1. Scope and privacy roles
This Privacy Policy describes how Bad Burrito Productions, INC intends to handle personal information through OTT Platform. It is a development draft pending counsel approval and must be reconciled against a final data inventory, vendor configuration, and legal-entity review before production.
The platform operator generally determines how information is used for shared account, security, product, commerce, playback, analytics, support, and compliance functions. Independent channel owners may separately determine how channel audience information is used for programming, memberships, offers, sponsors, communications, integrations, and support. The channel owner may therefore be a separate business or controller for those activities and should provide any additional notice required by law.
This Policy does not cover a third party's independent website, app, payment service, social network, or content. It also does not govern workforce information handled under a separate employment notice.
2. Information we collect
- Identifiers and account data: name, email, user and tenant IDs, login provider, organization, role, authentication state, invitations, and account settings.
- Commercial data: offers viewed, orders, subscriptions, gifts, entitlements, refunds, disputes, invoices, transaction IDs, currency, and payment status. Stripe processes complete card and bank details; the platform is not designed to store full card numbers.
- Viewing and activity data: searches, page and channel visits, content selected, playback starts, progress, completion, watch history, favorites, live attendance, device concurrency, clicks, campaign attribution, and sponsor interactions.
- Content and community data: uploaded video, audio, captions, thumbnails, metadata, comments, chats, reactions, polls, reports, support messages, and information within those materials.
- Device and network data: IP address when transmitted with requests, browser, operating system, device and session identifiers, app version, language, approximate location derived from network information, cookie or local-storage identifiers, crash data, and security events, including records used to enforce the one-active-session limit for operator accounts.
- Creator and business data: channel name, branding, team memberships, connected-account status, offer settings, sponsors, contracts or rights attestations, tax or payout status returned by a provider, and operational activity.
- Preferences and inferences: notification choices, locale, accessibility preferences, recommendations, engagement segments, fraud indicators, and likely interests derived from use of the Service.
- Sensitive information where necessary: account credentials and authentication factors, precise content of private support or community reports, and regulated identity or financial information processed primarily by Stripe or an identity provider. We do not intend to use sensitive information to infer unrelated characteristics.
3. Sources of information
We collect information directly from you; automatically from browsers, apps, players, cookies, logs, and security systems; from channel owners and their authorized integrations; from payment, identity, video, email, push, hosting, analytics, anti-abuse, and app-store providers; from organizations that grant access; and from lawful public or third-party sources used for verification, safety, or support.
If a channel owner imports member information, it must have authority to do so and provide required notice. We may reject or delete imports that appear unauthorized, excessive, insecure, or inconsistent with disclosed purposes.
4. How we use information
- Create and secure accounts, authenticate users, enforce roles and operator-account allowances, limit each named operator to one active computer or browser session, prevent abuse, and recover access.
- Upload, process, host, search, caption, localize, protect, deliver, and measure video and live programming.
- Create checkout sessions, verify payments, administer subscriptions, grant or revoke access, process refunds, reconcile transactions, and send receipts.
- Provide comments, chat, polls, favorites, progress, continue-watching, recommendations, notifications, organizations, integrations, and support.
- Operate, debug, monitor, protect, test, improve, and document the Service, including capacity and accessibility work.
- Produce tenant-scoped and aggregate analytics, detect fraud, investigate incidents, enforce agreements, moderate content, and respond to rights or legal requests.
- Communicate about transactions, security, service changes, support, and—where allowed—products, programming, promotions, and sponsors.
- Comply with law, tax, accounting, sanctions, recordkeeping, litigation, and lawful process; protect users and the public; and complete a merger, financing, reorganization, or sale.
5. Video-viewing privacy
Viewing selections and history deserve heightened protection. We use identifiable viewing information to provide requested playback, resume progress, enforce access, support viewers, secure accounts, and generate channel analytics as described here.
We do not intend to disclose information that identifies a renter, purchaser, or subscriber together with specific video materials to an advertising or unrelated third party without the informed, written consent or other legal basis required by the Video Privacy Protection Act and similar laws. Any consent for ongoing disclosures must be presented distinctly, be revocable, and satisfy applicable duration and form requirements.
Product analytics should use first-party, tenant-scoped, pseudonymous, or aggregated data where reasonably practicable. Channel owners may receive identifiable channel viewing information only for disclosed, permitted purposes and may not sell it or use it for undisclosed cross-context advertising.
6. How we disclose information
- Channel owners and authorized channel teams, for channel operations, audience support, commerce, analytics, moderation, organizations, and communications.
- Service providers and processors for hosting, database, authentication, Mux video, Stripe payments, Resend email, OneSignal push, bot protection, logging, security, customer support, and consent-approved PostHog product analytics.
- Organizations and integrations that provide or verify a membership, entitlement, identity, or administrative relationship, according to configured permissions.
