Privacy Policy
The short version
- We collect what we need to run your streams: your account details, the videos you upload, your stream settings and how the service is used.
- We don't sell your data, show ads or use tracking or analytics cookies.
- Card details go to our payment provider, not to us.
- Our servers and storage are in the European Union.
- Email us to see, correct, export or delete your data.
1. Who we are
This policy explains how Superlivestream ("we", "us") handles personal data when you visit superlivestream.com or use the app at app.superlivestream.com. We are the controller of the personal data described here. Contact: [email protected].
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Name, email address, password (stored only as a secure hash), time zone, email verification and sign-in codes, and when you accepted our Terms and this policy | To create your account, sign you in, contact you about it and keep a record of your agreement |
| Email preferences | Whether you asked for product news and offers, and when | To send marketing emails only to people who asked for them |
| Workspace | Workspace name, members, their roles and invitations | To let teams share a workspace |
| Your content | Videos you upload, their names and technical details (length, resolution, frame rate), and the stream-ready copies we make | To prepare and stream your videos |
| Stream settings | Destination platform, server URL, stream key (stored encrypted), playlist, schedule, quality | To send your streams where you choose |
| Usage and logs | When streams start, stop and restart and why, time live, data sent, storage used, error logs | To run and fix the service, show you your history and enforce plan limits |
| Sign-in sessions | IP address, browser user agent, session times | To keep you signed in and protect your account |
| Billing | Plan, billing period, subscription status, payment provider customer and subscription IDs, invoices' amounts | To give you the plan you paid for |
| Messages | Emails you send us | To answer you |
We do not receive or store your full card details. Our payment provider collects them at checkout.
3. Legal basis
Where data protection law such as the GDPR applies, we use your data because it is necessary to provide the Service under our contract with you (account, content, streams, billing), for our legitimate interests in keeping the Service secure, working and improving it (logs, sessions, usage), and to meet legal obligations (for example, tax records kept by our payment provider). Where we ask for consent, you can withdraw it at any time.
We send product news and offers only if you ask for them, at sign-up or later in the app's settings, and you can turn them off there at any time. Emails about your account, billing, your streams and changes to the Service, its prices or these policies are part of providing the Service, so you get them either way.
4. Cookies
The app sets one cookie that keeps you signed in. It lasts up to 30 days and is needed for the app to work. We do not use advertising, analytics or tracking cookies, on the website or in the app.
Both the website and the app load fonts from Google Fonts, which means your browser connects to Google and shares your IP address with it.
5. Who we share data with
We do not sell personal data or share it for advertising. We use these types of service provider to run Superlivestream, and they process data only on our instructions:
| Provider | What they do | Where |
|---|---|---|
| Hosting provider | Servers that run the app, database and streams | European Union |
| Storage and network provider | Storage for videos and backups, website and app hosting, network protection | Storage in the EU; network worldwide |
| Dodo Payments | Checkout, payments, invoices and taxes, as merchant of record | See Dodo Payments' privacy policy |
| Email provider | Sending account emails (codes, invitations, billing notices) and, if you asked for them, product news and offers | May be outside the EU |
| Google Fonts | Serving fonts on the website and in the app | Worldwide |
When you start a stream, we send your video and stream key to the platform you chose, such as YouTube, Facebook or Twitch. What happens there is covered by that platform's own privacy policy.
We may also share data if the law requires it, to protect the rights and safety of users or the Service, or as part of a sale or merger of the Service, in which case this policy would continue to apply.
6. International transfers
Our servers and storage are in the European Union. Some providers, such as our hosting, payment and email providers, may process data in other countries. Where that happens, we rely on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses.
7. How long we keep data
- Account data: while your account is open. When you ask us to delete it, we delete it within 30 days.
- Videos: while your plan is active. When a trial or plan ends, they are kept for 14 days and then deleted.
- Backups: database backups are kept for up to 14 days, so deleted data disappears from them within that time.
- Stream history and usage: while your account exists. The app shows you the period your plan includes.
- Billing records: as long as tax and accounting law requires. Our payment provider keeps its own records as merchant of record.
8. Security
All connections to the website and app are encrypted. Stream keys are encrypted at rest, passwords are stored only as hashes, our servers are not directly reachable from the internet, and each part of the system has only the access it needs. No system is perfectly secure, so if we learn of a breach that affects your data, we will tell you and the relevant authorities as the law requires.
9. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, restrict or object to how we use it, and withdraw consent. To use any of these rights, email [email protected] from the address on your account. We will reply within 30 days.
You can also complain to your local data protection authority.
10. Children
The Service is not meant for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We may update this policy. If a change is significant, we will email account owners before it takes effect. The date at the top shows when it last changed.
12. Contact
Questions or requests about your data: [email protected]. See also our Terms of Service.