Privacy Policy

CovaNet UK Ltd ("CovaNet", "we", "us", "our") is a company registered in England and Wales. We operate the CovaNet Flow platform at flow.covanet.co.uk.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, CovaNet UK Ltd is the data controller responsible for your personal data.

If you have any questions about this privacy policy or our data practices, you can contact us at info@covanet.co.uk.

We collect the following categories of personal data:

• Account information: your name, email address, and password when you create an account.
• Payment information: billing details processed securely through Stripe. We do not store your full card number on our servers. Stripe acts as our payment processor and handles card data in accordance with PCI DSS requirements.
• Usage data: information about how you use the platform, including login timestamps, features accessed, and actions taken within the application.
• Stream metadata: technical data about your streams including bitrate, resolution, protocol type, connection timestamps, and duration. This does not include the content of your streams.
• Technical data: IP address, browser type, operating system, and device information collected automatically when you access our services.
• Communications: any information you provide when you contact us for support or enquiries.

We process your personal data for the following purposes, each with a lawful basis under Article 6 of the UK GDPR:

• To provide and maintain our service — processing is necessary for the performance of the contract between you and CovaNet (Article 6(1)(b)).
• To process payments — necessary for the performance of the contract (Article 6(1)(b)).
• To send service-related communications such as account verification, billing notifications, and service updates — necessary for the performance of the contract (Article 6(1)(b)).
• To monitor and improve the platform including analytics, performance monitoring, and debugging — based on our legitimate interest in maintaining and improving our services (Article 6(1)(f)).
• To detect and prevent fraud or abuse — based on our legitimate interest in protecting our platform and users (Article 6(1)(f)).
• To comply with legal obligations such as tax reporting and responding to lawful requests from authorities (Article 6(1)(c)).
• To send marketing communications — only with your explicit consent (Article 6(1)(a)). You may withdraw consent at any time.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Account data is retained for the duration of your account and for 30 days after account deletion to allow for recovery.
• Payment records are retained for 7 years as required by HMRC for tax and accounting purposes.
• Stream metadata is retained according to your plan tier's analytics retention period, after which it is aggregated and anonymised.
• Usage logs are retained for 90 days for debugging and security purposes.
• Marketing consent records are retained for as long as you remain subscribed, plus 12 months after withdrawal.

We share your personal data with a number of carefully selected third-party data processors in order to provide the Service. A full list of these processors is available on request — please contact us at info@covanet.co.uk. All processors are bound by data processing agreements and are required to handle your data in accordance with UK GDPR.

We do not sell your personal data to third parties. We may disclose your data if required to do so by law or in response to valid legal process.

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request that we correct inaccurate personal data.
• Right to erasure — you may request that we delete your personal data, subject to legal retention requirements.
• Right to data portability — you may request your data in a structured, commonly used, machine-readable format.
• Right to restrict processing — you may request that we limit how we use your data.
• Right to object — you may object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@covanet.co.uk. We will respond within one month.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use cookies and similar technologies to maintain your session, remember your preferences, and analyse platform usage. The cookies we use fall into the following categories:

• Strictly necessary cookies — required for the platform to function, including authentication session cookies. These cannot be disabled.
• Analytics cookies — used to understand how visitors interact with the platform. We use Vercel Analytics, which collects anonymised usage data.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the platform from functioning correctly.

Your data is primarily processed within the United Kingdom and European Economic Area. Where data is transferred to processors outside the UK and EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner.

We may update this privacy policy from time to time. We will notify you of significant changes by email or by placing a prominent notice on our website. The "last updated" date at the top of this policy indicates when it was last revised.

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us:

Email: info@covanet.co.uk

CovaNet UK Ltd