Privacy Policy - Orbitv
Last updated: December 1st, 2025 (12/01/2025)
1. Introduction
This Privacy Policy explains how General Broadcast SpA ("Orbitv", "we", "us") collects, uses, shares and protects information when you use:
- The Orbitv applications for Android (mobile and tablet), Android TV / Fire TV and iOS / iPadOS; and
- Our associated websites and online services that link to this Privacy Policy (together, the "Service").
We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner, in line with applicable data-protection laws such as the EU / UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and the Brazilian Lei Geral de Proteção de Dados (LGPD), where applicable.
If you do not agree with this Policy, you should not use the Service.
2. Data controller and contact details
The data controller responsible for processing your personal data is:
3. Categories of data we collect
Depending on how you use the Service (guest user or registered account, platform, region, settings), we may collect the following categories of data:
3.1 Account and profile data
When you create an account or use certain features, we may collect:
- Email address.
- Username.
- Date of birth.
- Gender.
- Encrypted password (hashed).
- Date and time when you accepted our Terms and this Privacy Policy.
3.2 Technical and device data
Through the App and third-party SDKs, we may collect:
- Device identifiers (for example, device ID, guest user ID, advertising ID such as Google Advertising ID or Apple IDFA).
- Device type, model, operating system and version.
- App version and language.
- IP address and approximate location (for example, city or country; we do not use precise GPS unless explicitly provided).
- Information about crashes, errors and performance.
This data is typically collected via third-party providers such as Google Firebase, Google Analytics for Firebase, Google Crashlytics, Google Mobile Ads (GMA), Google Interactive Media Ads (IMA), OneSignal and mediation SDKs such as Meta, AppLovin, Liftoff (Vungle) and Pangle or similar APIs or SDKs.
3.3 Usage data
We may collect information about how you interact with the Service, for example:
- Which TV streamings you access and in which sections (for example, "frequent" or "favorites").
- In-app actions (for example, adding favorites, using "My IPTV", adjusting settings).
- General interaction with menus, settings and features.
Some of this data is stored locally on your device only (for example, local favorites when you are a guest user, local "frequent" list, local "My IPTV" playlists). For registered users, certain data (such as favorites) may also be stored on Orbitv's servers.
3.4 Data related to in-app purchases
We do not receive or store your full payment-card details. However, through the app stores we may receive:
- A unique purchase or subscription identifier.
- The type of product purchased (for example, "Orbitv+", "Orbitv Pro", period and platform).
- Status information (for example, active, expired, refunded) and limited metadata necessary to confirm and manage your entitlements.
You can manage and view your purchases directly in the Google Play Store or Apple App Store.
3.5 Communications and support data
When you contact us (for example, via email or contact forms), we may collect:
- Your email address and any other contact details you provide.
- The content of your message and any attachments.
- Our replies and any follow-up information.
3.6 Data related to "My IPTV" / "Personal" TV streamings
When you use the "My IPTV" or "Personal" feature, the list of TV streamings you configure (for example, M3U playlists or URLs) is only stored locally on your device. You are responsible for ensuring that such TV streamings are legal and authorized in your country.
4. Purposes and legal bases of processing
We use your data for the following purposes and, where applicable, under the following legal bases:
- To provide and operate the Service
- For example, to allow you to browse TV streamings, manage favorites, use "My IPTV" and access your account.
- Legal basis (GDPR / LGPD): performance of a contract (Terms of Service) and/or legitimate interest.
- To manage your account and in-app purchases
- For example, to verify your purchases and subscriptions, manage entitlements for Orbitv+ and Orbitv Pro, and prevent abuse of trials.
- Legal basis: performance of a contract; legitimate interest.
- To display and measure advertising
- For example, to show ads within the App, limit the number of times you see the same ad, detect invalid traffic and measure the effectiveness of campaigns.
- Legal basis: consent (where required by law, especially in the EEA / UK) and/or legitimate interest.
- To send notifications and communications
- Service notifications (for example, changes to Terms or policy, technical notices, account messages).
- Marketing communications and push notifications (for example, updates, features, promotions), according to your settings.
- Legal basis: performance of a contract; consent (for certain marketing communications); legitimate interest.
- To perform analytics and improve the Service
- For example, to understand how users interact with different features, to detect bugs and to plan new functionalities.
- Legal basis: legitimate interest; consent where required for analytics tools.
- To ensure security and prevent fraud or abuse
- For example, to detect suspicious activity, protect against misuse of free trials or subscription rules, and prevent technical attacks.
- Legal basis: legitimate interest; compliance with legal obligations.
- To comply with legal obligations and enforce our rights
- For example, to respond to legal requests, DMCA notices or regulatory requirements.
- Legal basis: compliance with legal obligations; legitimate interest in defending our rights.
Where we rely on consent (for example, for personalized ads in certain jurisdictions), you can withdraw your consent at any time via the consent-management mechanisms provided (for example, consent screens, device settings or in-app options), without affecting the lawfulness of processing based on consent before its withdrawal.
5. Advertising, cookies and analytics
We work with third-party advertising and analytics providers that help us keep Orbitv free and improve your experience, including:
- Google Firebase & Google Analytics for Firebase (analytics and app performance).
- Google Crashlytics (error reporting).
- Google Mobile Ads (GMA) and Google Interactive Media Ads (IMA) (advertising).
- Mediation SDKs such as Meta, AppLovin, Liftoff (Vungle) and Pangle (advertising).
- OneSignal (push notifications and segmentation).
