Legal
Privacy Policy
Last updated: January 2025
1. Information We Collect
Account Information: Name, email address and password when you register.
Payment Information: Mobile money phone numbers and transaction IDs via PawaPay. We do not store PIN numbers or full mobile money credentials.
Usage Data: Content you watch, your watchlist, likes, and viewing progress — used to improve recommendations.
Device Information: Browser type, operating system, and IP address for security and analytics.
2. How We Use Your Information
- ✓Provide and operate the Draqla Streams service
- ✓Process subscription payments via PawaPay Uganda
- ✓Personalise content recommendations
- ✓Send subscription confirmations and expiry notifications
- ✓Improve our platform and content library
- ✓Prevent fraud and ensure account security
3. Data Sharing
We do not sell your personal data. We share data only with:
PawaPay: Payment processing (phone number and transaction amount only).
Cloudflare: Video delivery via Cloudflare Stream and R2 — your viewing data is processed per Cloudflare's privacy policy.
MongoDB Atlas: Encrypted database hosting for account and content data.
4. Data Retention
We retain your account data as long as your account is active. Payment records are kept for 7 years for legal compliance. You may request deletion of your account and data by contacting support@draqlastreams.com.
Account Deletion Request
You can request deletion of your Draqla Streams account and associated personal data at any time. Email support@draqlastreams.com from the email address registered to your account and include “Account Deletion Request” in the subject.
After we verify the request, we delete your account, profile information, preferences, watch history, watchlist, likes, saved progress, device records, and other personal data associated with the account.
We retain payment and transaction records for up to 7 years where required for accounting, fraud prevention, tax, or legal compliance. We may also retain limited security or audit information when legally required or necessary to protect the service; retained records are deleted or anonymized when the applicable requirement ends.
Account deletion permanently ends access to the account and cannot be undone. We will confirm completion of the request by email.
5. Security
Passwords are hashed using bcrypt. Payment data is transmitted over TLS. We implement rate limiting and brute-force protection on all authentication endpoints. We use HMAC-SHA256 to verify all payment webhooks.
6. Your Rights
You have the right to: access your data, correct inaccuracies, delete your account, export your data, and opt out of marketing emails. Contact us at privacy@draqlastreams.com.
7. Contact
For privacy inquiries: privacy@draqlastreams.com
Draqla Streams, Kampala, Uganda 🇺🇬