Privacy Policy

Effective since 2026-06-01

1. Who we are and what this Policy is

This Privacy Policy explains how BAUMGARTNER & SANTOS TECNOLOGIA LTDA ("we"), enrolled under CNPJ No. 47.193.619/0001-23, headquartered at R. Rio Tibre, 97 — Sala A — Jd. Figueira — CEP 13904-310 — Amparo/SP, processes the personal data of users of the IPTV Hero application ("Application" or "App") and the related website.

IPTV Hero is solely a media player: we do not provide, host or distribute any content, playlist or subscription. We process the least amount of data necessary to operate the service.

By using the Application, you acknowledge this Policy. Capitalized terms not defined here have the meaning given in the Terms of Service.

2. Controller and Data Protection Officer

The data controller is BAUMGARTNER & SANTOS TECNOLOGIA LTDA (CNPJ No. 47.193.619/0001-23).

To exercise rights or ask privacy-related questions, contact our Data Protection Officer at douglas100099@hotmail.com.

3. What data we process and where it is stored

• Playlists and access credentials (Xtream Codes, M3U URL, your provider username and password) that you enter: stored solely on your device (local storage) and NOT transmitted to our servers. We use this data only on the device to connect to the service you chose.

• Device and license data: device identifier, model, manufacturer, system version and subscription status. Used to validate the license, prevent fraud and provide support.

• Payment data: processed directly by Stripe, Inc. We do not collect or store card numbers; from Stripe we receive only the confirmation and transaction metadata required to grant access.

• Technical and diagnostic data: error logs, crashes and basic operational metrics, used to maintain the stability and security of the Application.

4. Legal bases (LGPD art. 7)

We process personal data based on: performance of a contract (to provide and license the Application); compliance with legal or regulatory obligations; legitimate interest (security, fraud prevention and service improvement, always respecting your rights); and consent, where applicable.

5. Data sharing

We do not sell your personal data. We share data only with processors that provide services essential to the operation of the Application, such as Stripe (payments) and infrastructure/hosting providers, limited to the contracted purpose.

We may disclose data when required by law, court order or competent authority, or to protect the rights, safety and integrity of the service and its users.

6. Retention and security

We retain data only for as long as necessary for the purposes described or as required by law. Data kept on your device remains under your control and can be deleted at any time by removing the playlists in the Application or uninstalling it.

We adopt reasonable technical and organizational measures to protect data against unauthorized access, loss or alteration. No method is 100% secure, but we work to mitigate risks.

7. Your rights (LGPD art. 18)

At any time you may: confirm the existence of processing; access your data; correct incomplete or outdated data; request anonymization, blocking or deletion; request portability; obtain information about sharing; and withdraw consent.

To exercise these rights, write to douglas100099@hotmail.com. You may also delete playlists and credentials directly within the Application. We will respond within the legal time frame.

8. Minors, transfers, cookies and changes

The Application is not intended for individuals under 18 without the consent and supervision of a legal guardian. We do not knowingly collect data from children.

Some processors may handle data outside Brazil. In such cases, we adopt adequate safeguards under the LGPD for international transfers.

On the website, we may use cookies and similar technologies for basic operation and measurement. You can manage them in your browser settings.

We may update this Policy. Material changes will be communicated in the Application and/or website, with a new effective date. Questions: douglas100099@hotmail.com.