These partners may collect or receive identifiers, device information, usage data and, in some cases, advertising identifiers, in order to provide their services. They process such data in accordance with their own privacy policies.
You can limit or reset advertising identifiers on your device through your operating system settings and, where available, via in-app or consent-management options.
On the web (for example, when you use Orbitv's website or web-based player), we may use cookies, cache and similar technologies to:
- Understand usage patterns and performance.
- Remember your preferences.
- Improve our services.
You can delete cookies and cache at any time from your browser or device settings. If you decline certain cookies, some parts of the Service may not function properly.
6. Sharing of personal data
We may share your personal data with:
- Service providers and processors
- Companies that provide hosting, analytics, error-reporting, notification, customer-support or other technical services on our behalf.
- Advertising and analytics partners
- As described above, for the purpose of delivering and measuring advertising and performing analytics.
- App stores and platform operators
- For example, Google and Apple, which handle your purchases and may receive information about your usage and device.
- Authorities and legal recipients
- When required by law, court order or regulatory request, or to protect our rights or the rights of others.
- Business transfers
- In connection with a merger, acquisition or sale of assets, your data may be transferred to the acquiring entity, subject to this Policy or to an equivalent protection.
We do not "sell" personal information as that term is defined under the CCPA/CPRA. Where our use of advertising identifiers or cookies qualifies as "sharing" for cross-context behavioral advertising, California residents may request that we limit such sharing as described in section 9.2 below and by adjusting their device and advertising-preference settings.
7. International transfers
Because we use global service providers (for example, Google, OneSignal and others), your data may be processed on servers located outside your country, including in countries that may have different data-protection standards.
Where required by law, we will ensure that appropriate safeguards are in place, such as:
- Standard contractual clauses approved by relevant authorities; or
- Any other mechanisms recognized by data-protection laws.
By using the Service, you understand that your data may be transferred internationally as described in this Policy.
8. Data retention
We retain personal data only for as long as necessary for the purposes described in this Policy, or as required by law.
In particular:
- Account data: retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we must retain certain data for legal, security or accounting reasons.
- Deleted users / closed accounts: certain data may be retained for up to two (2) years after deletion for security, fraud-prevention and record-keeping purposes, after which it will be deleted or irreversibly anonymized.
- Server logs: generally retained for up to two (2) years, unless a longer period is required to investigate security incidents or comply with legal obligations.
- Local data: data stored only on your device (for example, local favorites, local "frequent" list, local "My IPTV" playlists) remains under your control and can be deleted via the App and/or your device settings.
- Aggregated or anonymized data: may be kept for longer periods, as it no longer identifies you.
9. Your rights
Your rights may vary depending on your country of residence, but generally include:
- Right of access to your personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"), subject to legal limitations.
- Right to restriction of processing in certain circumstances.
- Right to data portability (where applicable).
- Right to object to certain processing, especially were based on legitimate interests or for direct marketing.
- Right to withdraw consent at any time, without affecting prior processing.
You can exercise these rights by contacting us at support@orbitv.io or info@orbitv.io. We may ask you to verify your identity before responding to your request.
9.1 GDPR / LGPD-specific rights
If you are in the European Economic Area, the United Kingdom or Brazil, you may also have the right to lodge a complaint with your local data-protection authority if you believe that we have not handled your data in accordance with applicable law.
9.2 CCPA / CPRA rights (California residents)
If you are a California resident, you may have additional rights, including:
- The right to request information about the categories of personal information we collect and how we use and disclose it.
- The right to request access to, and deletion of, certain personal information.
- The right to opt out of the "sharing" of personal information for cross-context behavioral advertising where applicable.
We do not sell personal information, but if you believe that any of our advertising practices qualify as "sharing" under CPRA and you wish to limit such sharing, you can contact us at support@orbitv.io and also adjust your device-level advertising preferences (for example, "Limit Ad Tracking" or equivalent settings).
We will not discriminate against you for exercising your privacy rights.
10. Your choices and controls
You have several options to control your data:
- Account settings: you can update certain profile details within the App (where available).
- Notifications: you can enable or disable certain push notifications within the App and/or through your device settings.
- Advertising identifiers: you can reset or limit the use of advertising IDs through your device's privacy or advertising settings.
- Cookies and local storage (web): you can clear cookies and cache in your browser settings.
- Account deletion: you can request deletion of your account through the App (where available) or by emailing support@orbitv.io.
- Data deletion and access: you can request deletion or access to your personal data by contacting us at support@orbitv.io or info@orbitv.io.
11. Security
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse or alteration. These measures include:
- Encryption in transit where appropriate.
- Access controls and authentication for internal systems.
- Regular updates and security patches.
- Internal tests and audits designed to identify potential vulnerabilities.
However, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for using updated and secure devices and networks when accessing the Service.
12. Third-party websites and services
When you access third-party websites or TV streamings through Orbitv, those services are governed by their own terms and privacy policies. We are not responsible for how those third parties collect, use or protect your data.
We encourage you to review the privacy policies of any third-party services you visit or use through Orbitv.
13. Children's privacy
The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete it as soon as reasonably possible.
Parents or guardians who believe that their child has provided personal data to us should contact us at support@orbitv.io.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to reflect changes in the Service, in applicable laws or in our internal practices.
When changes are significant, we will endeavor to notify you through the App, our website, email and/or other appropriate channels. The "Last updated" date at the top of this document indicates when it was last revised.
Your continued use of the Service after the updated Policy becomes effective will constitute your acceptance of the changes.
15. Contact
If you have any questions, comments or requests regarding this Privacy Policy or our data-processing practices, you can contact us at: