Privacy Policy

1. Introduction

AntCDN ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video content delivery services.

This policy applies to information collected through our website (antcdn.net), web application (app.antcdn.net), APIs, and related services (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide, including:

Account Information: Name, email address, company name, and password when you create an account
Billing Information: Payment method details, billing address, and tax identification numbers (processed via Stripe)
Content: Video files, captions, thumbnails, and metadata you upload to our platform
Communications: Messages you send to our support team or feedback you provide
API Credentials: API keys and signing keys you generate

2.2 Information Collected Automatically

When you use our Services, we automatically collect:

Usage Data: Video views, segments delivered, API calls, storage usage, and feature usage
Device Information: IP address, browser type, operating system, and device identifiers
Log Data: Access times, pages viewed, referral URLs, and API request logs
Analytics Data: Playback events, resolution preferences, and buffering metrics

2.3 Information from Third Parties

We may receive information from:

Authentication Providers: When you sign in using Google or other identity providers (via WorkOS)
Payment Processors: Transaction status and billing information from Stripe
Analytics Services: Aggregated usage patterns and performance metrics

3. How We Use Your Information

We use the collected information to:

3.1 Provide and Improve Services

Process and deliver your video content globally
Transcode videos into adaptive bitrate formats
Generate captions and thumbnails
Provide usage analytics and reports
Improve service performance and reliability

3.2 Manage Your Account

Create and maintain your account
Process billing and payments
Send service-related notifications
Provide customer support

3.3 Ensure Security and Compliance

Detect and prevent fraud and abuse
Enforce our Terms of Service
Comply with legal obligations
Protect our rights and property

3.4 Communicate with You

Send important service updates
Respond to inquiries and support requests
Provide product announcements (with your consent)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

Contract Performance: Processing necessary to provide the Services you've requested
Legitimate Interests: Improving our services, preventing fraud, and ensuring security
Legal Compliance: Processing required by applicable laws
Consent: Where you've given explicit consent (e.g., marketing communications)

5. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

5.1 Service Providers

We work with trusted third-party providers who process data on our behalf:

Cloudflare: Content delivery and storage (R2, Workers)
Google Cloud Platform: Transcoding, processing, and database hosting
Stripe: Payment processing
WorkOS: Authentication and identity management
OpenAI/Whisper: Caption generation (audio processing only)

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to:

Comply with legal obligations
Protect our rights, privacy, safety, or property
Prevent fraud or illegal activity
Respond to lawful requests from public authorities

5.3 Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.4 With Your Consent

We may share information with third parties when you explicitly consent to such sharing.

6. Data Storage and Security

6.1 Data Location

Your data is processed and stored in:

Video Content: Cloudflare R2 (global edge distribution)
Account Data: Google Cloud Platform (us-east1)
Edge Metadata: Cloudflare D1 (global edge)

6.2 Security Measures

We implement industry-standard security practices:

Encryption in transit (TLS 1.2+) and at rest
Access controls and authentication
Regular security audits and monitoring
Secure API key management
DDoS protection via Cloudflare

6.3 Incident Response

In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of discovery.

7. Data Retention

We retain data for the following periods:

Video Content: Until you delete it or terminate your account
Account Information: Duration of account plus 30 days after termination
Billing Records: 7 years (legal requirement)
Usage Analytics: 2 years
API Logs: 90 days
Support Communications: 3 years

Upon account termination, we delete or anonymize personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the following rights:

8.1 Access and Portability

You can access your data through the dashboard or request a copy of your personal data in a portable format.

8.2 Correction

You can update your account information through the dashboard or request corrections to inaccurate data.

8.3 Deletion

You can delete your videos through the dashboard. You may also request account deletion, subject to our retention requirements.

8.4 Restriction and Objection

You can request that we restrict processing of your data or object to processing based on legitimate interests.

8.5 Withdraw Consent

Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

8.6 Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. International Data Transfers

We transfer data internationally using appropriate safeguards:

Standard Contractual Clauses: For transfers from the EEA to countries without adequacy decisions
Data Processing Agreements: With all service providers processing personal data
UK GDPR Compliance: International Data Transfer Agreement addendum where applicable

For a copy of the safeguards we use, contact [email protected].

10. Cookies and Tracking

10.1 Cookies We Use

Essential Cookies: Required for authentication and security
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use our Services

10.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect functionality.

10.3 Do Not Track

We do not currently respond to Do Not Track signals, as there is no industry standard for implementation.

11. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us immediately at [email protected].

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

Right to Know: Request disclosure of personal information collected, used, and shared
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell personal information)
Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact [email protected] or use the dashboard.

13. Your Content and End Users

13.1 Your Responsibility

You are responsible for the content you upload and for providing appropriate privacy notices to your end users if you collect data through content delivered via AntCDN.

13.2 End User Data

When your end users view content delivered through AntCDN, we may collect limited technical data (IP address, device type, playback metrics) to deliver content efficiently. This data is used solely for service delivery and aggregate analytics provided to you.

13.3 Data Processor Role

For content you upload, AntCDN acts as a data processor. You remain the data controller and are responsible for lawful processing of any personal data in your content.

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or dashboard notification at least 30 days before changes take effect.

The "Last updated" date at the top of this page indicates when the policy was last revised.

15. Contact Us

For privacy-related questions or to exercise your rights:

Support: [email protected]

We aim to respond to all privacy requests within 30 days.