Security

Infrastructure and hosting

AtomicPlayer runs on established cloud infrastructure providers, with video delivered through a global content delivery network (CDN) for performance and resilience. Personal data and other information may be stored and processed on servers located in Brazil or abroad, as described in our Privacy Policy.

We design for availability and isolate production environments from development and testing environments.

Encryption

Data is encrypted in transit using TLS (HTTPS) across the application, the player, the API, and our dashboards. Data at rest is stored in secure systems with encryption applied by our infrastructure providers — the foundation of secure video hosting.

Access control

Access to production data is restricted to authorized personnel with the appropriate credentials, on a least-privilege basis. Those individuals are bound to maintain the confidentiality of information and not to use it improperly. On your side, granular video access control and password protected video options keep each upload private; your account is protected by your password, the knowledge of which is exclusive to you.

Sub-processors and vendors

To operate the platform we rely on a limited set of service providers — for example, hosting and CDN, data backup, fraud prevention, email delivery, databases, payment processors and gateways, and invoicing. We require these providers to include, in their contracts, provisions guaranteeing due protection, secrecy, and confidentiality in the processing of data.

Data retention and deletion

We retain personal data only as long as necessary for the purpose for which it was processed, and to meet legal and regulatory obligations. Key windows include:

• Account data is generally stored for a minimum of 12 (twelve) months, or longer where required by law or judicial/administrative order.
• On request, registration data you provided is definitively deleted within a maximum of 15 (fifteen) days.
• Access logs (IP addresses), if any, are discarded once they reach 180 (one hundred and eighty) days of storage.
• After account cancellation, videos and related data are retained for up to 30 (thirty) days, after which they may be deleted.

Monitoring, backups, and resilience

We monitor the platform for availability and integrity and maintain data backups to support recovery. In the event of a serious, proven infrastructure failure, our Terms of Use describe the applicable remedies.

Your role in security

Security is a shared responsibility. You agree to keep your login and password secure and out of reach of third parties, not to allow your account to be used by others, and to keep your own device environment secure using available tools such as antivirus and firewall. With features like password protected video and domain-locked embeds, you stay in control. Please notify us immediately of any unauthorized use of your account or unauthorized access by third parties at [email protected].

Compliance

Our processing of personal data is governed by Brazilian law, principally the Civil Rights Framework for the Internet (Law No. 12.965/2014) and the General Data Protection Law (Law No. 13.709/2018 – LGPD). AtomicPlayer maintains a Data Protection Officer (DPO), who can be reached at [email protected].

Reporting a vulnerability

If you believe you have found a security vulnerability, we want to hear from you. Please report it responsibly to [email protected] with enough detail to reproduce the issue, and allow us reasonable time to investigate and remediate before any public disclosure. We appreciate the work of the security community in helping keep AtomicPlayer safe.