Privacy Policy
StreamNav is a streaming-technology and operations platform sold to businesses. That shapes this policy: for some information StreamNav decides what happens to it, and for a great deal more it acts only on a business customer’s instructions. This document separates the two, because conflating them would misstate who is answerable to you.
Two different roles
StreamNav handles personal information in two distinct capacities, and your rights differ depending on which applies.
Where StreamNav decides (controller)
StreamNav determines the purpose and means of processing for: this website and its enquiry form; direct business accounts held with StreamNav; security, audit and operational records of the platform itself; and StreamNav’s own billing relationship with a customer.
Where StreamNav acts on instructions (processor / service provider)
When a business customer or resale owner operates a branded service on StreamNav, the information about their customers — accounts, subscriptions, devices, sessions, support conversations — is processed on that business’s instructions. That business decides what is collected and why. StreamNav does not use it for its own purposes.
If you are an end customer of a business that uses StreamNav, your relationship is with that business. Direct your privacy requests to them; they are the ones who can act on them. StreamNav will support them in responding.
What is collected
Only the categories below, and only where the relevant part of the platform is in use.
From this website
- Enquiry form: name, business email address, company, message, and the fact that the consent box was ticked.
This website sets no cookies, runs no analytics, embeds no third-party scripts, and loads no fonts or resources from other companies. There is no tracking pixel and no advertising network.
From the platform
- Account and authentication: sign-in identity, credential metadata and session records. Passwords are handled by the authentication provider, not by StreamNav in readable form.
- Organization records: organizations, administrators, staff, and the customer records a business chooses to keep.
- Authorization metadata: roles, scopes, organization membership and permission grants.
- Branding assets submitted by a customer for their own branded experience.
- Operational events: device and session records, connection admission and denial events, capacity usage, and security events.
- Technical records: IP address, user agent, request identifier, timestamps, application logs and diagnostics.
- Billing status received from billing integrations: subscription state, invoice and transaction records, and whether a payment method is present and usable.
- Support and integration: support conversations, tickets, and events exchanged with integrations a customer has enabled.
Payment card details
StreamNav does not ask for, and its ordinary forms do not accept, full payment card numbers. Where payment is taken, it is handled by an authorized third-party payment or billing service. What StreamNav receives back is status — whether a method exists, its brand, its last four digits and its expiry month. If you find a form on a StreamNav surface asking for a full card number, do not complete it, and tell us.
Why it is processed
- To answer an enquiry sent through this website.
- To provide, operate, secure and support the platform for the business that bought it.
- To authenticate people and enforce the permissions their organization granted them.
- To enforce connection capacity and entitlements a customer has purchased.
- To keep security, audit and diagnostic records, and to investigate abuse or a fault.
- To operate StreamNav’s own billing relationship with its customer.
- To meet legal, tax and regulatory obligations.
What is not done. StreamNav does not sell personal information, does not share it for cross-context behavioural advertising, does not build advertising profiles, does not collect viewing or watch history for its own purposes, and does not train machine learning models on customer data.
Legal bases
Where the UK GDPR, EU GDPR or a comparable law applies, StreamNav relies on: performance of a contract, for operating the service; legitimate interests, for security, abuse prevention and running the business, balanced against the rights of the people concerned; consent, for the enquiry form; and legal obligation, where a law requires it.
Where StreamNav acts on a business customer’s instructions, that customer identifies the legal basis for their own processing.
Service providers and subprocessors
StreamNav uses a small number of providers to run the platform. Each receives only what it needs for its function.
- Supabase — authentication, database and object storage.
- Invoice Ninja — invoicing and billing records.
- The hosting provider of the servers the platform runs on.
- The domain, DNS and email provider, which hosts the mailboxes for the domain.
- The certificate authority issuing the TLS certificates for StreamNav’s hostnames.
Integrations a customer switches on themselves — for example a chat platform or an AI assistant — involve that provider only for the customer who enabled it.
StreamNav also discloses information where a law, court order or regulator compels it, or to establish or defend a legal claim.
International processing
StreamNav’s providers may process information in countries other than the one you are in. Where that involves a transfer requiring a safeguard, an appropriate transfer mechanism must be in place with each provider.
Security
Traffic to StreamNav surfaces is encrypted in transit. Access to production systems is restricted, tenant data is separated by row-level database policies enforced by the database itself rather than only by application code, audit records are append-only, and administrative access to a customer’s organization is recorded.
No system is perfectly secure and this policy does not promise that one is. What it commits to is proportionate safeguards and honest handling if something goes wrong.
Retention
Retention differs by record type. Operational and diagnostic records age out on a schedule; audit records are append-only and are kept as the record of what happened; billing records are kept as long as tax and accounting law requires.
Where StreamNav processes on a business customer’s instructions, that customer sets the retention period for their own data, and the platform applies it.
Your rights
Depending on where you live you may have the right to access what is held about you, to have it corrected, to have it deleted, to object to or restrict processing, to receive a copy in a portable form, and to withdraw consent.
Residents of certain US states, including California, additionally have the right to know what is collected and disclosed, to delete it, to correct it, and not to be discriminated against for exercising those rights. StreamNav does not sell personal information and does not share it for cross-context behavioural advertising, so there is no opt-out of those activities to offer.
To make a request about information StreamNav holds as controller, use the contact route below. If your data sits inside a business customer’s organization, ask that business; StreamNav will assist them.
Children
StreamNav is sold to businesses and is not directed at children. StreamNav does not knowingly collect personal information from children through this website or its own business accounts. If a business customer’s own service is directed at, or used by, children, that business is responsible for the additional obligations that brings.
Cookies
This website sets no cookies and runs no analytics. The authenticated platform uses only the cookies necessary to keep a signed-in session and to protect it; these are strictly necessary and are not used for advertising or measurement.
External links and integrations
StreamNav surfaces may link to other companies’ sites, and a customer may enable an integration with a third party. Those services have their own policies and StreamNav does not control them.
Changes
If this policy changes, the revision date at the top changes with it. A change that materially alters how information is handled will be described rather than made quietly.
Contacting us
Privacy questions and requests go to legal@streamnav.co. StreamNav is operated by IP MEDIA GROUP INC.; written notices go to:
IP MEDIA GROUP INC.P.O. Box 246
Middletown, DE 19709
United States