Privacy Policy

Last updated: April 25, 2025

At ChiFlowTV ("we," "us," or "our"), your privacy is important to us. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and what choices you have. By using our Service at chiflowtv.com, you agree to the practices described here.

1. Information We Collect

We collect the following categories of personal information:

  • Account information: When you register, we collect your email address, display name, and a hashed (bcrypt) password. We never store your password in plaintext.
  • Payment information: We do not store your full card number or CVV. Payment data is handled directly by PayPal or Paddle. We retain only a transaction reference ID and payment method type (e.g., "paypal" or "paddle") to record your purchase.
  • Viewing records: We log which videos you access, when you access them, and how far through each video you progress. This helps us provide a better experience and troubleshoot issues.
  • IP addresses: We log your IP address for security purposes (e.g., to detect brute-force login attempts and fraudulent activity) and to comply with applicable law.
  • Technical data: Browser type and version, operating system, referring URL, and device type collected automatically via server logs and cookies.

2. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and membership
  • Process payments and send receipts
  • Provide, maintain, and improve the Service
  • Personalise your content experience (e.g., resume playback, recommendations)
  • Send service-related communications (account updates, billing notices, security alerts)
  • Enforce our Terms and Conditions and prevent fraud and abuse
  • Comply with legal obligations
  • Respond to your support enquiries

We will not sell, rent, or share your personal information with third parties for their own marketing purposes without your explicit consent.

3. Payment Processing

Payments on ChiFlowTV are processed by two third-party processors. When you make a payment, you are also subject to their privacy policies:

  • PayPal: For PayPal transactions, your data is processed by PayPal Holdings, Inc. See PayPal's privacy policy at paypal.com/us/legalhub/privacy-full .
  • Paddle: For card-based payments, your data is processed by Paddle.com Market Limited, which acts as the Merchant of Record. See Paddle's privacy policy at paddle.com/legal/privacy .

ChiFlowTV receives only a payment confirmation and the customer's email address from these processors in order to activate your membership.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

  • Account data: Retained until account deletion is requested, plus 30 days for backup purposes.
  • Transaction records: Retained for 7 years to comply with financial record-keeping obligations.
  • Server logs (IP addresses): Retained for 90 days unless required longer for security investigations.
  • Viewing records: Retained while your account is active; deleted upon account closure.

To request deletion of your account and personal data, email us at support@chiflowtv.com.

5. Cookies Policy

We use cookies and similar tracking technologies to operate and improve the Service. The cookies we set include:

  • Session cookies (essential): Required for authentication and to maintain your login state. These expire when you close your browser or after 30 days.
  • CSRF token cookies (essential): Used to protect forms against cross-site request forgery attacks.
  • Preference cookies (functional): Used to remember your theme preference (light/dark mode).

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using core features of the Service.

6. Third-Party Services

We use the following third-party services to deliver the Service:

  • Bunny.net CDN (bunny.net): We host and deliver video content through Bunny.net's Stream and CDN infrastructure. Your IP address and request metadata may be processed by Bunny.net's global edge network when you stream videos. See Bunny.net's privacy policy at bunny.net/privacy.
  • Google Fonts: Font files are loaded from Google's servers, which may collect basic usage data as described in Google's privacy policy.
  • PayPal and Paddle: As described in Section 3 above.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data under applicable data protection law (including the GDPR for EEA residents):

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate data.
  • Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction: Request that we restrict processing of your data in certain circumstances.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at support@chiflowtv.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

8. Children's Privacy

The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at support@chiflowtv.com and we will promptly delete it.

9. International Data Transfers

ChiFlowTV operates primarily from the Hong Kong Special Administrative Region. Our web servers and databases are located in Hong Kong. If you access the Service from outside Hong Kong, your personal data will be transferred to and processed in Hong Kong.

Additionally, our third-party service providers (Bunny.net CDN, PayPal, Paddle) may process your data in various countries worldwide via their global infrastructure. We take reasonable steps to ensure that such transfers are conducted in accordance with applicable data protection law.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days.