Privacy Policy

1. Who we are
   MeghnaTV (“MeghnaTV,” “we,” “us,” or “our”) operates broadcast and streaming services, including our website, mobile/TV apps, and related platforms (the “Services”). Contact: [Company Name], [Address]. Email: [privacy@yourdomain].

2. Scope
   This Policy explains how we collect, use, disclose, and protect personal information when you use our Services, contact us, or interact with our content on third‑party platforms.

3. Information we collect

• Information you provide: account details (name, email, password), profile info, preferences, comments/reviews, support inquiries, survey responses, marketing choices.
• Payment and transactions: subscription status, plan, and limited billing metadata. Card/bank details are processed by our payment processors; we do not store full payment data.
• Usage and device data: IP address, device IDs, browser type, OS, app version, pages/screens viewed, links clicked, watch history, crash logs, and diagnostic data.
• Location data: general location inferred from IP for licensing, language, and security; precise location only if you grant permission.
• Cookies and similar tech: cookies, SDKs, pixels, and local storage for authentication, preferences, analytics, and advertising.
• Third‑party sources: social sign‑in (e.g., Google/Apple/Facebook), analytics/ads partners, and content distribution networks, consistent with your settings and their policies.

4. How we use information

• Provide and operate the Services (streaming, authentication, customer support).
• Personalize content, recommendations, and notifications.
• Process payments, subscriptions, and prevent fraud.
• Measure performance, fix bugs, and improve quality.
• Enforce terms, comply with law, and protect users and our rights.
• Communicate with you about updates, features, offers, and surveys (you can opt out of marketing at any time).

5. Legal bases (EEA/UK users)
   We process personal data only where a legal basis applies:

• Contract: to provide the Services you request.
• Legitimate interests: security, service improvement, and non‑intrusive personalization.
• Consent: marketing communications, cookies/SDKs where required, precise location.
• Legal obligation: tax, accounting, regulatory compliance.

6. Cookies and tracking
   We use necessary cookies for login and security, and optional cookies/SDKs for analytics and advertising. Manage preferences via our cookie banner/settings and your browser or device settings. Blocking cookies may affect functionality.

7. Advertising, analytics, and personalization
   We may work with analytics and ad partners to measure usage, prevent fraud, and show relevant content/ads. Partners may set cookies or read device identifiers. Where required by law, we seek consent and provide opt‑out options.

8. Sharing and disclosure
   We do not sell personal information. We may share limited data with:

• Service providers and processors: hosting/CDNs, payment processors, analytics, customer support, push notifications, email/SMS providers, and development/maintenance partners (e.g., Nebula IT).
• Rights holders and partners: to comply with content licensing and reporting obligations.
• Legal and safety: to comply with law, respond to lawful requests, or protect users’ and our rights.
• Business transfers: in connection with mergers, acquisitions, or asset sales (your information remains protected by this Policy or a materially similar one).

9. International transfers
   If we transfer data across borders, we use appropriate safeguards (e.g., Standard Contractual Clauses) and take steps to ensure an adequate level of protection in line with applicable law.

10. Data retention
    We keep personal information only as long as needed for the purposes in this Policy:

• Account data: for the life of your account and a reasonable period after closure.
• Transaction records: as required by tax and accounting laws.
• Analytics logs: typically 12–24 months, then aggregated or deleted.
  We may retain and use aggregated or de‑identified data indefinitely.

11. Your rights
    Depending on your location, you may have rights to:

• Access, correct, or delete your information.
• Object to or restrict processing; withdraw consent.
• Data portability (receive a copy in a structured, machine‑readable format).
• Opt out of marketing and certain cookies/SDKs.
  To exercise rights, contact us at [privacy@yourdomain]. We may verify your request and respond within the time required by law.

12. California and certain US state privacy rights
    California and other state laws may grant additional rights, including:

• Know/access, correct, and delete personal information.
• Opt out of “sale” or “sharing” of personal information and targeted advertising.
• Limit use of sensitive personal information.
  We do not knowingly sell or share personal information of users under 16. To make a request or opt out, use our “Do Not Sell or Share My Personal Information” link or email [privacy@yourdomain].

13. Children’s privacy
    Our Services are not directed to children under the age required by local law (e.g., 13 in the US, 16 in parts of the EU) without appropriate consent. We do not knowingly collect personal information from children without verifiable consent where required. If you believe a child has provided data, contact us to delete it.

14. Security
    We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, logging, and regular reviews. No system is 100% secure; please use strong passwords and keep them confidential.

15. User‑generated content and social features
    Content you post (comments, reviews, profiles) may be public or visible to other users according to your settings. Think carefully before sharing personal information publicly. Interactions with social features are governed by this Policy and the third‑party platform’s terms.

16. Third‑party links and services
    Our Services may link to third‑party sites/apps or embed third‑party players and SDKs. We are not responsible for their privacy practices. Review their policies before using those services.

17. Automated decision‑making and profiling
    We may use limited profiling to personalize recommendations and measure engagement. We do not use automated decision‑making that produces legal or similarly significant effects without human involvement.

18. Communications preferences
    You can manage email/SMS/push preferences in your account, in‑message links, device settings, or by contacting us. Service and transactional messages (e.g., receipts, service notices) are necessary and will still be sent.

19. Do Not Track
    Some browsers send “Do Not Track” signals; we currently do not respond to these signals. Use our cookie settings and device-level advertising settings to control tracking.

20. Changes to this Policy
    We may update this Policy from time to time. Material changes will be notified via the Services or by email where appropriate. Your continued use after the effective date means you accept the updated Policy.

21. Contact us

• Email: [privacy@yourdomain]
• Address: [Company Address]
• Data Protection Officer/Contact (if applicable): [Name / Email]
• Web form (optional): [Link]

Jurisdiction‑specific notes (optional to include)

• EEA/UK: You can lodge a complaint with your local supervisory authority. If we rely on consent, you may withdraw it at any time without affecting prior processing.
• Canada: You may contact the Office of the Privacy Commissioner of Canada regarding unresolved concerns.
• Bangladesh/Region‑specific: We will comply with applicable local data‑protection laws and guidance in [Jurisdiction]. Add local contacts or regulators as required.

Need this tailored to Bangladesh, the EU/UK (GDPR), or California (CPRA), and aligned with your actual vendors (e.g., Cloudflare, GA4, Firebase, Stripe, Mailchimp)? Share your stack and jurisdiction, and I’ll finalize a ready‑to‑publish version.