Privacy Policy

1. Who We Are

Stream LLC ("the Company," "we," "us," or "our") (King Abdullah Road, Al Olaya, Building 12, Riyadh 11564, Saudi Arabia) operates the Stream platform at gostreampay.com. Stream provides automated billing, subscription management, accounts-receivable tracking, and collections and dunning workflows for schools, sports and social clubs, and technology companies based in the Kingdom of Saudi Arabia. Our platform processes invoice data, payment status records, and customer contact information on behalf of the organisations that use our service.

Because the personal data we handle belongs primarily to the billee contacts of our business customers (students, club members, subscription holders), we take our obligations seriously. Saudi Arabia's Personal Data Protection Law (PDPL, Royal Decree No. M/19, 1443H) governs how we collect, use, retain, and protect personal data in connection with the Stream service. Our data handling practices are designed to support compliance with PDPL requirements. Contact us at [email protected] for any privacy enquiry.

2. Information We Collect

The data we process falls into three categories depending on your relationship with Stream:

Platform users (finance staff and administrators at subscriber organisations): When you create a Stream account or operate the platform, we collect your name, work email address, job title, and phone number. We also collect login credentials (password hash), IP address, device information, and activity logs produced during normal platform use.

Billee contact data (submitted by subscriber organisations): When your organisation uploads or enters invoice recipients into Stream, the platform processes the contact names, email addresses, phone numbers, billing addresses, and payment status records that your organisation provides. This data is submitted by the organisation and processed by Stream solely to send invoices, track payment status, run dunning sequences, and produce reconciliation reports. Stream does not use billee contact data for any purpose beyond providing the agreed service to the submitting organisation.

Website visitors: When you visit gostreampay.com, we collect standard technical and usage data automatically, including browser type, referring URL, pages visited, and session duration. This data is collected in aggregated or anonymised form via self-hosted analytics and is not linked to individual identities.

3. How We Use Information

We use the personal data we collect for the following purposes:

• To provide, operate, and maintain the Stream billing and collections platform;
• To send invoices, payment reminders, and dunning notices on behalf of subscriber organisations, in accordance with the rules each organisation configures;
• To track payment status and produce accounts-receivable reconciliation reports for subscriber organisations;
• To authenticate and manage platform user accounts;
• To respond to support requests and communications from platform users;
• To improve the reliability and features of the platform using aggregated, non-identifying usage data;
• To meet our legal obligations under PDPL and applicable Saudi regulations, including any lawful requests from competent authorities.

We do not sell personal information. We do not use billee contact data submitted by organisations to build marketing profiles, train models, or for any purpose outside the contracted service delivery.

4. Data Residency and Sharing

All customer data processed by Stream, including billee contact records and payment information, is stored and processed in KSA-region infrastructure. Data does not leave the Kingdom except where a subscriber organisation explicitly requests an export or integration that involves a cross-border transfer, in which case we inform the organisation prior to any transfer.

We share personal information only in the following circumstances:

• Service providers: We engage trusted technical service providers (hosting, email delivery, support tooling) who act as processors on our behalf under written agreements limiting their use of data to the agreed service purpose.
• Legal requirements: We disclose data when required to do so by Saudi law or a lawful order from a competent authority.
• Business transfer: If the Company is acquired or merges with another entity, personal data may be transferred as part of that transaction, subject to equivalent protections.

5. Retention and Security

We retain platform user account data for as long as the account remains active and for a period following termination sufficient to resolve any outstanding matters, typically twelve months. Billee contact and invoice data submitted by subscriber organisations is retained for the duration of the subscription and deleted or returned to the organisation within ninety days of service termination, unless retention is required by applicable law.

Stream applies administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (TLS), encrypted storage for sensitive fields, role-based access controls, and audit logging of all platform actions. Our infrastructure design is guided by PDPL data-security requirements and PCI DSS controls relevant to billing systems.

6. Your Rights

Saudi Arabia's PDPL grants data subjects rights with respect to their personal data. Subject to the conditions and exceptions in applicable law, you may have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of personal data where retention is no longer justified;
• Withdraw consent where processing is based on consent;
• Object to certain processing or request restriction of use.

If you are a billee contact whose data was submitted by a Stream subscriber organisation, please contact that organisation directly as the party responsible for the original data collection. We will cooperate with organisations in responding to requests about data we process on their behalf.

To exercise your rights directly with the Company, email [email protected]. We respond within thirty days. Where a request cannot be fulfilled, we will explain the reason.

7. Cookies

See our Cookie Policy for details on how we use cookies and similar technologies on gostreampay.com.

8. Changes and Contact

When we make material changes to this policy, we will update the "Last updated" date above and notify active platform users by email or in-platform notice. Continued use of the Service after the effective date of a change constitutes acceptance of the revised policy.

Stream LLC
King Abdullah Road, Al Olaya, Building 12, Riyadh 11564, Saudi Arabia
Email: [email protected]
Phone: +966 11 464 7700