Privacy Policy

Last updated: July 30, 2026

1. Controller and Contact

MEDIA Rate is operated by 45.370.930 EDINALDO SOARES DA SILVA. For privacy inquiries, contact endart.studios@gmail.com.

2. What Data We Collect

We collect account data (name, email), subscription data (plan, payment status via Stripe), usage data (watchlist, favorites, history) and essential session cookies (httpOnly, Secure, SameSite=Lax). We do not use tracking or advertising cookies.

3. Legal Basis and Purpose

We process your data under the following legal bases: contract execution (providing the contracted service), consent (optional communications via opt-in) and legitimate interest (platform improvements, fraud prevention).

4. Data Sharing

Your data is NOT sold. We only share data with: payment provider Stripe (subscription processing) and infrastructure providers (Vercel for frontend hosting, Railway for backend).

5. Data Retention

Your data is kept while your account exists. Upon deletion request, data is removed within 30 days. Audit logs are retained for 6 years.

6. Your Rights

You may exercise the following rights: access (view your data on the Your Data page), correction (update your details in Settings), deletion (request full data removal), portability (export your data in JSON) and consent withdrawal.

7. Security

We employ technical measures to protect your data: cryptographically hashed passwords, httpOnly/Secure/SameSite session cookies, HTTPS-only communication and application-level encryption of sensitive data.

8. Changes to This Policy

This policy may be updated periodically. Significant changes will be communicated via email or platform notification.

9. International Transfers

Your data may be processed on servers located outside your country (for example, cloud infrastructure in the United States and the European Union, and payment processors in multiple countries). For these transfers we apply appropriate safeguards: contracts with subprocessors, standard contractual clauses where applicable, and encryption in transit and at rest.

10. Data Protection Authority

You may lodge a complaint with the data protection authority competent for your jurisdiction, or with the U.S. Federal Trade Commission (FTC) for consumer protection matters.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the data protection authority of your jurisdiction, without prejudice to administrative or judicial remedies.

12. Legal Notice

This content is for information purposes only and does not replace specialized legal advice.