Privacy Policy

1. Information We Collect

Pillar IPTV operates with a strict data minimization principle. We only gather essential information required to provide, maintain, and secure our research-based IPTV recommendation platform. Below is the complete scope of data collection:

• Identifiers (Email & Name): When you register for an account or subscribe to our services, we collect your full name and email address. This data is used for account creation, service delivery, and communication regarding your subscription (e.g., activation, renewal notices).
• Billing & Payment Information: To process subscription fees, we collect payment details such as credit card data, PayPal email, or cryptocurrency transaction identifiers. All payment transactions are handled by PCI-DSS compliant third-party processors (Stripe, PayPal, etc.) — Pillar IPTV does not store full credit card numbers on our servers. We only retain transaction IDs and the last 4 digits for reference.
• Support & Correspondence Data: If you contact our technical support team (via email or ticketing system), we may collect device logs, IP address at that moment, and any information you voluntarily provide to troubleshoot streaming issues.
• Automated Data (Logs & Device IDs): For security and fair usage enforcement (one connection per account), we may collect anonymized IP addresses, browser type, operating system, and unique device fingerprints. This data is pseudonymized and never sold.

2. Purpose of Processing

Pillar IPTV uses your personal information exclusively for legitimate operational purposes, in full compliance with GDPR Article 6(1)(b) and (f). Your data enables us to:

• Account activation & management: To provision your subscription, enforce multi-room plans, and grant access to our recommendation dashboard.
• Technical support & troubleshooting: To diagnose configuration errors, ISP blocking issues, and improve streaming compatibility across devices.
• Service security & fraud prevention: To detect unauthorized access, prevent account sharing violations, and mitigate cyber threats.
• Essential communications: Sending service updates, policy changes, and billing reminders. We never send marketing spam or share your email with advertisers.
• Platform optimization: Aggregate analytics to enhance page load speed, mobile responsiveness, and overall user experience.

We do not engage in automated decision-making that produces legal effects concerning you. All support requests are handled by human agents.

3. Cookie Usage & Tracking Technologies

Pillar IPTV uses minimal, privacy-first cookies to improve site performance and remember user preferences. We do not employ cross-site tracking or targeted advertising cookies.

• Essential cookies: Required for secure login, session persistence, and load balancing. These cannot be disabled without affecting account functionality.
• Preference cookies: Store your UI choices (e.g., language, dark theme consistency) for a seamless experience.
• Analytics cookies (first-party): We use self-hosted, privacy-friendly analytics (e.g., Plausible or Matomo) to count page visits and referral sources without sharing data with third parties. No personal identifiers are collected.

4. No Third-Party Data Sales

Pillar IPTV does not and will never sell, rent, trade, or license your personal data to any third party for marketing, advertising, or any other purpose. Your trust is our most valuable asset.

Limited data sharing occurs only in the following necessary contexts, always under strict confidentiality obligations:

• Payment processors: To complete your subscription transaction, we share necessary billing fields (name, email, amount) with Stripe, PayPal, or Coinbase. These processors are independently audited for security (PCI Level 1).
• Hosting & infrastructure providers: We use encrypted cloud servers (e.g., AWS, DigitalOcean) that store data in secure data centers. All providers sign Data Processing Agreements (DPAs) compliant with GDPR Art. 28.
• Legal compliance: If required by law, subpoena, or to enforce our Terms of Service, we may disclose information to regulatory authorities or legal counsel. Such disclosures are rare and narrowly tailored.

5. Security Measures — SSL & Payment Gateways

Protecting your data requires enterprise-grade security. Pillar IPTV implements the following technical safeguards:

• SSL/TLS encryption (256-bit): All data transmitted between your browser and our servers is encrypted via HTTPS. No plaintext exchanges occur. You can verify our SSL certificate status via the padlock icon in your browser.
• Encrypted database storage: User records are stored in AES-256 encrypted databases with strict role-based access controls (RBAC).
• Secure payment gateways: We do not directly process credit cards. All payments are redirected to Stripe, PayPal, or equivalent which maintain PCI DSS Level 1 certification. Your financial data never touches our primary infrastructure.
• Regular security audits & patching: We perform weekly vulnerability scans, penetration testing, and immediate patch management to mitigate zero-day risks.
• Data breach response: In the unlikely event of a breach, affected users and relevant supervisory authorities will be notified within 72 hours as mandated by GDPR.

While no system is 100% invulnerable, Pillar IPTV follows NIST and ISO 27001-inspired frameworks to maintain the highest protection level.

6. Your Privacy Rights (Data Deletion & Control)

Depending on your location (EEA, UK, California, Brazil, etc.), you have the following enforceable rights over your personal data:

• Right to access: Request a copy of all personal data we store about you.
• Right to rectification: Correct inaccurate or incomplete information (e.g., email change).
• Right to erasure ("right to be forgotten"): Request permanent deletion of your account and associated data, unless retention is required for legal or fraud prevention reasons (e.g., unresolved chargebacks).
• Right to restrict processing: Ask us to temporarily halt data processing under specific circumstances.
• Right to data portability: Receive a structured, machine-readable export (JSON/CSV) of your data.
• Right to object: Object to processing based on legitimate interests (e.g., analytics).
• Right to non-discrimination (CCPA): We will not deny services or charge different prices for exercising your privacy rights.

You may also lodge a complaint with your local Data Protection Authority (e.g., ICO in the UK, CNIL in France, or the Cypriot Commissioner). We encourage you to reach out to us first for swift resolution.

7. Changes to This Privacy Policy

Pillar IPTV reserves the right to update this Privacy Policy to reflect legal developments, operational changes, or enhanced protections. If material modifications occur, we will notify you via:

• A prominent banner on the pillariptv.com homepage, and
• Email notification sent to the address associated with your active account (if applicable).

The "Last Updated" date at the top of this page will always indicate the latest revision. Your continued use of Pillar IPTV after any update constitutes acceptance of the revised Privacy Policy. We encourage periodic review.

8. Children's Privacy (COPPA)

Pillar IPTV does not knowingly collect or solicit personal information from anyone under the age of 18 (or the age of majority in your jurisdiction). Our services are intended for adult users only. If we discover that a child under 18 has provided us with personal data, we will delete that information immediately. Parents or guardians who believe their child has submitted data should contact privacy@pillariptv.com.

9. Contact Information & Data Protection Officer (DPO)

For any privacy-related inquiries, data deletion requests, or to exercise your rights, please contact our dedicated DPO team:

• Email: privacy@pillariptv.com (encrypted channel preferred)
• Contact form: Available at pillariptv.com/contact
• Postal address (legal correspondence): Pillar IPTV, Compliance Dept., 12 Digital Arcade, Nicosia 1065, Cyprus (EU).

We aim to resolve all requests within 15 business days. You also have the right to escalate unresolved concerns to your local data protection supervisory authority.