PlatformBack to platform

Document 06 of 13

Notice at Collection

A concise collection-time disclosure of personal-information categories, purposes, retention, disclosure, and choices.

Status
Development draft — pending counsel approval
Audience
California users and anyone asked to provide personal information
Version
0.6
Last updated
September 12, 2026
Not approved for production

This draft is structured for legal review. Counsel must approve the responsible entity, contacts, jurisdictional scope, enforceability, and product implementation before these terms become effective.

1. Development notice

This Notice at Collection is a development draft for OTT Platform. It must be placed at or before relevant collection points and reviewed against the final data inventory and California-law applicability before production. Read it together with the Privacy Policy.

2. Categories we may collect

  • Identifiers: name, email, account, organization, tenant, invitation, user, device, network, and transaction identifiers.
  • Customer and commercial records: plans, offers, purchases, subscriptions, gifts, refunds, disputes, entitlements, and support history.
  • Internet and electronic activity: browsing, search, viewing selections, playback progress, live attendance, clicks, sponsor interactions, logs, and security events.
  • Audio, visual, and content information: uploaded media, captions, thumbnails, profile information, comments, chat, reactions, polls, and support submissions.
  • Approximate geolocation and device information derived from IP address, browser, operating system, language, app, and device signals.
  • Professional and organizational information for channel owners, team members, sponsor contacts, and enterprise members.
  • Preferences and inferences, including locale, accessibility, notification, recommendation, engagement, and fraud signals.
  • Sensitive information when necessary, such as login credentials, authentication factors, private report content, and payment or identity information processed principally by Stripe or an identity provider.

3. Why we collect it

  • Provide and personalize accounts, channels, video, live events, search, accessibility, community, organizations, and support.
  • Process payments, subscriptions, refunds, gifts, entitlements, payouts, receipts, and financial reconciliation.
  • Authenticate users, enforce permissions, prevent abuse, protect content, secure the Service, and respond to incidents.
  • Measure performance and engagement, provide tenant analytics, improve features, and understand service use.
  • Send transactional, security, preference-based, and permitted marketing communications.
  • Moderate content, enforce agreements, resolve claims, comply with law, and protect rights and safety.

4. Retention

We retain each category only as reasonably necessary for the stated purposes, the account or channel relationship, security, disputes, legal holds, backup cycles, and applicable payment, tax, copyright, accounting, and legal requirements. Short-lived community data may expire sooner; transaction, consent, security, and rights records may remain longer. The Privacy Policy provides additional criteria.

5. Disclosure and service providers

We may disclose information to the channel owner whose service you use; authorized organization administrators and integrations; and providers supporting hosting, database, authentication, Mux video, Stripe payments, Resend email, OneSignal push, bot prevention, security, analytics, support, and app distribution. We may also disclose information at your direction, in a business transaction, or when reasonably necessary for law, safety, fraud, claims, and rights enforcement.

6. Sale, sharing, and sensitive information

The current platform design does not sell personal information for money or share it for third-party cross-context behavioral advertising. It does not use sensitive personal information to infer unrelated characteristics. If those practices change, we will update this notice and provide legally required opt-out or limit-use controls before the new use begins.

We do not intend to disclose identifiable viewing history for unrelated advertising without the consent required by video-privacy law.

7. Your choices

Depending on applicable law, you may request access, correction, deletion, or portability and may opt out of sale, sharing, targeted advertising, or certain profiling. You may manage cookies, marketing, push, devices, and subscriptions through available controls. We will honor applicable Global Privacy Control signals.

Signed-in users may submit data-export and account-deletion requests from the Account page. Direct privacy questions or account-access problems to dave@badburrito.com. Counsel must approve the final request, verification, response, and appeal process before production.