Last Updated: June 2026
Enxora Pvt Ltd — Enxora Stream
Enxora Pvt Ltd ("Enxora," "we," "us," or "our"), a company registered in Sri Lanka, provides Enxora Stream, an in-browser video protection layer and security player infrastructure that enables businesses, creators, and educational institutions ("Clients," "Publishers," or "you") to securely display video content hosted on their own servers or third-party platforms while safeguarding their intellectual property through technologies such as dynamic watermarking, domain restriction, and the Proctor-AI integrity suite. Enxora provides the security and identity-verification overlay; we do not provide video hosting, stream delivery, or cloud storage services.
This Privacy Policy ("Policy") explains how Enxora collects, uses, stores, discloses, and protects information in connection with the Enxora Stream website, client dashboards, application programming interfaces (APIs), and the embedded Enxora Stream Player (collectively, the "Service"). It is written for two audiences: (a) Clients who register for and configure the Service, and (b) Viewers who access protected content through the Enxora Stream Player on a Client's website or platform. By accessing or using the Service, you acknowledge that you have read and understood this Policy.
2.1. Personal Data: Information relating to an identified or identifiable natural person.
2.2. Client / Publisher: The organization subscribed to the Service.
2.3. Viewer / End-User: Individuals accessing Content through the Enxora Player.
2.4. Authorized Domain: Whitelisted domains registered by the Client.
2.5. Dynamic Watermark: Real-time on-screen deterrent overlay.
2.6. Proctor-AI: Browser-based activity and integrity monitoring suite.
2.7. Face Verification: Computer-vision based presence and multiple viewer detection.
This Policy applies to information processed through the Service, including the marketing website (stream.enxora.com), client dashboards, and the embedded player. This Policy does not apply to a Client's own website, platform, learning management system, or any other property. Each Client maintains its own separate privacy policy governing its relationship with its Viewers.
Enxora is a technology provider. Clients act as the Data Controllers with respect to their Viewers' Personal Data. Clients determine the purposes and means by which their Viewers' Personal Data is collected and used. Where Enxora processes any information on a Client's behalf, Enxora acts as a Data Processor or Service Provider, processing such information solely on the Client's instructions.
The dynamic watermarking and Proctor-AI features are designed to operate using information that is stored, managed, and controlled by the Client. This may include:
5.1. Viewer Identity: Names and email addresses supplied by the Client database.
5.2. Technical Identifiers: System-assigned User IDs and IP addresses.
5.3. Session Metadata: Geolocation data and device/browser fingerprints.
5.4. Security Telemetry: Real-time interaction patterns monitored locally.
This information is retrieved in real-time from the Client's own database, displayed transiently within the watermark overlay, and is not retained by Enxora beyond what is technically necessary to render that overlay during the active viewing session.
Enxora does not operate as a central repository of Viewer Personal Data. We do not host or maintain databases of Viewer names or identity information. All Viewer Personal Data used for watermarking resides on the Publisher's own infrastructure. The Publisher is solely responsible for compliance with any applicable data residency or sovereignty requirements relevant to the Client's business.
Dynamic Watermarking is a content-protection feature designed to deter unauthorized screen recording. The watermark is rendered client-side, within the Viewer's browser. The identity information used originates from, and remains under the control of, the Client. Enxora does not independently collect, verify, or repurpose this information for any other purpose.
Proctor-AI integrity checks — including human-activity detection and Face Verification — are processed entirely within the Viewer's browser, using on-device computation. Enxora does not receive, store, or have access to live video feeds, biometric facial geometry, or any other raw sensor data. All analysis occurs locally on the Viewer's device. Security event metadata is transmitted directly to the relevant Client's management dashboard.
Enxora uses cookies that are strictly necessary for the operation of the Service, including session maintenance, authenticated sessions, security handshakes, and player performance settings. These cookies do not track Viewers or Clients across unrelated third-party websites.
Enxora uses information for strictly operational purposes, including:
10.1. Authentication: Securing Client dashboard and API access.
10.2. Integrity Enforcement: Restricting playback to Authorized Domains.
10.3. Subscription Management: Handling billing and usage allowances.
10.4. Service Growth: Generating aggregate, non-identifying analytics to improve platform performance and develop new security features.
10.5. Conflict Resolution: Investigating potential Terms of Service violations.
Enxora does not sell Personal Data and does not use Viewer data for marketing or advertising purposes.
To the extent applicable data protection laws apply, Enxora relies on:
11.1. Performance of contract: Specifically governed by the Terms and Conditions.
11.2. Legitimate interests: Maintaining platform security and fraud prevention.
11.3. Legal compliance: Responding to lawful regulatory or court orders.
11.4. Consent: Explicitly obtained for webcam-based security features.
We do not sell or rent Personal Data. We may share information with:
12.1. Service Providers: Cloud hosting and payment processors under NDA.
12.2. Legal Authorities: To comply with valid legal requests or subpoenas.
12.3. Platform Successors: In the event of a merger or acquisition.
Our infrastructure may be located in other jurisdictions. We take steps to ensure international transfers are conducted in accordance with applicable laws, including the use of appropriate contractual safeguards such as standard contractual clauses.
14.1. Account Data: Retained for the subscription duration and legal periods.
14.2. Metadata Logs: Retained for a maximum of twelve (12) months.
14.3. Session Data: Purged immediately upon viewing session termination.
We implement technical measures including industry-standard TLS encryption in transit and encryption of billing info at rest. Secure handshake protocols are used to verify Authorized Domains and protect the player from unauthorized embedding.
Clients may request access or correction of their account info at any time. Viewers seeking to exercise rights should direct requests to the relevant Client (Publisher) as they act as the Data Controller managing the primary viewer records and databases.
As a condition of using the Service, each Client agrees that it will:
17.1. Governance: Clients must maintain their own publicly accessible privacy policy.
17.2. Consent: Obtain all necessary consents required for webcam-based monitoring.
17.3. Lawfulness: Ensure all Viewer Data has been collected via lawful means.
17.4. Usage: Use Disruption Logs solely for authorized integrity and security checks.
17.5. Security: Maintain the integrity and security of its own User databases.
Enxora does not knowingly collect data from children. Educational institutions are solely responsible for compliance with children's privacy laws (e.g., COPPA) and obtaining necessary parental consent prior to enabling proctoring features for minor viewers.
The Service may integrate with third-party providers, including:
19.1. Communications: Integration with tools like WhatsApp for support.
19.2. Payments: Use of financial gateways for secure transaction handling.
19.3. Video Sources: Reliance on external platforms that host the protected content.
Such services are governed by their own policies; Enxora is not responsible for third-party privacy practices.
We may update this Policy occasionally. The "Last Updated" date indicates the latest revision. Material changes will be communicated to Clients via the dashboard or email. Continued use constituting acceptance of the revised Policy.
If you have any questions or requests regarding this Privacy Policy, please reach out via:
21.1. Inquiries: Contact us via email at contact@enxora.com.
21.2. Specificity: Viewer concerns must be directed to the relevant Publisher.