Data Processing Agreement
Last updated September 29, 2026
This agreement forms part of our Terms and applies wherever data protection law (such as GDPR) requires it. LiteTV is the controller of viewer data; our providers act as processors.
1. Scope
Covers the personal data listed in our Privacy Policy, account, profile, viewing, security and payment status, used only to provide and protect LiteTV.
2. Sub-processors
- Cloud hosting, database and file storage
- Transactional email delivery
- Payments: Stripe, PayPal, Polar
- Advertising (free plan, with consent): Google AdSense, Adcash
3. Processor duties
Processors act only on our documented instructions, keep data confidential, apply appropriate security, help us answer data requests, and delete or return data when the service ends.
4. Security measures
Encryption in transit, row-level access controls on all tables, private file storage with short-lived links, hashed passwords and passcodes, two-step verification, sign-in rate limits, session monitoring and staff approval of uploads.
5. Breaches
We notify the relevant authority within 72 hours of learning of a qualifying breach and inform affected users without undue delay.
6. International transfers
Providers may process data outside your country. Where required we rely on standard contractual clauses or equivalent safeguards.
7. Retention and deletion
Deleted accounts are locked and held for 90 days for fraud and legal-claim purposes, then erased, including from processors in their normal backup cycle.
8. Contact
Related: Terms · Privacy · Refunds · Data Processing · Master Service Agreement · Copyright
