1. Who looks after your data
MetroMedia looks after the data. The contact for personal data matters (the data protection officer) is privacidade@metromediatv.com.
The rule behind this policy: we use the minimum the app needs to work, and your playlist is encrypted in a way that not even we can read.
2. What we never see
- The address, password and content of your playlist. They are encrypted with your TV’s key. (The playlist username only leaves the TV if you are a provider’s customer: see section 4.)
- Your name and your documents: people who only watch have no sign-up.
- What you watch, your progress and your favorites: they are stored on the TV.
3. What we use and why
The TV ID and the device number
So the license stays tied to the right TV and the 7-day trial works once per TV. The number the manufacturer gives the TV is stored only as a digest (a code that cannot be turned back into the number). Kept while the account exists.
The license
Which TVs have each license, when it started and when it ends, and each of its movements. Kept while the account exists; payment records for as long as tax law requires.
Payments
Card and Pix details stay with the payment company. We keep only the purchase number, the amount and its status.
IP address
Our database and network suppliers log the IP of each request for a few days, for security and to limit abuse (for example, how many new TVs can be created per hour from the same IP). Once the company is formally set up, access logs (IP, date and time) will be kept for 6 months, confidentially, as Brazil’s Internet Civil Framework (art. 15) requires, and handed over only by court order.
Title information
To show synopsis, cast and images, the TV sends the title’s name to our information database. The answer is stored linked to the title’s name, never to your TV.
"Trending on MetroMedia"
A count of the most-watched titles that sends only the title’s public code (from open databases such as Wikidata), never the name of your playlist. A title only appears with 5 TVs or more. It can be turned off in the app’s Settings.
App errors
When the app hits an unexpected error, the TV sends a short summary so we can fix it: the type of error, where in the code it happened, the screen, the app version and the TV model. Addresses become only the domain, with no username or password; emails and keys are removed before leaving the TV. Kept for up to 90 days.
Messages on the TV
The messages (letters) that reach your TV are stored for you to read. We only keep whether the TV has already received each one, never what you did afterwards.
4. If you are a provider’s customer
When you type a provider’s code, it can see in its panel, about your TV:
- the TV ID, its model and a nickname the provider gives it;
- your playlist username, so it can find you among its customers (the TV tells you this before you confirm);
- whether the TV is on right now, in which area, and when it was last used;
- the status of the license and of the trial;
- when your playlist expires and whether it is active, expired or blocked;
- the current problem (server down, playlist expired, username refused), which of its servers the TV is on, how many times the video froze in the last 7 days and when the playlist was last read.
The provider never sees the password or the address of your playlist, or what you watch. For this data, the provider is responsible and we run the system on its behalf. To stop being its customer, talk to the provider or to us.
5. Partners and teams
For partners we keep the sign-in email and password (the password only as a digest, never the text), the owner’s name, the company name, the country, the customer range and the WhatsApp number, plus the chosen logo and colors and the messages sent with their images. For team members, the name, email, role and last sign-in. The panel History (who did what and when) is kept for 180 days. The login of someone who leaves the team is deleted.
6. Who the data goes to
- Suppliers that store and transmit data on our behalf (database, network and hosting), under a data processing agreement.
- The payment company, to receive the license payment.
- Your TV’s provider, if you typed its code, and only what is in section 4.
- Authorities, only with a court order or legal obligation.
We do not sell personal data.
7. Data outside Brazil
Some suppliers are outside Brazil. In those cases, we use the safeguards provided by the LGPD and the GDPR, such as standard contractual clauses.
8. Security
The playlist is end-to-end encrypted. On our side: encrypted connections, access rules on every database table, each provider only sees its own customers, secrets kept out of the code and a record of administrative actions.
9. Your rights
You can find out whether we have data about you, see it, correct it, take it elsewhere, ask for it to be deleted, withdraw consent and object to a use.
Ask by email at privacidade@metromediatv.com, with the TV ID. We reply within 15 days (LGPD) or 30 days (GDPR). You can also complain to Brazil’s data protection authority (ANPD) or to the authority in your country.
10. Children
The kids profile uses no personal data beyond what it needs to work.
11. Cookies
12. Changes to this policy
Important changes are announced in the app. The version date is shown at the top of this page.