Privacy Policy

1. Introduction

NebulaEdgeStream ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our streaming and CDN infrastructure services, visit our website, or interact with us in any way.

We operate in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy applies to information we collect through:

• Our website at www.nemunasdataanalytics.com
• Our streaming and CDN infrastructure services
• Email, text, and other electronic communications
• Our management portal and analytics dashboards

Please read this Privacy Policy carefully. By using our services or accessing our website, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect several types of information from and about users of our services:

2.1 Personal Identification Information

When you register for our services, contact us, or use certain features, we may collect:

• Name, email address, telephone number, and company affiliation
• Billing information and payment details (processed securely through our payment processors)
• Account credentials for our management portal
• Communication preferences

2.2 Technical and Usage Information

When you use our streaming infrastructure services, we collect:

• Configuration settings for your streaming services
• API usage patterns and service utilization metrics
• Performance metrics related to your streaming content delivery
• IP addresses and other network identifiers related to your origin servers
• Technical logs necessary for troubleshooting and security monitoring

2.3 Viewer Analytics Data

When your viewers access content delivered through our infrastructure, we may collect aggregated and anonymized data about:

• Geographic distribution of viewers (country and region level)
• Device types and operating systems
• Network providers and connection types
• Quality of experience metrics (buffering events, bitrate adaptation)
• Viewing patterns and engagement metrics

This viewer data is collected and processed as a data processor on your behalf, with you (our customer) being the data controller responsible for obtaining appropriate viewer consents.

2.4 Website Usage Information

When you visit our website, we collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on each page
• Referring website or source
• Operating system and device information

We collect this information using cookies and similar technologies. For detailed information about our use of cookies, please refer to our Cookie Policy.

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1 Providing and Improving Our Services

• Delivering our streaming and CDN infrastructure services
• Processing transactions and managing your account
• Providing technical support and responding to inquiries
• Monitoring and improving the performance and reliability of our services
• Developing new features and capabilities

3.2 Analytics and Optimization

• Analyzing usage patterns to optimize our infrastructure
• Generating aggregated performance metrics
• Creating viewer analytics dashboards for our customers
• Measuring the effectiveness of our website and marketing efforts

3.3 Communication and Marketing

• Sending service notifications and updates
• Providing technical newsletters and educational content
• Sending marketing communications about our services (with consent)
• Responding to inquiries and support requests

3.4 Security and Compliance

• Detecting and preventing fraudulent or unauthorized access
• Identifying and addressing security vulnerabilities
• Maintaining audit logs for compliance purposes
• Fulfilling legal obligations and enforcing our terms of service

4. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

4.1 Performance of Contract

Processing necessary to fulfill our contractual obligations to you, including providing our streaming infrastructure services, processing payments, and delivering technical support.

4.2 Legitimate Interests

Processing necessary for our legitimate interests, including:

• Improving and optimizing our services
• Ensuring the security and integrity of our infrastructure
• Understanding how our services are used
• Marketing our services to business customers

We balance these interests against your rights and freedoms and will not process data based on legitimate interests where your rights would be significantly impacted.

4.3 Consent

Processing based on your explicit consent, which you can withdraw at any time. This includes:

• Marketing communications
• Certain types of cookies and tracking technologies
• Optional feature usage analytics

4.4 Legal Obligation

Processing necessary to comply with legal requirements, including:

• Tax and accounting regulations
• Data retention requirements
• Responding to valid legal requests from authorities

5. Data Sharing and Disclosure

We may share your information with the following categories of recipients:

5.1 Service Providers

We work with third-party service providers who perform functions on our behalf, including:

• Cloud infrastructure and hosting providers
• Payment processors
• Customer support and ticketing systems
• Analytics and monitoring tools
• Communication and marketing platforms

These providers are contractually bound to protect your data and can only use it for specified purposes.

5.2 Business Transactions

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose your information to:

• Enforce our agreements, including for billing and collection purposes
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the services
• Protect the personal safety of users of the services or the public

5.4 With Your Consent

We may share your information with third parties when you have given us your consent to do so.

5.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data that does not identify any individual user for various purposes, including industry analysis, research, and service improvement.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

6.1 Account Information

We retain your account information for as long as your account is active, plus a reasonable period thereafter to handle any account closure matters or legal requirements. If you request account deletion, we will delete or anonymize your personal information, unless we are legally required to retain it.

6.2 Service Usage Data

Technical logs and service usage data are typically retained for 13 months to support troubleshooting, performance analysis, and security investigations.

6.3 Viewer Analytics Data

Aggregated viewer analytics are retained for 13 months in detailed form and up to 36 months in summarized form. Individual viewer session data is anonymized after 90 days.

6.4 Marketing Data

If you have consented to receive marketing communications, we will retain your contact information and preferences until you opt out or request deletion.

6.5 Financial Records

Transaction records and billing information are retained for the period required by applicable tax and accounting regulations (typically 7-10 years).

7. Data Transfers

NebulaEdgeStream operates globally with infrastructure in multiple regions. Your information may be transferred to and processed in countries other than your country of residence.

7.1 International Transfers

When we transfer personal data from the European Economic Area (EEA) to countries that have not received an adequacy decision from the European Commission, we use appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules for transfers within our group of companies
• Derogations for specific situations such as explicit consent or contractual necessity

7.2 Data Localization Options

For customers with specific data residency requirements, we offer regional data processing options that allow you to specify geographic boundaries for data storage and processing. Please contact our sales team for more information about these options.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information.

8.1 GDPR Rights for EEA Residents

If you are located in the European Economic Area, you have the following rights:

• Access: You can request a copy of the personal information we hold about you.
• Rectification: You can ask us to correct inaccurate or incomplete information.
• Erasure: You can request that we delete your personal information in certain circumstances.
• Restriction: You can ask us to restrict the processing of your information in certain circumstances.
• Data Portability: You can request a machine-readable copy of your personal information to transfer to another service.
• Objection: You can object to our processing of your personal information based on our legitimate interests.
• Withdraw Consent: You can withdraw consent for processing based on consent at any time.

8.2 How to Exercise Your Rights

You can exercise your rights by:

• Using the privacy controls in your account settings
• Emailing our Data Protection Officer at privacy@nemunasdataanalytics.com
• Submitting a request through our website's contact form

We will respond to your request within 30 days. We may need to verify your identity before fulfilling your request.

8.3 Complaint Resolution

If you have concerns about our data practices, please contact us first so we can address your concerns. You also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement occurred.

9. Data Security

We have implemented appropriate technical and organizational measures to protect your personal information from accidental loss and unauthorized access, use, alteration, and disclosure.

9.1 Security Measures

Our security practices include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and penetration testing
• Continuous monitoring for unauthorized access
• Employee training on data protection

9.2 Incident Response

In the event of a data breach that affects your personal information, we will notify you and the relevant supervisory authorities as required by applicable law.

9.3 Your Responsibility

The security of your account also depends on maintaining the confidentiality of your account credentials. Please notify us immediately if you suspect unauthorized access to your account.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on our website
• Updating the "Last Updated" date at the top of this page
• Sending an email notification to the address associated with your account

We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

12. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

For data subjects in the European Union, please note that our EU representative can be contacted at eu-representative@nemunasdataanalytics.com.