Information we process
We process account name and email, encrypted provider connection details, profiles, favourites, playback progress, registered devices, subscription state, security events, support communications, IP addresses and basic diagnostic logs.
Why we process it
We use this information to authenticate users, operate playback and synchronization, preserve preferences, prevent trial abuse, secure the service, provide support and meet legal obligations.
Provider credentials
Provider passwords and playlist URLs are encrypted at rest and are not returned by our user or administrator APIs. They are used only to perform requested provider operations.
Retention and deletion
Account data is retained while the account exists and as needed for security, legal and backup purposes. Trial-device claims may survive account deletion to prevent repeated trial abuse. Users can request deletion from account settings or support.
Sharing
We do not sell personal data. We may use infrastructure, monitoring, support and future payment processors as service providers under appropriate safeguards, or disclose information when legally required.
Your rights
Depending on your location, you may request access, correction, deletion, restriction, portability or objection. Contact support@novaro.app. Identity verification may be required.
Security
We use encryption, access controls, administrator audit records and operational safeguards. No system is perfectly secure; report suspected incidents immediately.