Privacy Policy
What we collect, why we collect it, who we share it with, and how to get it changed or deleted. Written in plain English.
Last Updated: September 25, 2026
1. Who we are
EPGMaster.ai (“EPGMaster”, “we”, “us”) is a software service run from Ontario, Canada. We provide TV guide data (EPG) and playlist tools for TV services you already subscribe to. We do not sell, host or stream TV channels or video.
We are responsible for the personal information described in this policy. Questions and requests go to [email protected].
2. What we collect
Information you give us
- Account details: your email address and password (stored only as a secure hash by our authentication provider). If you sign in with Google, we receive your email address and basic Google profile details.
- Playlists and TV-service logins: the playlist links, playlist files and TV-service login details (server address, username and password) you connect, plus the channel list they contain: channel names, groups, logos and stream links. Stream links from many TV services contain your login details.
- Your settings and edits: channel order, names, groups, matches and other changes you make.
- Support messages: anything you send us through the support form, in-app messages or email.
- Referral code: if you sign up through a referral link, the code in that link.
Information collected when you use the service
- Sign-in and activity records:when you sign in or run a playlist import, we record the time, your IP address, an approximate country and your browser’s user agent.
- Player connections: when a TV app fetches your guide or playlist, or signs in with the login we give you, we record the time, the type of app (from its user agent), an approximate country, and for app logins the IP address. Failed app logins are recorded with the username tried, IP address and user agent, to stop abuse.
- Support form context: the support form also sends the page you were on, your IP address, browser user agent, screen size and language, so we can reproduce problems.
- Error reports: if something breaks, technical details about the error are sent to our error-monitoring provider.
- Website analytics: page views, counted without cookies.
Payment information
Payments are handled by Stripe on Stripe’s own checkout page. We never see or store your full card number. Stripe shares with us your billing name, email, billing address, card brand, the last four digits and expiry date of your card, and your invoices and payment history.
3. How we use it
- To run the service: match your channels to guide data, build your guide and playlist, and serve them to your TV apps.
- To keep your account secure and stop abuse, such as repeated failed logins.
- To bill you and manage your subscription.
- To send service emails: account, trial, billing and security messages.
- To send occasional product emails about EPGMaster. You can unsubscribe at any time (see section 8).
- To answer support requests and fix problems.
- With your consent only, to measure which of our ads led to a sign-up (see section 7).
We do not sell your personal information.
4. Who we share it with
We share personal information only with companies that help us run the service (“service providers”), and only what each one needs:
- Supabase: database, sign-in and file storage.
- Vercel: website hosting and cookieless page-view analytics.
- Railway: background servers that import playlists and build guides.
- Cloudflare: network security, bot protection on sign-up and sign-in forms, and content delivery.
- Stripe: payments and billing.
- Resend: sending email.
- Sentry: error monitoring.
- AI providers: to match channels, we send channel names, group names and country hints to an AI model provider (Anthropic). We never send your playlist links, logins or email address for matching. Our support team also uses AI tools that may process your account details (such as your email, plan and account activity) to help answer and prioritise support.
- Proxy provider: if a residential proxy is turned on for a playlist (by you, or by us when a TV service blocks our servers), requests to your TV service, including its login details, pass through our proxy provider (Webshare).
- Movie and series artwork: we look up titles in The Movie Database (TMDB). Only titles are sent, never personal information.
- Internal notifications:the founder receives alerts (by email and through the Telegram messaging app) about sign-ups, payments and support messages. These alerts include the account’s email address.
- Google and Meta: only if you accept ad measurement (see section 7).
Your TV apps play video directly from your TV service, not through us. Your TV service therefore sees your app’s connection, as it would without EPGMaster.
We may also disclose information if the law requires it, to protect our rights or users’ safety, or as part of a sale or merger of the business (the buyer would be bound by this policy).
5. Where your data is stored
Our service providers store and process data in Canada, the United States and other countries. Those countries may have different privacy laws, and authorities there may be able to access the data under their laws.
6. How we protect it
- All traffic to our website and apps uses encrypted connections (HTTPS).
- Our database is encrypted at rest by our hosting provider.
- TV-service passwords you enter in the login form are additionally encrypted in our database. Playlist links and stream links are stored as your TV service provides them, and those links often contain your login details.
- Passwords for the logins we create for your TV apps are stored as secure hashes.
- Guide and playlist links we give you contain no TV-service login details.
- Access to production data is limited to the people who run EPGMaster.
No system is perfectly secure. If a breach affects you, we will tell you as the law requires.
7. Cookies and ad measurement
- Necessary cookies: keep you signed in. The service does not work without them.
- Ad measurement (only if you choose “Allow”): we load the Google Ads and Meta tags and set cookies that record which ad or campaign brought you to us. We may also send Google a record of sign-ups and first payments linked to that ad click, so we can tell which ads work. We tell Google not to use this data for ad personalisation. Our own measurement cookie lasts 90 days. You can withdraw your choice at any time; the ad cookies are then removed. (also in the site footer and, when signed in, your account menu).
- Browser storage: we save small preferences in your browser, such as your ad-measurement choice and dismissed banners.
8. Emails
We send service emails you need to use your account, such as sign-in links, trial and billing notices. We also send occasional product and win-back emails. Win-back emails include an unsubscribe link, and you can ask us to stop any non-essential email at any time by writing to [email protected].
9. How long we keep it
- Account, playlist and settings data: while your account is open.
- Sign-in and activity records and TV-app connection summaries: 90 days.
- Ad-measurement records: 90 days.
- Billing records: kept after you close your account, because tax and accounting laws require it.
- Support messages and security records of failed app logins: kept so we can handle disputes and abuse. You can ask us to delete support messages.
10. Deleting your account
You can delete your account yourself under Account → Delete my account. This cancels your subscription and deletes your account, playlists, TV-service logins, the logins we created for your apps, and your activity records. Billing records, support messages and security logs are kept as described in section 9. Deleted data may remain in backups for a limited time before it is overwritten.
11. Your rights
Depending on where you live, you can ask us to give you a copy of your personal information, correct it, delete it, or stop using it for a purpose you consented to. Write to [email protected]from your account’s email address. We will answer within 30 days.
If you are unhappy with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or to the data protection authority where you live.
12. Children
EPGMaster is not meant for children. We do not knowingly collect personal information from anyone under 16. If you think a child has given us information, contact us and we will delete it.
13. Changes to this policy
We will update this page when our practices change and change the date at the top. If a change is significant, we will tell account holders by email or in the app.
14. Contact
Privacy questions and requests: [email protected]. See also our Terms of Service.