Privacy policy

support@nexlatv.com

1. Who is responsible and how to contact us

NexlaTV is operated by Zhaoyu Yang（杨兆雨） as an individual located in mainland China. Website: https://nexlatv.com. Send privacy and security requests to support.

2. Data we process

• Account information: email, account name, login authentication information and access entitlement records.
• Media connections: server addresses, source names and authentication information needed to access your servers.
• Library information: titles, descriptions, images, seasons, episodes, viewing state, and playback URLs and authorization information.
• Necessary network and usage records: IP addresses, approximate regions, activity summaries, service request results and administrative actions.
• Support correspondence: your email address, messages and attachments.

3. How we use data

We use this data to authenticate and secure accounts, connect media servers, display libraries, provide playback, manage access, respond to support requests, prevent abuse and understand service usage.

Your browser stores necessary login state and preferences such as language, theme and selected source. Regional statistics are not precise location tracking.

4. Necessary third-party processing

We process information necessary to provide account login, media-server connections, library browsing and playback. We use hosting, network protection and email service providers to support the service; they process necessary data for those purposes. Data may be stored or processed outside your country or region.

Your connected media server receives necessary authentication information and requests under its own privacy policy. Playback URLs and authorization information are provided to the player. Email services process the addresses, contents and attachments needed for verification emails and support correspondence.

If you initiate a subscription purchase, Waffo Pancake processes the order and payment information needed to complete and manage the transaction.

5. Storage, security and retention

We encrypt stored media-source authentication information and use account access controls and other necessary safeguards. The service must still use this information to access servers you authorize. Use HTTPS sources where possible to protect authentication information in transit; do not send passwords or verification codes to support.

Administrative action records are retained for 15 days. This does not apply to account records, access history, activity summaries or backups. Accounts, support correspondence and other data are not immediately deleted when a trial ends, renewal is cancelled or you sign out. Retention also depends on processing purposes and applicable legal requirements.

6. Your rights and requests

Contact support to request access, correction, export or deletion of personal data. After verifying your identity, we will handle your request in accordance with applicable law and inform you of the outcome or the reasons we cannot fulfill it.

You can remove media sources or clear browser preferences yourself. These actions do not delete your account or files on your media server. Removing a source does not guarantee revocation of every authorization held by third-party services.

7. Eligibility, policy changes and contact

Provide personal information only if you have the legal capacity required to use the service.

This page will be updated when processing changes. See also the terms of service.