Data Processing Agreement

Last updated September 29, 2026

This agreement forms part of our Terms and applies wherever data protection law (such as GDPR) requires it. LiteTV is the controller of viewer data; our providers act as processors.

1. Scope

Covers the personal data listed in our Privacy Policy, account, profile, viewing, security and payment status, used only to provide and protect LiteTV.

2. Sub-processors

  • Cloud hosting, database and file storage
  • Transactional email delivery
  • Payments: Stripe, PayPal, Polar
  • Advertising (free plan, with consent): Google AdSense, Adcash

3. Processor duties

Processors act only on our documented instructions, keep data confidential, apply appropriate security, help us answer data requests, and delete or return data when the service ends.

4. Security measures

Encryption in transit, row-level access controls on all tables, private file storage with short-lived links, hashed passwords and passcodes, two-step verification, sign-in rate limits, session monitoring and staff approval of uploads.

5. Breaches

We notify the relevant authority within 72 hours of learning of a qualifying breach and inform affected users without undue delay.

6. International transfers

Providers may process data outside your country. Where required we rely on standard contractual clauses or equivalent safeguards.

7. Retention and deletion

Deleted accounts are locked and held for 90 days for fraud and legal-claim purposes, then erased, including from processors in their normal backup cycle.

8. Contact

Related: Terms · Privacy · Refunds · Data Processing · Master Service Agreement · Copyright