Privacy Policy

• Partner applications: company name, country, website, service type, contact name and business email, target territories and genres, intended use, and expected views
• Service operations: organization and user information, API key identifiers and scopes, access IP and origin, request logs, and error codes
• Playback and analytics: viewer identifier hashes pseudonymized by the partner, country and device, non-identifying preferences, and playback and payment events
• Contracts and settlement: license terms, revenue reports, settlement statements, invoices, payouts, and dispute records

Raw API keys and application status tokens are shown only once when issued; only hashes are stored on the server. Do not send raw end-user PII such as email addresses to the playback API.

We use the information to review partner eligibility and communicate, establish organization and API access, fulfill content rights and contracts, provide protected playback, analyze usage, handle settlement, tax, and disputes, monitor security, and meet legal obligations.

• Partner applications and contracts: until the review or business relationship and related obligations end. Deletion requests are honored except where legal retention is required.
• Raw events and playback sessions: 13 months
• API request logs: 90 days
• Audit logs: 5 years
• Accounting records such as settlements and invoices: 10 years or the period required by applicable law

We may use cloud hosting, managed databases, authentication, CDN and security, and error-monitoring providers to deliver the service. Contractual safeguards and access controls apply; specific providers and processing regions are disclosed in the partner agreement or on request.

You may request access, correction, deletion, restriction of processing, or withdrawal of consent for contact information. Submit a request through the partnership channel in your agreement; after verifying identity, we respond within the legal deadline. Withdrawal does not affect lawful processing before withdrawal or mandatory retention.

We use tenant-level access isolation, least privilege, hashed API keys, signed HttpOnly sessions, encryption in transit, audit logs, rate limits, rights- and contract-based playback authorization, and deletion when retention periods expire.

Material changes are announced through the service or contractual channel before taking effect. For privacy inquiries or rights requests, contact the NewUnivers representative named in your partner agreement or the partnership channel.