1. Who we are
Telvory Live is a product of ALANHAR ALKHAMSA COMPANY LTD. ("we", "us", "our"). Telvory Live is live stream and restream control middleware sold to businesses ("customers"). This policy explains how we handle personal data in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and other laws that apply to us.
2. Scope and roles
This policy covers the website telvorylive.com, the Telvory Live platform (the staff console, viewer links, players and M3U playlists) and our business messaging, including WhatsApp.
- As a controller, we decide how to use data about our customers' staff, website visitors and people who contact us.
- As a processor, we handle viewer data on behalf of our customers when their audiences open a share link or playlist. The customer decides who may watch and is responsible for informing its viewers. Viewers with questions should contact the organisation that shared the link with them; we will assist that organisation.
3. Data we collect
Customer account data
Names, business email addresses, roles and permissions of customer staff, single sign-on identifiers, sign-in times, and the actions recorded in the audit log.
Customer configuration
Streaming server addresses and credentials (stored encrypted), channel catalogues, logos, branding, broadcast schedules and settings. This is business data; it contains personal data only where a customer chooses to include it.
Viewer and playlist usage data
When someone opens a share link or plays from an M3U playlist: IP address, approximate location derived from the IP address (country and city), browser or app and device type, the link or playlist used, and the start, end and duration of viewing sessions. We use this to enforce access rules, viewer caps and stream limits, to detect shared links and to provide audience analytics to the customer.
Communications
When you email us or message us on WhatsApp: your name, email address or phone number, WhatsApp profile name, the content of the messages and their delivery status.
Website visitors
This website does not use analytics or advertising trackers. Our hosting provider processes standard request data (IP address, browser type, page requested, time) for security and to deliver the pages.
We do not collect payment card data on this website, and we do not knowingly collect sensitive personal data.
4. How we use data
| Purpose | Data used | Basis |
|---|---|---|
| Provide and operate the platform | Account data, configuration, usage data | Contract with the customer |
| Enforce access rules, caps and limits; prevent abuse and fraud | Usage data, audit log | Legitimate interest; customer instructions |
| Audience analytics and broadcast reports for customers | Usage data | Customer instructions |
| Support, service notices and account communications | Account data, communications | Contract; consent where required |
| Security, troubleshooting and service improvement | Technical logs | Legitimate interest |
| Legal, tax and regulatory obligations | Records we are required to keep | Legal obligation |
We do not sell personal data, and we do not use it for advertising or to build profiles for third parties.
5. WhatsApp messaging
We use the WhatsApp Business Platform, provided by Meta Platforms, to communicate with customers and prospective customers who contact us on WhatsApp or who give us their number and agree to be contacted there.
- What we send: replies to your enquiries, support conversations, account and service notices such as broadcast or link status, and messages you have asked to receive. We do not send unsolicited marketing.
- Data involved: your phone number, WhatsApp profile name, message content, attachments you send, and delivery and read status.
- Opting out: reply "STOP" at any time, or email support@telvorylive.com. We will stop sending you messages other than replies you request.
- Meta's role: messages are transmitted through WhatsApp, which is end-to-end encrypted between devices. When we use Meta's hosted platform, Meta processes message data on our behalf under the WhatsApp Business terms. Meta's own handling of your WhatsApp account is governed by WhatsApp's privacy policy.
The platform also prepares a ready-to-send message for each broadcast. When a customer shares that message from their own WhatsApp account, it is sent by the customer, not by us.
6. Cookies and similar storage
This website does not set cookies. The staff console uses strictly necessary cookies to keep you signed in and protect against cross-site request forgery. Players may store small technical values on the device, such as a session identifier, to apply viewer caps. We do not use advertising or cross-site tracking cookies.
7. Service providers (processors)
We use carefully selected providers who process data on our behalf under written agreements and only on our instructions:
| Provider | Service | Location |
|---|---|---|
| Microsoft Azure | Platform hosting, database, encrypted key vault, backups | Secure Azure cloud region |
| Cloudflare | Website hosting, content delivery, security, DNS and private object storage | Global network; object storage in Europe |
| Amazon Web Services | Low-latency content delivery close to viewers | Global edge network |
| Meta Platforms (WhatsApp) | Business messaging, when used | Global |
Customers may also connect their own streaming servers and identity providers; those services are chosen and controlled by the customer.
8. International transfers
Our platform runs in secure cloud data centres and some providers operate globally, so personal data may be processed outside the Kingdom of Saudi Arabia. We transfer data only as permitted by applicable law, with appropriate safeguards such as contractual commitments, and limited to what is necessary for the purposes above.
9. Retention
| Data | How long we keep it |
|---|---|
| Customer account data and configuration | For the duration of the contract, then deleted within 90 days unless the law requires longer |
| Viewer and playlist usage data | Up to 12 months, then deleted or kept only in aggregated form that does not identify anyone |
| Audit log and security logs | Up to 12 months |
| WhatsApp and email conversations | Up to 24 months after the last message, or longer while needed for an open support matter |
| Backups | Rolling backups expire automatically, typically within 42 days |
| Website request logs | Up to 30 days |
10. Security
We protect data with encryption in transit and at rest, secrets held in a managed key vault, private storage, signed short-lived media URLs, origin servers that are never exposed to the public internet, role-based access with single sign-on, and an audit log of administrative actions. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
11. Your rights
Subject to applicable law, you may ask to be informed about, access, obtain a copy of, correct, or delete your personal data, and withdraw consent you have given. To exercise these rights, email support@telvorylive.com. We will respond within the period set by law and may need to verify your identity. If your request concerns viewer data held for one of our customers, we will pass it to that customer and support them in answering it. You may also lodge a complaint with the Saudi Data and AI Authority (SDAIA) or another competent authority.
12. Children
Telvory Live is a business service and is not directed at children. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy as our service or the law changes. We will post the new version on this page with a new effective date and, for material changes, inform customers in advance.
14. Contact
Questions about this policy or your personal data: support@telvorylive.com, or by post to the address in section 1.