DRAFT: This document is a template aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). It has not been reviewed by a lawyer. Have it reviewed before publishing.
Last updated: 05/11/2026
When you use REPLAY, we collect: your email address and display name (at signup), viewing session data (timestamps, hashed IP address, browser user agent), and order history. Payment details (card numbers, bank account information) are handled directly by Stripe and are never stored on our servers.
We use your data to: provide access to purchased events, enforce the concurrent stream limit, send purchase receipts, prevent fraud, and improve the service. We do not sell your personal data to third parties.
We use the following third-party services that may process your data: Supabase (authentication, database), Stripe (payments), and Mux (video streaming). Each service has its own privacy policy.
We use essential cookies for authentication and session management. These are required for the service to function. We do not use advertising or tracking cookies.
Account data is retained for as long as your account is active. Order records are kept for 7 years for tax and legal compliance. Viewing session data older than 90 days is deleted automatically.
Under Malaysia's PDPA, you have the right to access, correct, and request deletion of your personal data. To exercise these rights, contact us at [SUPPORT EMAIL]. Account deletion can be done from your account settings page. We will process deletion requests within 21 days.
We use industry-standard encryption (TLS) for data in transit. IP addresses are hashed before storage. Access to personal data is restricted to authorized administrators.
We may update this policy from time to time. We will notify registered users of material changes by email.