Privacy policy
Draft. This policy hasn't been reviewed by a lawyer yet. Parts in [square brackets] are still to be filled in.
This policy explains how [legal business name] ("It's Your Bill", "we") handles personal information. There are two groups of people:
- Businesses that sign up to use It's Your Bill (resellers), and the people who sign in for them.
- Subscribers: the customers of those businesses. For them, the business they subscribe to is in charge of their information (the "controller"), and we handle it on that business's behalf (as a "processor").
What we collect
From businesses: name, email, password (stored only as a one-way hash), business name and link, plan and billing status, and the settings you enter. Your card details go to Stripe; we never see or store your card number.
For businesses, about their subscribers: email, name, optional notes and payment handle (Venmo or Cash App), subscriptions and payments, and their accounts on the business's media servers.
To run the servers: media server addresses and admin keys, payment-provider keys and email-account passwords. These are encrypted when stored.
While subscribers stream: what's playing, on which device, and the network it's from. For the network we keep only the first part of the internet address (like 203.0.113.x), never the full address. It's used for stream limits, spotting shared logins, and the watch history the business sees on each subscriber's page.
Technical information: limited server logs (such as internet addresses and errors), kept for security and fixing problems.
Why we use it
To provide the service: taking payments, setting up and removing server accounts, sending the emails each business chooses, enforcing plan limits, showing reports, keeping accounts secure, and meeting legal obligations. We don't sell personal information, and we don't use it for advertising.
Who we share it with
- Payment providers the business connects (Stripe, Plisio), to take payments.
- The business's own email account, which sends its emails to its subscribers.
- Our hosting provider [Contabo, Germany], where the service runs.
- Authorities, where the law requires it.
How long we keep it
- Account and billing records: while the account is open, then deleted within [90] days, except what the law requires us to keep.
- Stream locations (network only): 30 days.
- Watch history (title, device, network only): 90 days.
- Server check history: 35 days.
- Database backups: 14 days, then overwritten.
Security
Sensitive details are encrypted when stored. Passwords are hashed. Each business sees only its own data. Our support team can only look at a business's dashboard if the business switches on Support access. That access is read-only and every page viewed is listed for the business. Two-step sign-in is available for every dashboard sign-in.
Cookies
We use only the cookies needed to keep you signed in (mb_session for the dashboard, mb_customer for subscriber accounts, and mb_support during a support view). There are no advertising or analytics cookies.
Your rights
Depending on where you live, you may have the right to see, correct, export or delete your information, or to object to how it's used.
- Subscribers: contact the business you subscribe to first. They control your information, and we help them answer.
- Businesses: contact us at [contact email].
Children
It's Your Bill isn't for children under 16, and we don't knowingly collect their information.
Changes
We'll post changes here and update the date at the top. Important changes are announced in the dashboard first.
Contact
[legal business name], [address], [contact email].
Last updated 2026-11-08
