IPTVSOSO, the business behind this website, decides what is collected and what it is for. Send privacy questions and requests to the team on WhatsApp at +212 663 813 479.
The sections follow the information outward: first this website, then the team’s inboxes, WhatsApp, the streaming system and finally your own device.
Kept on this website
Two sorts of record live on the server behind this site: the forms people send, and a log of page requests.
Forms
| Form | Appears on | What you type | Attached automatically |
|---|---|---|---|
| Free-trial form | The homepage and the free trial page | The device the trial is for (required); optionally, what the trial should show you first, picked from a list, and a second WhatsApp number to send the login to | Your IP address, and the address of the page the form was on |
| Contact form | The contact page | Your first name and your message (both required), plus a subject picked from a list; optionally, an email address | The same two: IP address and page address |
| Checkout order form | The checkout page, reached from a plan button | Your email address, first name, country and WhatsApp number (all required), the term and number of viewers you chose, and a coupon code if you enter one. No card details: payment happens through a link sent to you on WhatsApp. A copy of the order summary is kept for two hours so the confirmation page can show it. | The same two: IP address and page address |
Every form in the table is filed the same way: as a private lead entry inside WordPress, the software this site is built on, readable only by staff signed in to manage the site. Once a day a scheduled task looks for lead entries more than 90 days old and erases them for good.
Spam is kept out by a hidden trap field and a list of wording that automated campaigns use; a submission that trips either is discarded unsaved. A counter also caps each sender at five submissions an hour; it is keyed to a one-way hash of your IP rather than the IP itself, and it lapses after an hour.
Server logs
For each request the web server writes one line: IP address, date and time, the page asked for, the response code, the referring page and the browser’s user-agent string. Log files rotate daily and are erased after 14 days. They exist to keep the site running and to deal with attacks on it.
Kept in the team’s mailbox and Telegram
An accepted form sets off two notifications at once. Resend, a company that delivers email, sends the submission (IP address and page included) to the team’s mailbox. A copy also lands in Telegram, where a bot posts it to an account the team watches, which is how a trial request gets picked up fast.
Both copies sit outside the website, beyond the reach of the 90-day task. They are erased on request, as described further down under requests.
Your form details serve four purposes: issuing a trial, answering your question, sending the payment link for an order, and pointing you to the right setup guide and the channels you asked to find first. Marketing is not one of them, and nobody receives them by sale, rental or for advertising.
Kept by WhatsApp
When the trial or contact form is accepted, your browser moves on to a WhatsApp link carrying a message pre-written from your entries. The text rides inside that link, so WhatsApp can read it the moment the link opens; it reaches the team only if you press send.
Everything else, from the order and the payment to the login and the help afterwards, happens in a single WhatsApp chat. There we see your display name, your number and what you choose to send, such as the plan you pick, a screenshot of a fault or a payment confirmation. Payment details are exchanged in that chat and the method is agreed there. No card or bank number ever passes through this website or is stored on it, which is also why nothing can be charged again on its own.
The chat is kept until you ask for it to be deleted. WhatsApp itself is run by another company and keeps its own records under its own privacy terms.
Kept by the streaming system
The system that issues logins stores what it needs to run yours: the username, the password, the connection count, the end date, and the MAC address of any MAG box you use. The MAG and Formuler setup guide shows where the MAC address comes from.
Whenever a device starts a channel, the streaming servers learn its IP address. Without it they could neither send the picture nor count that device against your connections.
This record lasts as long as the plan. Once a plan has ended, ask in the chat and its login is removed.
Kept on your own device
Your login is saved inside the player you typed it into. IPTV Smarters Pro, TiviMate or any other player stores it according to its own developer’s privacy terms, and deleting the playlist or the app wipes it from that device.
This website sets no cookies in a visitor’s browser and writes nothing to its local storage. WordPress uses cookies for staff only, when they sign in to manage the site.
Shared with no one else
These pages load no analytics, no tracking or advertising pixel, no social-network buttons and no video player hosted by another business. A visit here is reported to nobody outside IPTVSOSO.
A short list of outside companies does touch personal data, each for one task the service depends on:
- Hosting: the company whose server this website runs on.
- Email: Resend for delivery, plus the company that provides the team’s mailbox.
- Telegram: the notification bot’s copy of each form.
- WhatsApp: the chat with the team.
- Payment: whichever provider is agreed in the chat.
Each one applies its own privacy terms, and a few of them handle data in countries other than yours.
Seeing, correcting or erasing your details
You may ask to see what is held on you, to have it corrected, or to have it deleted, with deletion reaching the email and Telegram copies as well. Ask on WhatsApp, preferably from the number you ordered with, so the team can be sure the request is yours; the full answer arrives inside 30 days. Bear in mind that deleting an active login ends its plan, however many days remain.
Where you live may also give you the right to complain to a data-protection authority.
Children
Plans are sold to adults buying for their household, and no form here is aimed at anyone younger. Should a form or a chat message turn out to have come from a child, tell the team; the details are then erased.
Safeguards
Pages load over HTTPS. Lead entries open only from the WordPress dashboard, reached through an unpublished sign-in address and a staff password. Your own login is yours to protect; if somebody else appears to be using it, ask in the chat for replacement details. What counts as sharing a login is defined in the subscription terms.
Changes to this policy
A new form, a changed field or a new company handling data means the table and sections above change too, along with the date at the top. Whatever you send is covered by the version in force on the day you send it.
If a clause reads two ways
Pick the heading that puzzles you and send it, with your question underneath, to our team on WhatsApp at +212 663 813 479.
A reply names the passage it relies on. Prefer a form? The contact page starts the same conversation.
The same rules are split across five pages. Besides this one:
- Terms of service: what a subscription is, and the rules that come with a login
- Refund policy: the 7-day money-back guarantee, from the trial to the refund
- DMCA procedure: how a rights holder reports material, and what follows
- Disclaimer: how far each kind of statement on this website reaches