Privacy Policy

This policy explains what we collect, why, and what you can do about it.

What we collect

• Account data: your email address and a salted hash of your password. We never store your password in readable form.
• Channel data: the channels, stream keys and settings you create.
• Delivery logs: IP address, approximate country, user agent, requested URLs, bytes served and timestamps. These are used to deliver the stream, enforce viewer limits and geographic rules, produce your analytics, and investigate abuse.
• Billing data: plan, subscription status and invoices. Card details are handled by our payment providers and never reach our servers.
• Your content: the video and audio you broadcast, plus any recordings you ask us to keep.

What we do not do

We do not sell your personal data. We do not use your content to train models. We do not place advertising trackers in the player.

Legal bases

We process account and billing data to perform our contract with you; delivery logs on the basis of legitimate interests in operating, securing and metering the service; and anything else with your consent or as required by law.

Retention

Account and billing records are kept while your account exists and afterwards as required for tax and legal purposes. Aggregated analytics are retained for capacity planning. Recordings are kept until you delete them or your account closes.

Sharing

We share data only with the processors needed to run the service — payment providers, and infrastructure providers — and where compelled by valid legal process.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.

Cookies

We use a session cookie to keep you logged in. We do not use third-party advertising cookies.

Security

Traffic is served over TLS. Payment credentials entered by operators are encrypted at rest with AES-256-GCM. Passwords are salted and hashed. No system is perfectly secure; we will notify you of a breach affecting your data as required by law.

Operators: this is a starting template, not legal advice. Add your data-controller identity, contact address and any regional disclosures (GDPR, CCPA) before going live. Edit at /app/admin/pages.