Privacy Policy
POV (pov.now) is operated by Vela Blu Ltd, 73, Triq Sir Frederick C. Ponsomby, Gzira GZR 1070, Malta (“POV”, “we”). We are the controller of the personal data described here. Contact: info@pov.now.
What we collect
- Device identity and account. A random identifier for your device; if you create an account, your email address and/or a passkey, or your Google account identifier if you sign in with Google; your display name and, for creators, your @handle.
- Activity on POV. Which Lives you watch and for how long, your votes in Quick Decisions, the Quests you support, reactions and chat messages, Parties you join, and how you arrived (for example a creator’s link or an ad campaign).
- Payments. Your tips and tickets. Payments are processed by Stripe; we receive the payment status and amount, not your full card details.
- Creators. Your live video and audio (streamed through LiveKit and, if you choose, re-broadcast to platforms you connect), the location you share for a live, earnings and payout information, and OAuth tokens for platforms you connect (stored encrypted).
- Creator outreach. To invite creators to POV we may process business information that creators have made available for commercial contact: public profile details, content topics, audience size and a business email they published or shared with brands (including through the Meta Creator Marketplace / Creator Discovery API). Every message includes a one-click opt-out, and opt-outs are respected across all channels.
- Notifications. If you allow them, a push subscription for your browser.
- Technical data. IP address (stored as a hash for abuse prevention), browser type and error logs.
Why we use it (and the legal basis)
- To run POV and your account, process purchases, credit and settle POV, and pay creators (contract).
- To prevent fraud and abuse, and keep lives safe (legitimate interests; legal obligations for payments).
- To measure and improve POV, and to understand which creators and lives people enjoy (legitimate interests).
- To contact creators about paid opportunities using business contact details (legitimate interests; you can opt out at any time).
- To send notifications you asked for (consent, which you can withdraw in your browser).
Who we share it with
Service providers acting for us: Cloudflare (hosting, database, storage, email and AI processing), LiveKit (live video), Stripe (payments), and Google and Meta when you choose to sign in or connect accounts. We use the Meta Pixel on pov.now to measure our ads (page views, creator sign-ups, launch-list sign-ups and purchases); Meta receives technical data such as your browser and IP address under its own terms. Live broadcasts are public to POV viewers, and to the platforms a creator chooses to re-broadcast to. We do not sell personal data.
YouTube
POV uses YouTube API Services. When a creator connects a YouTube account, POV requests two permissions: youtube.readonly, used only to show which channel is connected (channel name and picture), and youtube.upload, used only to upload the clip of their own POV that the creator chooses, when they tap Post. POV does not read, change or delete any other videos, comments, playlists or account data. By using these features you agree to the YouTube Terms of Service, and Google’s handling of data is described in the Google Privacy Policy. You can disconnect YouTube in the POV app at any time, or revoke POV’s access at Google security settings.
POV’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, use it to train AI models, or let people read it, except with the creator’s consent for support, for security, or where the law requires it.
How we protect your data
- Encryption in transit. All traffic between your device, POV and connected platforms (Google, TikTok, Instagram) is encrypted with HTTPS (TLS).
- Encryption at rest. Access tokens for connected accounts (YouTube, TikTok, Instagram) are encrypted with AES-256-GCM before they are stored, with a key held as a server secret separate from the database. Our database and file storage are encrypted at rest by our hosting provider, Cloudflare.
- Minimal data. From a connected account we keep only the account ID, display name, picture and the encrypted tokens needed to post what you choose. We never store your passwords for these platforms.
- Access control. Tokens are decrypted only by our servers, at the moment you post. Staff access to production systems is limited to the people who run POV, protected by strong authentication.
- Deletion. When you disconnect an account in the app, its tokens are deleted immediately. If you revoke access from the platform, the stored tokens stop working immediately. YouTube API data is refreshed or deleted within 30 days, and you can ask us to delete all your data at info@pov.now.
- Incidents. If a breach affects your personal data, we will notify you and the competent authority as required by law.
International transfers
Some providers process data outside the European Economic Area. Where they do, transfers rely on adequacy decisions or the European Commission’s Standard Contractual Clauses.
How long we keep it
Account and activity data for as long as your account is active and then as needed for legal, tax and accounting obligations (payment records are kept for the period required by law). Outreach data about creators who have not joined: until they opt out or it is no longer relevant; the opt-out itself is kept so we never contact them again.
Your rights
You can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Write to info@pov.now. You can also complain to the Information and Data Protection Commissioner of Malta (idpc.org.mt) or your local authority.
Children
POV is not for anyone under 18.
Changes
We will post changes here and update the date above; significant changes will be highlighted in the app.