Privacy Policy
What personal data we collect, why, how long we keep it and your rights under the GDPR.
Last updated: 1 October 2026
Vidblee is a service of StreamWithQ, a division of Qbrains, operated by Qbrains β Aslanidis Iraklis, VAT EL116718017, GEMI 042670206000, Parmenidou 4, Ano Toumba, 543 52 Thessaloniki, Greece (βweβ, βusβ). Contact: contact@qbrains.gr Β· +30 2312 315318. We are the data controller for the data described below.
1. Data we collect
- Cart and checkout: name, email, mobile number, company, country, chosen plan and add-ons β saved as you type, before payment.
- Account and billing: login details, billing address, VAT number, invoices. Card data is handled by Stripe; we never see full card numbers.
- Usage and security: logins, IP address, device, actions in the panel, stream logs.
- Marketing: your email/SMS consent choices and interactions with our messages.
- Viewer data of our customers: when you stream to your audience, we process your viewersβ data on your behalf as a processor (see the DPA).
2. Why and on what legal basis
- To take the steps you ask for before a contract and to provide the Services β Art. 6(1)(b) GDPR. This includes saving your cart details so you can finish your order.
- To send a short reminder if you leave an order unfinished, to prevent fraud and to secure our systems β our legitimate interest, Art. 6(1)(f). You can object anytime via the link in each message.
- Marketing emails and SMS/Viber β only with your consent, Art. 6(1)(a) and Art. 11 of Greek Law 3471/2006. You can withdraw consent at any time.
- Invoicing and tax records β legal obligation, Art. 6(1)(c).
- Analytics and advertising cookies β only with consent; see the Cookie Policy.
3. Who receives data
Processors under contract: Cloudflare (hosting, storage, delivery), Hetzner (EU servers), Stripe (payments), Bunny.net (backup delivery), Resend (email), Google and Meta (analytics/ads, only with consent), our SMS provider. Transfers outside the EEA rely on adequacy decisions (incl. the EU-US Data Privacy Framework) or Standard Contractual Clauses.
4. Retention
Unfinished carts: 12 months, then deleted or anonymised. Account data: while you are a customer and 2 years after. Invoices: 5 years (tax law). Marketing consents: until withdrawn plus proof of consent for 3 years. Security logs: 90 days.
5. Your rights
Access, rectification, erasure, restriction, portability, objection (including to direct marketing at any time) and withdrawal of consent. Write to contact@qbrains.gr. You can complain to the Hellenic Data Protection Authority (www.dpa.gr). We do not make decisions with legal effects based solely on automated processing.