing dates, and Stripe or PayPal customer/subscription identifiers. Payment credentials are processed by the payment provider; we do not store full card numbers.
- Connected-source data: playlist URLs, provider server addresses, usernames, API keys, portal identifiers, and other connection details you choose to save or sync. Depending on the integration, these details may include provider passwords or access tokens.
- Playback and relay data: source URLs, stream identifiers, format information, IP address, timestamps, and relay usage needed to fetch or convert media from a source you connect. For troubleshooting, confirmed transcoded viewing sessions also retain the stream title, connected playlist, source URLs and playlist credentials, linked to your account and playback timestamps. These source details are available only to authorised administrators; playlist credentials are excluded from automatic activity email reports.
- Usage and device data: app settings, playlist metadata, playback preferences, browser type, IP address, and security logs needed to operate and protect the Service.
- Cookies and browser storage: used for sign-in state, preferences, consent, and locally saved integration details. Account passwords are not intentionally stored in browser storage. See Section 6.
3. How we use information
We use information to:
- Provide, maintain, and improve the Service;
- Authenticate users and manage subscriptions;
- Respond to support requests;
- Detect abuse, fraud, and security incidents;
- Comply with legal obligations.
4. Legal bases (EEA/UK users)
Where GDPR applies, we process personal data on the bases of contract performance, legitimate interests (security, service improvement), consent (where required, e.g. non-essential cookies), and legal obligation.
5. Sharing
We share data with service providers that help us run the Service, including:
- Firebase / Google Cloud (authentication and account storage);
- Stripe and PayPal (payment processing);
- Cloudflare (hosting and security);
- Email delivery providers (account and verification emails).
- Media and metadata services you choose to connect, which receive the connection details and requests needed to fulfil that feature;
- Riva Stream's conversion relay, when browser-format compatibility is used.
We may disclose information if required by law or to protect rights, safety, and security.
6. Cookies
We use essential cookies and browser storage for login state, preferences, integration settings, and cookie consent. Non-essential analytics or advertising storage is loaded only after consent where required. You can clear site data in your browser settings; doing so may remove saved sources and sign you out.
7. Retention
We retain account and billing records while your account is active and for a reasonable period afterward to meet legal, tax, and dispute-resolution requirements. Temporary casting uploads and device-login sessions expire automatically, although deletion may be delayed by backup or cleanup processes. You can request account deletion by contacting support.
Transcoded viewing history, including its source details, currently remains stored until an administrator deletes it. Contact support to request removal of your playback history.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. Contact support@rivastream.com. You may also lodge a complaint with your local data protection authority.
9. International transfers
Your information may be processed in countries outside your own. Where required, we use appropriate safeguards for cross-border transfers.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data.
11. Changes
We may update this policy from time to time. The “Last updated” date above will change when we do.