- Sponsors or advertisers through aggregated delivery reporting or direct interactions. We will not disclose identifiable viewing history for cross-context advertising without required notice and consent.
- Professional advisers, auditors, insurers, financiers, and transaction counterparties subject to appropriate duties.
- Courts, regulators, law enforcement, rights holders, emergency services, and affected parties when reasonably believed necessary to comply with law, enforce rights, investigate fraud or abuse, protect safety, or respond to valid process.
- A successor or prospective successor in a merger, financing, restructuring, bankruptcy, or sale, subject to confidentiality and legally required notice or choice.
- Other parties at your direction or with your consent.
7. Sale, sharing, and targeted advertising
As presently designed, the platform does not sell personal information for money and does not share personal information for third-party cross-context behavioral advertising. First-party sponsor cards and tenant analytics do not by themselves authorize a channel owner or sponsor to build an undisclosed profile of a viewer.
If advertising technology, data practices, or legal classifications change, we will update the notices, provide required opt-out controls, honor applicable Global Privacy Control signals, and obtain video-viewing consent before the new practice begins. A contractual statement will not override the actual operation of cookies, pixels, SDKs, APIs, or exports.
8. Retention and deletion
We retain information for the shortest period reasonably necessary for the purposes described, including the life of an account or channel, and then according to approved deletion schedules. Criteria include the nature and sensitivity of the data, user expectations, contract and support needs, security and fraud risk, backup cycles, provider capabilities, legal holds, limitation periods, and tax, accounting, payment, copyright, and regulatory duties.
- Community chat and similar short-lived interaction records should expire on the documented product schedule unless preserved for safety, dispute, or legal reasons.
- Playback progress may remain while the account is active and be deleted or de-identified after account closure, subject to exceptions.
- Orders, subscriptions, consents, refunds, disputes, tax, and ledger records may be retained for legally required financial and claims periods.
- Security, audit, takedown, and enforcement records may be retained to protect the Service and document decisions.
- Content and tenant exports are the channel owner's responsibility before termination; provider and backup deletion may not be immediate.
9. Privacy choices and individual rights
Depending on residence and applicable thresholds, you may have rights to know or access personal information; receive a portable copy; correct inaccurate information; delete information; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain sensitive-information uses; withdraw consent; appeal a decision; and receive equal service without unlawful discrimination.
You may also manage notification preferences, cookies, devices, subscriptions, and account information through available controls. Marketing opt-out does not stop necessary transactional, security, legal, or service communications.
Signed-in users may submit a data-export or account-deletion request from the Account page. If you cannot access the account, contact dave@badburrito.com. We may verify identity and authority, review active subscriptions, disputes, legal holds, and required financial retention, use an authorized-agent process, deny or limit requests where an exception applies, and explain appeal rights where required.
10. California notice
California residents may have rights under the California Consumer Privacy Act when its requirements and business thresholds apply. The categories collected are described in Section 2; sources, purposes, disclosures, retention, and choices appear throughout this Policy and the Notice at Collection.
We will not discriminate unlawfully for exercising privacy rights. We will recognize applicable browser-based opt-out preference signals such as Global Privacy Control for the browser or device that sends them. We do not offer a financial incentive for personal information unless separately disclosed with the required value explanation and opt-in.
California's Shine the Light law may provide separate rights concerning disclosures for third parties' direct marketing. The current design does not disclose personal information to third parties for their own direct marketing without direction or consent.
12. Security and incident response
We use administrative, technical, and physical safeguards intended to protect information, including access controls, tenant separation, encryption in transit, protected credentials, signed provider callbacks, logging controls, and provider diligence. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security.
Users and channel owners must protect their accounts and report suspected compromise. We will investigate incidents and provide notices to affected people and authorities when required by applicable law.
13. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information without a legally sufficient parental-consent program. Channel owners must identify child-directed programming and may not use general audience accounts to circumvent children's privacy requirements.
If you believe a child under 13 supplied personal information, contact dave@badburrito.com. We will investigate and delete or otherwise address it as required. See the Children and Age Policy.
14. International use and transfers
The intended initial operation is from the United States. Information may be processed in the United States and other locations where the platform, channel owner, or providers operate. Those locations may have different data-protection laws.
Before intentionally offering to or monitoring individuals in the European Economic Area, United Kingdom, or another jurisdiction requiring transfer safeguards, the responsible parties must establish lawful bases, required representatives, data-processing terms, transfer mechanisms, consent controls, and jurisdiction-specific notices. Until then, availability does not represent that the Service is configured for every country.
15. Changes and contact
We may update this Policy prospectively to reflect product, vendor, legal, or operational changes. We will post the revision date and provide additional notice or seek consent when required. Prior versions and acceptance records should be retained.
Privacy contact: dave@badburrito.com. Mailing address: [Counsel to insert the legal mailing address before production]. Counsel must confirm the privacy contact, responsible entity, and any required toll-free or alternative request method before production.