This policy explains what personal data deamoz collects, why, who it is shared with and what you can do about it. It covers people with a deamoz account, people who watch videos hosted on deamoz, and people who report a video or write to us.
In short
- We collect what we need to run your account and stream your videos — nothing for advertising.
- Viewing statistics are daily totals per video. We don't store viewers' IP addresses for them or track viewers across sites.
- No ads, no third-party trackers, and we never sell personal data.
- Delete your account and your personal data is removed after 30 days.
1.Who we are
deamoz is operated from Sri Lanka. We are responsible for the personal data of the people who have a deamoz account, and of anyone who reports a video or writes to us. You can reach us about anything in this policy at support@deamoz.com.
Videos on deamoz belong to our customers, who decide who may watch them and where. When you watch one, we handle the data needed to play it and to give its owner viewing statistics, as section 3 describes.
2.What we collect from account holders
- Your account: your name, email address, password and country (you choose it when you sign up, and can change it in Settings). The password is stored only as a one-way hash; we cannot read it. We record when you confirmed your email address.
- Optional details: your gender, if you choose to tell us (“prefer not to say” is the default), and the region your videos are delivered from, which you pick. Both can be changed in Settings.
- Where you signed up from: the country, region and city our host works out from your IP address when you create your account. We keep these, not the IP address itself, to understand where our customers are and to spot abuse.
- Billing: your plan, your billing country (it sets the tax you pay), and a record of each payment — the amount, the tax, the amount charged in rupees and the rate, how you paid and a reference. Card numbers never reach us: card payments are handled by payments.lk (Payable), which keeps your card for the renewals.
- Requests: your answers when you ask for a trial, an upgrade or an Enterprise plan.
- Profile and branding: a profile picture and player logos, if you add them, with each logo’s name and the web address it links to, if you give one.
- Your videos: the files, their titles, descriptions, chapters and thumbnails — including the frames and short silent preview we make from each video — and their settings — privacy, passwords (stored as one-way hashes), embedding domains, player colour, logo, Share button and downloads — and your folders, with their descriptions and how you share them (a folder’s password, too, only as a one-way hash).
- Signing in: the time you last signed in, and the kind of device you used (desktop, phone, tablet and so on), worked out from your browser’s user agent.
3.What we collect when someone watches
- To play or download a video: the viewer’s browser makes a temporary key pair for the tab, and we issue short-lived tokens bound to it. They are not kept once they expire.
- Viewing statistics: the player reports the view, how long and which parts were watched, the quality, the streaming format, how the video was decrypted, and any playback error. We add the country (worked out by our host from the IP address, which we do not store), the browser and operating system, and the website the video was embedded on (its domain only). We keep these as daily totals per video, which the video’s owner can see. A random session ID links one viewing’s reports together and is deleted after about a week.
- Password-protected videos and playlists: failed password attempts are recorded with the IP address, to stop guessing, and deleted after about a day.
We do not identify viewers, build profiles of them, or follow them across sites.
4.If you report a video or write to us
When you report a video, or write to us from the contact page, we keep:
- what you send: the reason or topic you choose, your message, your name if you give it and your email address — and, for a report, which video it was and its title, kept even if the video is later deleted;
- the account you were signed in with, if you were;
- the country you wrote from, worked out by our host from your IP address, and a keyed one-way hash of that address — never the address itself — used only to limit how many reports and messages can come from one connection;
- our replies, and whether each one was emailed to you.
We use them to look into what you report, to answer you, and to keep the forms from being abused. Only the people who run deamoz read them. We email you a confirmation with a reference — it never repeats what you wrote — and each reply we write.
6.How we use it
- To run your account, process your uploads and stream your videos.
- To enforce your settings — privacy, passwords and where your videos may be embedded — and to keep deamoz secure and free of abuse.
- To bill you, work out tax and keep accounting records.
- To show you, and only you, the statistics of your own videos.
- To answer you when you write to us, and to look into the videos you report.
- To send service emails: confirming your email address, a welcome, password resets, updates on your plan requests, notices about your trial or plan, videos that are ready or could not be processed, account deletion, and the confirmations of, and our replies to, the reports and messages you send us. We do not send marketing emails without your consent.
Where the law asks for a legal basis, we rely on our contract with you, our legitimate interest in a secure service and in giving owners statistics, our legal obligations (for example, tax records) and, where we ask for it, your consent.
8.Where it is stored
Our providers store and process data in the United States and other countries, so it may leave the country you live in. We use established providers that protect the data they handle for us under contract.
9.How long we keep it
- Your account data, for as long as your account is open.
- A sign-up you never confirm — its email address, password hash and where it came from — expires after a day and is then deleted.
- When you delete your account: your videos go offline at once, and you have 30 days to change your mind by signing in. After that we delete your videos and folders and remove your personal details. We keep a one-way hash of your email address, so a returning address can be recognised (for example, for free trials), and payment records for as long as tax and accounting law requires.
- Viewing statistics, as part of each video; they are deleted with it. Session IDs for about a week, and the IP addresses of password attempts for about a day.
- Reports and messages, with our replies, while we need them: to deal with what they raise, and as a record of how we did. Those sent while signed in are deleted with your account.
- A video’s entry in the processing queue at Google Firebase, only while it is queued or being processed: it is removed once the video is ready, fails or is deleted. The Firebase sign-in for your account (a random key, nothing else) is removed when your account is deleted.
- Our providers keep server logs for short periods under their own policies.
10.How we protect it
Everything travels over encrypted connections. Passwords are hashed. Videos are encrypted, and their keys are encrypted at rest. Playback tokens are short-lived and bound to the viewer’s browser tab, and only the people who run deamoz can reach the data. No system is perfectly secure; if a breach affects your data, we will tell you, and the authorities, as the law requires.
11.Your rights
Under Sri Lanka’s Personal Data Protection Act, No. 9 of 2022 — and similar laws elsewhere, such as the GDPR — you can ask to:
- see the personal data we hold about you, and get a copy;
- correct it, or complete it;
- have it deleted;
- withdraw a consent you gave, or object to how we use it.
You can change your name and delete your account in Settings. For anything else, including a new email address, write to support@deamoz.com. We answer within the time the law sets, and may ask you to confirm who you are first. You can also complain to the Data Protection Authority of Sri Lanka, or to the authority where you live.
12.If you watched a video
Questions about a particular video — including whether you may watch it — are for its owner, who controls it. A video that breaks our Acceptable Use Policy can be reported with its Report button. For questions about the data deamoz itself handles when you watch, write to support@deamoz.com.
13.Children
Accounts are only for people aged 18 or over. If you think a child has created one, tell us and we will delete it.
14.Changes to this policy
We will update this policy when what we do changes, and change the date at the top. For a significant change, we email account holders before it takes effect.
Questions about this document? Write to support@deamoz.com.