This page explains, in plain language, how Nirmata Vision protects your account and your data. If you have a security question or want to report a problem, email support@nvplayer.com.
1. Encrypted Connections
All traffic between your TV, your browser, and our servers is encrypted in transit using HTTPS/TLS. This prevents others on your network from reading or altering the data as it travels.
2. Passwords Are Never Stored in Readable Form
Sign-in is handled by our backend authentication provider. Your password is stored only as an encrypted (hashed) value — we can never see your password, and neither can anyone who works with us. Password reset links are time-limited and single-use.
3. Your Data Is Isolated to Your Account
Our database enforces row-level security: every device, playlist, profile, favorite, and setting is locked so that only the signed-in owner can read or change it. These rules are enforced by the database itself, not just by the app — one customer cannot query another customer's data, even by crafting their own requests.
4. Every Sensitive Action Requires Sign-In
Every action that reads or changes your data — managing devices, playlists, profiles, billing, or support tickets — verifies your login session on the server before it runs. Actions that fail verification are rejected.
5. Payments Are Handled by Stripe
Your card details go directly to Stripe, our payment processor, and never pass through or are stored on our servers. We only receive your subscription status and limited billing details. Stripe is certified to the highest level of the payment card industry standard (PCI DSS Level 1).
6. TVs Use Limited, Per-Device Access
Each TV pairs with its own limited token. A device can only read and update its own settings — it cannot access your whole account, your billing, or other devices.
7. Private File Storage
Files uploaded to the service (such as category artwork) are kept in private storage with tightly scoped read access, not exposed openly on the internet.
8. Admin Access Is Restricted and Verified
Administrative tools are gated by a server-side role check. Admin rights cannot be granted from the app or the dashboard by a regular user.
9. Continuous Security Scanning
The platform is regularly scanned by automated security tooling that looks for exposed data, missing access rules, and misconfigurations. Findings are reviewed and fixed.
10. What We Don't Do
- We do not sell your personal information.
- We do not store your card number.
- We do not host, provide, or have access to the media content you play.
- We do not use your data for third-party advertising.
11. Reporting a Security Issue
If you believe you have found a security vulnerability, please email support@nvplayer.com with details. We take these reports seriously and will investigate promptly. Please do not share the details publicly until we have had a chance to fix the issue.
12. More Information
For details on what data we collect and how it is used, see our Privacy Policy.