Privacy Policy

Last Updated: 5/17/2026

1. Who we are

Nexaview is an IPTV subscription service operating from the United Kingdom. We are the data controller for personal data collected through this website and the WhatsApp support flow. This policy explains what we collect, why, how long we keep it, and what your rights are under UK GDPR and the Data Protection Act 2018.

2. What we collect

At trial signup: first name, WhatsApp number and the player app / device you intend to use (IPTV Smarters Pro on Firestick, TiviMate on Android, Smart IPTV on Samsung TV, etc.). The player/device field is used only to send the correct setup link with your credentials.

At paid checkout: all of the above plus billing details. Card numbers, CVV and full PAN are NEVER seen or stored by Nexaview — Stripe handles card processing end-to-end on their PCI-DSS-compliant infrastructure and returns only a tokenised reference. We see the last 4 digits and the cardholder's billing country, nothing more.

While you use the service: server logs of M3U/Xtream API calls (IP, timestamp, channel ID, response status) — retained 14 days for security and concurrent-stream enforcement, then deleted.

When you contact support: the WhatsApp conversation, retained for as long as you are an active subscriber plus 12 months for warranty and refund purposes.

3. Why we collect it

To deliver the service (Xtream Codes, EPG, account expiry tracking), to process payments, to provide setup support across the player apps we work with, to detect and prevent fraud and credential sharing, to comply with UK tax and consumer-protection law. We do NOT use personal data for advertising, behavioural targeting or profiling. Our legal basis is performance of contract (Article 6(1)(b) UK GDPR) and legitimate interest in operating a safe service (6(1)(f)).

4. Who we share data with

Stripe Payments Europe Ltd (card processing, Ireland), the Hostinger hosting platform (server logs and database), Meta WhatsApp Business (support conversations), Google Analytics 4 (aggregated traffic stats — IP anonymisation on). No data is sold, rented or shared with advertising networks. No data is transferred outside the UK/EEA except where covered by Standard Contractual Clauses (Stripe, Google). The IPTV player apps you use (Smarters Pro, TiviMate, Smart IPTV, etc.) are third parties governed by their own privacy policies — we do not pass any data to them.

5. Cookies and tracking

A minimal set of first-party cookies: session cookie for the cart, localStorage for cookie-banner dismissal, and the Google Analytics 4 client ID (anonymised). No third-party advertising cookies, no remarketing pixels, no social-network trackers. You can clear cookies at any time via your browser settings.

6. How long we keep data

Active subscribers: for as long as you are a subscriber. Inactive: 24 months from last subscription expiry, then deleted. Billing records: 7 years (UK statutory minimum for VAT). WhatsApp conversations: subscription period + 12 months. M3U/Xtream API logs: 14 days.

7. Your rights

Under UK GDPR you have the right to: access your personal data, correct inaccuracies, request erasure, restrict or object to processing, port your data to another provider, and lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk. To exercise any of these rights, WhatsApp our team via the contact page. We respond within 30 calendar days.

8. Children

Nexaview is intended for adults aged 18+ only. We do not knowingly collect data from anyone under 18. If you become aware that a minor has signed up, please contact us and we will delete the account and all associated data within 7 days.

9. Security

All traffic to and from this site is encrypted via TLS 1.3. Card data is never touched by our infrastructure — Stripe handles the full payment flow. Server access is restricted to a small number of named administrators with 2FA and IP allowlisting. Xtream Codes credentials are stored hashed in the database; only the active server URL is plain-text.

10. Changes to this policy

Material changes are announced via WhatsApp to active subscribers. The "Last updated" date at the bottom of the page tracks the latest revision. Continued use after a change constitutes acceptance.

11. Contact

For privacy questions, GDPR requests or to raise a concern, WhatsApp our team via the contact page. The data controller is Nexaview (UK).