Privacy Policy

Last Updated: August 18, 2026

This Privacy Policy explains how Quindie and its related service Private Spaces (“we,” “our,” or “us”) collect, use, and safeguard personal information when you visit our website, register for an account, host a stream, or access video media across our services.

1. Information We Collect

Account & Contact Information:

When you register as a host, administrator, filmmaker, or user, we collect your name, email address, password hash, and account preferences.

Billing Information:

If you purchase subscriptions, hosting packages, or event spaces, payment card data and billing details are collected directly by our third-party payment processor (Stripe). We do not store raw credit card numbers on our servers.

Uploaded Video & Media Assets:

Video files, audio tracks, closed captions, and associated metadata you upload to our platform.

Attendee / Access Logs:

For public and private streaming portals, we collect basic access logs, timestamps, token usage, and device/browser types to facilitate reliable video playback.

Communications:

Inquiries, feedback, and support requests you submit to us directly.

2. How We Use Your Information

We process your information for the following specific purposes:

Service Delivery: To authenticate users, ingest, transcode, store, and stream video content.
Account Administration: To manage billing, issue renewal notices, and provide customer support.
Platform Security: To monitor system health, mitigate DDoS attacks, and prevent fraudulent or abusive activity.
Direct Marketing: To send product announcements, service updates, and relevant platform news directly from Quindie. You may opt out of promotional emails at any time by clicking the unsubscribe link in any marketing communication.

3. Zero Sale of Data & Commercial Sponsorship Disclosures

We do not sell, rent, lease, trade, or monetize your personal data to data brokers, ad networks, or third-party marketing vendors.

The only exception is when a creator, filmmaker, or user explicitly enters into an advertising, brand integration, distribution, or sponsorship agreement facilitated or brokered by us. In those specific instances:

Express Consent: We will only share your contact, performance analytics, or necessary business data with designated third-party brands, advertisers, or sponsors after receiving your explicit approval or written agreement.
Limited Scope: Any shared information is strictly limited to what is necessary to fulfill the terms, payment routing, and deliverables of that commercial partnership.

4. Third-Party Infrastructure & Service Providers

We share data with third-party technical vendors solely to the extent necessary to operate our platform:

Cloud Infrastructure & Storage: Cloudflare (Edge routing, caching, and Cloudflare R2 object storage) and Google Cloud Platform (Google Cloud Run compute and transcoding).
Payment Processing: Stripe (PCI-DSS compliant transaction handling).
Transactional Email: Third-party SMTP/API delivery services for system notifications and password resets.

All service providers are contractually restricted from using your data for any purpose other than providing services to us.

5. Roles: Data Controller vs. Data Processor

Quindie as a Data Controller: We act as a Data Controller for direct account registration details, platform analytics, billing records, and our own direct marketing communications.
Quindie as a Data Processor (Private Spaces / Event Portals): When an organizational host (such as a church, funeral home, or event coordinator) uses Private Spaces to collect attendee emails or host private memorial streams, the host acts as the Data Controller, and we act as the Data Processor operating strictly under their direction and our Data Processing Addendum (DPA).

6. Data Retention & Deletion

Active Accounts: We retain account and profile information for as long as your account remains active.
Media Assets & Private Spaces: Hosted video files and attendee logs are retained in accordance with the purchased hosting plan or event lifecycle window (e.g., 30 to 90 days post-event), after which raw media files are permanently purged from object storage.
Account Deletion: You may request the permanent deletion of your account and associated data by contacting us.

7. Security Safeguards

We implement industry-standard administrative, physical, and technical safeguards:

TLS 1.2+ encryption for all data in transit across our edge networks.
AES-256 encryption for data at rest within our storage buckets and databases.
Role-based access controls and mandatory multi-factor authentication for internal systems.

8. Your Privacy Rights

Depending on your jurisdiction, you have the right to:

Access: Request a copy of the personal information we hold about you.
Correction: Request updates or corrections to inaccurate information.
Deletion: Request the erasure of your personal data, subject to lawful retention obligations.
Opt-Out of Marketing: Unsubscribe from non-essential promotional messages at any time.

To exercise any of these rights, contact us at: privacy@quindie.com.

9. Changes to this Policy

We may update this Privacy Policy periodically. If material changes are made, we will notify registered users via email or by posting a prominent notice on our website prior to the change taking effect.