Your privacy

Privacy Policy

This Policy explains what information Lata Casa handles, why we use it, who receives it, and the choices available to you.

Effective: September 11, 2026

Lata Casa is operated by Mosaic Media Company Limited in Vietnam. For privacy requests, use the Contact option in the site footer. We will verify requests before disclosing, correcting, exporting, or deleting account information.

1. Scope and roles

This Policy applies to lata.casa, its web player, account pages, support interactions, and VIP subscriptions. Lata Casa determines why and how personal information is processed for these services. Google and PayPal independently process information under their own privacy policies when you use their services.

2. Information we collect

Account informationName, email address, Google account identifier, profile image, internal user ID, account status, and authentication records received through Google sign-in.

Subscription informationPayPal customer and subscription identifiers, selected plan, payment status, renewal and cancellation events, transaction references, currency, and timestamps. We do not receive or store your complete card number or PayPal password.

Viewing and activity informationSeries and episodes requested, playback progress, access entitlements, searches, navigation, favorites or similar interactions when offered, and technical error events.

Device and network informationIP address, browser and device type, operating system, language, approximate region derived from IP, referring page, cookie identifiers, request logs, and security signals.

CommunicationsMessages, attachments, and contact details you provide when requesting support, exercising rights, reporting content, or disputing a charge.

3. How we use information

Authenticate users and maintain secure sessions.
Deliver video, remember playback state, and determine access to locked episodes.
Create, administer, verify, renew, and cancel VIP subscriptions.
Provide support, respond to rights requests, and resolve payment disputes.
Protect users, prevent fraud, enforce our Terms, diagnose errors, and maintain service reliability.
Measure service performance and understand aggregate use.
Comply with tax, accounting, payment, consumer-protection, and lawful disclosure obligations.
Send essential account or service notices. Promotional messages are sent only where permitted and can be opted out of.

4. Legal bases

Where laws such as the GDPR or UK GDPR apply, we rely on: performance of our contract to provide accounts, streaming, and subscriptions; legitimate interests in security, fraud prevention, support, analytics, and service improvement; consent where required for optional cookies or marketing; and legal obligations for records, disputes, and valid government requests. You may withdraw consent at any time without affecting earlier lawful processing.

5. Cookies and similar technologies

We use essential cookies to keep you signed in, protect the service, remember sound or playback choices, and maintain subscription access. We may use measurement technologies to understand performance. Where applicable law requires consent for non-essential cookies, they should remain disabled until consent is provided. Browser controls can remove cookies, but blocking essential cookies may prevent sign-in or playback.

6. When information is shared

Google Firebase: authentication, token validation, and related security services.
PayPal: checkout, recurring billing, cancellation, fraud prevention, and payment records.
Bunny and media infrastructure: video delivery and network performance.
Hosting, database, security, analytics, and support providers: only as needed to operate the service under appropriate contractual safeguards.
Authorities or transaction parties: when legally required, to protect rights and safety, or as part of a merger, financing, acquisition, or sale subject to applicable safeguards.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are defined by California law unless we first provide required notice and choice.

7. International transfers

Our providers and systems may process information in countries other than yours, including Vietnam and locations used by Google, PayPal, Bunny, and infrastructure providers. Where required, we use recognized safeguards such as adequacy decisions, contractual clauses, or another lawful transfer mechanism.

8. Retention

We retain account and viewing information while your account is active and for a reasonable period afterward. Authentication and security logs are retained only as needed for security and troubleshooting. Subscription and transaction records may be kept longer to satisfy accounting, tax, fraud, chargeback, and legal obligations. Support and legal records remain for the period needed to resolve the matter and enforce rights. We delete or de-identify information when it is no longer needed, subject to backup cycles and legal holds.

9. Your privacy rights

Depending on where you live, you may request access, confirmation, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of certain sale, sharing, targeted advertising, or profiling; and appeal a denied request. You may also complain to your local data-protection authority.

Submit a request through Contact and identify the request type and account email. We may ask for information necessary to verify identity and authority. Authorized agents must provide legally sufficient permission. We will not discriminate against you for exercising privacy rights.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including restricted access, session controls, HTTPS in production, and payment processing through PayPal. No online system is completely secure. Protect your Google account and notify us if you suspect misuse.

11. Children

Lata Casa is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe a child provided information contrary to this rule, contact us so we can investigate and delete it where required.

12. Automated decisions and sensitive information

We do not use solely automated decisions that produce legal or similarly significant effects for ordinary viewers. Please do not submit government identifiers, financial credentials, health information, or other sensitive information through support unless specifically requested and necessary.

13. Changes and contact

We may update this Policy as the service, providers, or law changes. We will post the revised version and update the effective date; material changes receive additional notice when required. Send privacy questions or rights requests using the Contact option in the site footer. Include “Privacy Request” and the email connected to your account.