1. Controller context
streamingZebra is operated by ready-4-it in an API-first architecture with portal surfaces for entitlement and support operations.
Privacy Notice
Last Updated: 2026-05-24 | Effective Date: 2026-05-24
2. Data categories
Processed data includes entitlement lookup references, update-check metadata, download token and redemption events, governance settings, and audit logs.
3. Legal bases and purpose limitation
Processing is limited to service operation, contract fulfilment, legal compliance, fraud prevention, and security governance according to applicable law.
4. Privacy principles
No raw IP is persisted in analytics aggregates by default. Geo reporting is based on derived region/country keys where enabled. Data minimization and bounded retention apply.
5. Third-party processors
Relevant processors may include License Bridge for entitlement, payment providers (Payhip default), repository infrastructure, and hosting/security operators as required for runtime operation.
6. Security controls
Security controls include role-based access, auditability for privileged actions, session and token safeguards, and scoped cache and retention controls.
7. Retention and deletion
Retention windows are enforced by policy and technical cleanup jobs. Data-subject deletion requests are handled subject to mandatory legal retention obligations.
8. Data-subject rights
Applicable rights include access, correction, restriction, deletion, portability, and objection where legally available. Consent-based processing can be withdrawn at any time.
9. International transfer safeguards
Where non-EEA processing is required, transfer safeguards and transparency obligations apply before enabling that integration.
10. Updates and contact
This notice may evolve with product and legal requirements. Material changes are versioned and published through legal docs and product notes.