This Privacy Policy describes how Strevi collects, uses, stores, and protects your personal data, in compliance with Brazil's General Data Protection Law (LGPD — Law 13,709/2018) and applicable international data protection regulations.
1. Data controller
The entity responsible for processing personal data is Promise.Inc, operating the Strevi platform.
2. Data we collect
We may collect:
- Account registration: name, email, and password (stored in encrypted form). In password recovery flows, token and expiration date.
- Service usage: user identifier, story viewing history (which stories were watched and when), sharing events, and, where applicable, session identifier for non-logged-in visitors.
- Subscription and payment: data required for payment processing (handled by a payment gateway), linked to your user account and plan.
- API usage (API-enabled plans): request logs (endpoint, method, response code, response time, IP address, and user-agent, where applicable) for usage control and security.
- Cookies and similar technologies: authentication cookie (session) and, as described in our Cookie Policy, analytics data (e.g., third-party scripts for access metrics).
3. Legal basis and purposes
We process data based on: contract performance (service delivery and billing), compliance with legal obligations, legitimate interest (security, service improvement, analytics), and, when required, consent. Purposes include: creating and managing your account, providing story streaming, processing payments, enforcing plan usage limits, improving the platform, and fulfilling legal obligations.
4. Data sharing
Your data may be shared with processors that assist us in operations (hosting, payment gateway, analytics tools), always under contractual obligations of confidentiality and security. We do not sell your personal data. Sharing required by law will be carried out within legal limits.
5. Retention
We retain data for as long as necessary to fulfill the purposes described and to comply with legal obligations and exercise of rights. After account closure, we may retain anonymized or aggregated data and, where applicable, records required for legal or accounting obligations.
6. Your rights
In compliance with applicable data protection laws, you have the right to:
- Confirmation and access: know whether we process your data and access it;
- Correction: correct incomplete, outdated, or inaccurate data;
- Anonymization, blocking, or deletion: of unnecessary, excessive, or non-compliant data;
- Portability: receive your data in a structured format, where applicable;
- Deletion: of data processed based on consent, subject to legal exceptions;
- Information about sharing: know with whom we share your data;
- Withdrawal of consent: when processing is based on consent.
To exercise these rights, contact us at strevi@promise.codes. You may also file a complaint with the relevant data protection authority.
7. Security
We adopt technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, in accordance with practices appropriate to the type of data and the processing context.
8. Changes
We may update this Privacy Policy. Significant changes will be communicated by email or by notice on the platform. The date of the last update is shown at the top of this page.
9. Contact
Questions about privacy or to exercise your rights: strevi@promise.codes. For information about cookies, please refer to our Cookie Policy.