Account data (name, email, password hash), purchase records (order id, gateway payment id, amount, currency, status, timestamps), watch progress, watchlist, and technical logs (IP address, user agent) used for security and rate limiting.

Card numbers, CVV, UPI PINs or bank passwords. These are entered directly into Razorpay's PCI-DSS compliant checkout and never reach our servers.

To authenticate you, deliver purchased content, prevent fraud and abuse, provide support, and meet tax and accounting obligations. We do not sell personal data.

We use a single httpOnly session cookie to keep you signed in. It contains an opaque random token — never your password or email.

Payment and entitlement records are retained for accounting and dispute resolution (minimum 2 years). Watch progress and watchlists are deleted when you clear them, or when your account is removed.

You can request access to, correction of, or deletion of your personal data by writing to support@streamverse.test. Deletion requests do not remove records we are legally required to keep.