Privacy Policy

1Who We Are

Xtream-Masters ("we", "us", "our", "the Company") is a software engineering firm that designs, develops, licenses, and supports management, security, and playback software for the global streaming, broadcasting, and conditional-access industries. Our relationship with every customer is exclusively that of a software vendor and licensee. We do not operate any broadcaster, content-delivery network, streaming service, or media catalogue of our own.

2Nature of Our Business & Products

Our commercially available products include the OTT/IPTV Admin Panel, the Streamora (XM) DRM Panel — an engineering and DRM-security testing platform designed to help legitimate operators assess the strength of their own DRM implementations — the Multics/OSCAM conditional-access panel, the ActiveCode OTT Player application, the free WebPlayer, the free EPG aggregator, plus associated migration, installation, and technical services. All of these are tools. They contain no content, no channels, no movies, no playlists, and no keys pointing to third-party streams. The end operator is solely responsible for the lawful acquisition, licensing, and use of any content that passes through the software.

3Information We Collect

We only collect information that is strictly necessary to operate our business, deliver the software a customer has purchased, provide technical support, and comply with legal obligations.

4Information We Do NOT Collect

We take an intentionally minimal approach to data. We do not collect, index, monitor, intercept, or retain any of the following:

• Streaming URLs, playlists, channel lists, or catalogues operated by our licensees or their end users.
• Video, audio, or media content processed by the software.
• Viewer-level analytics, watch history, or behavioural data of our licensees' end customers.
• Personal data belonging to the end customers of our licensees — that data remains with the licensee, who is the sole data controller for those users.
• DRM keys, license tokens, or content-protection secrets belonging to third-party rights holders.

5How We Use Information

The limited information we collect is used exclusively to:

• Deliver the software, license keys, updates, and documentation you have purchased.
• Provide technical support and respond to enquiries.
• Process payments, issue invoices, and comply with tax and accounting regulations.
• Secure our systems against fraud, abuse, and unauthorised access.
• Send transactional notifications (release notes, security advisories, licensing alerts). Marketing communications are strictly opt-in.

6Legal Basis for Processing (GDPR / UK GDPR)

Where European or UK data-protection law applies, we process personal data on one of the following legal bases:

• Performance of a contract — to deliver the software and services you have purchased.
• Legal obligation — to comply with tax, accounting, anti-fraud, and regulatory duties.
• Legitimate interest — to secure our website, prevent abuse, and improve our products.
• Consent — for optional marketing communications, which you may withdraw at any time.

7Data Sharing

We do not sell, rent, or trade personal information. We share data only with the limited categories of recipients necessary to run the business:

• Payment processors to execute transactions you initiate.
• Infrastructure, email, and helpdesk providers that host our website, license servers, and support inbox under confidentiality obligations.
• Law enforcement or regulators only where we are legally compelled to do so by a valid order in our operating jurisdiction.
• Professional advisers (auditors, lawyers, accountants) under duty of confidentiality.

8Data Retention

Account, license, and invoice records are retained for as long as you remain a customer and thereafter for the period required by applicable tax, accounting, and anti-fraud laws (typically 6 – 10 years). Support tickets are retained for up to 24 months after closure. Server access logs are rotated within 90 days.

9Security

We implement industry-standard administrative, technical, and physical safeguards, including TLS encryption for all website traffic, restricted access controls, encrypted databases, hashed credentials, least-privilege staff access on a need-to-know basis, and periodic security review. While no system can be completely immune to risk, we will notify affected customers without undue delay in the unlikely event of a qualifying data breach, in accordance with applicable law.

10Your Rights

Depending on your jurisdiction, you may have the right to access, correct, port, restrict, or delete the personal information we hold about you, and to object to certain processing activities. You also have the right to lodge a complaint with your local data-protection authority. To exercise any of these rights, email support@xtream-masters.com. We will respond within the timeframe required by applicable law (typically 30 days).

11Cookies

Our website uses a small number of essential and analytical cookies to remember session state, secure the site, and measure aggregate traffic. You can disable cookies through your browser; essential functionality will continue to work, though some conveniences may be lost.

12International Transfers

Because we serve a global customer base, information may be processed in countries outside your country of residence. Where applicable we rely on Standard Contractual Clauses, adequacy decisions, or equivalent legal transfer mechanisms to protect that data.

13Children

Our services are directed to businesses, professional integrators, and licensed operators — not to children. We do not knowingly collect personal data from individuals under the age of 16.

14Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The updated version will be posted on this page with a new "Last updated" date. Material changes will be highlighted on our website or communicated by email to active customers where appropriate.