PitoReel ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use pitoreel.com and our mobile applications (the "Service").
1. Information We Collect
Information You Provide
- Account data: Name, email address, password (hashed), profile avatar preferences.
- Payment data: Processed by Stripe. We do NOT store credit card numbers. We store your Stripe customer ID.
- Creator data: Display name, bio, social links, uploaded content metadata.
- Communications: Emails to support, chat messages in live streams.
Information Collected Automatically
- Usage data: Pages viewed, content watched, watch duration, search queries.
- Device data: Browser type, operating system, device type, screen resolution.
- Location data: Country-level (from IP address). When you watch through the PitoReel player embedded on a partner's website, we record your approximate city instead (for example, New York or San Francisco), so we can report where viewers of the embedded player are. Your IP address itself is not stored, and we do not collect precise GPS location.
- Cookies: Authentication tokens (JWT) stored in browser. No third-party tracking cookies.
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide the streaming service | Account, payment, usage data |
| Personalize recommendations | Watch history, favorites, genre preferences |
| Process payments | Stripe customer ID, subscription plan |
| Send transactional emails | Email address (password reset, subscription confirmations) |
| Improve the platform | Aggregated usage analytics |
| Prevent fraud and abuse | IP address, device info, rate limiting |
| Creator payouts | Stripe Connect account (creator-provided) |
3. Information Sharing
We do NOT sell your personal information. We share data only with:
- Stripe: Payment processing (PCI-compliant).
- Amazon Web Services: Infrastructure hosting (data encrypted in transit and at rest).
- MongoDB Atlas: Database hosting (encrypted, access-controlled).
- Sentry: Error monitoring (anonymized error reports).
- Law enforcement: Only when required by valid legal process.
4. Data Retention
- Active accounts: Data retained while your account is active.
- Closed accounts: Data deleted within 30 days of account closure.
- Watch history: ViewEvent data auto-expires after 90 days (used for trending).
- Backups: Rolling 30-day retention, then permanently deleted.
5. Your Rights
You have the right to:
- Access: Request a copy of your personal data.
- Correction: Update inaccurate information via your profile settings.
- Deletion: Request account and data deletion (support@pitoreel.com).
- Export: Request a machine-readable export of your data.
- Opt-out: Unsubscribe from marketing emails (transactional emails cannot be opted out).
To exercise these rights, email support@pitoreel.com. We respond within 30 days.
6. Security
- Passwords hashed with bcrypt (12 salt rounds).
- All data transmitted over HTTPS/TLS.
- Database encrypted at rest (MongoDB Atlas).
- Rate limiting on all API endpoints.
- NoSQL injection prevention (express-mongo-sanitize).
- HTTP security headers (Helmet).
7. Children's Privacy
PitoReel is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such data, we will delete it promptly. Contact support@pitoreel.com if you believe a child has provided us information.
8. Cookies & Local Storage
- Authentication token (JWT): Required for login. Stored in localStorage.
- Preferences: Accessibility settings, language preference.
- No third-party tracking: We do not use Google Analytics, Facebook Pixel, or any third-party trackers.
9. California Residents (CCPA)
If you are a California resident, you have additional rights under the CCPA:
- Right to know what personal information is collected and how it is used.
- Right to delete personal information.
- Right to opt-out of the sale of personal information (we do not sell data).
- Right to non-discrimination for exercising your rights.
10. International Users
PitoReel is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or platform notice at least 30 days before taking effect.
12. Contact
Email: support@pitoreel.com
Website: pitoreel.com