Legal
Privacy Policy
Last updated: January 2025
1. Information We Collect
Account Information: Name, email address and password when you register.
Payment Information: Mobile money phone numbers and transaction IDs via PawaPay. We do not store PIN numbers or full mobile money credentials.
Usage Data: Content you watch, your watchlist, likes, and viewing progress — used to improve recommendations.
Device Information: Browser type, operating system, and IP address for security and analytics.
2. How We Use Your Information
- ✓Provide and operate the Draqla Streams service
- ✓Process subscription payments via PawaPay Uganda
- ✓Personalise content recommendations
- ✓Send subscription confirmations and expiry notifications
- ✓Improve our platform and content library
- ✓Prevent fraud and ensure account security
3. Data Sharing
We do not sell your personal data. We share data only with:
PawaPay: Payment processing (phone number and transaction amount only).
Cloudflare: Video delivery via Cloudflare Stream and R2 — your viewing data is processed per Cloudflare's privacy policy.
MongoDB Atlas: Encrypted database hosting for account and content data.
4. Data Retention
We retain your account data as long as your account is active. Payment records are kept for 7 years for legal compliance. You may request deletion of your account and data by contacting privacy@draqlastreams.com.
5. Security
Passwords are hashed using bcrypt. Payment data is transmitted over TLS. We implement rate limiting and brute-force protection on all authentication endpoints. We use HMAC-SHA256 to verify all payment webhooks.
6. Your Rights
You have the right to: access your data, correct inaccuracies, delete your account, export your data, and opt out of marketing emails. Contact us at privacy@draqlastreams.com.
7. Contact
For privacy inquiries: privacy@draqlastreams.com
Draqla Streams, Kampala, Uganda 🇺🇬