Privacy Policy

1. Information We Collect

We primarily process information that you authorize us to access via Twitch and information related to your use of the Service. This includes:

• Twitch account information: basic identifiers and tokens provided by Twitch when you connect your account.
• Public chat data: messages and chatter presence data from your Twitch channel that are publicly visible in chat and via the "Get Chatters" API.
• Stream metadata: information about your streams, such as identifiers, start and end time, and engagement statistics needed for analytics and recaps.
• Usage data: information about how you interact with the Service, such as page views, feature usage, error logs, and performance metrics.
• Billing and subscription data (if you subscribe to a paid plan): limited billing and subscription status information from our payment processor (for example, Stripe). We do not store full payment card numbers.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service.
• To compute real-time analytics, post-stream recaps, loyalty/retention metrics, and overlay events based on public chat and chatter data.
• To create and display recaps and engagement insights for your past streams.
• To understand how the Service is used and to improve features, performance, and usability.
• To provide customer support and respond to your inquiries and requests.
• To manage billing, subscriptions, and account status for paid plans.
• To detect, prevent, and address technical issues, abuse, or violations of our Terms & Conditions.
• To comply with legal obligations and enforce our rights and agreements.

3. Data Retention & Aggregation

Our goal is to keep the data needed to power recaps, loyalty features, and high-level analytics while avoiding long-term storage of unnecessary raw chat data.

In general:

• We retain per-stream summaries and metrics (for example, recaps, per-stream KPIs, and chatter aggregates) for as long as they are needed to provide the Service.
• High-volume raw chat event data may only be retained for a limited "hot" window after a stream ends and may then be deleted or archived once we have generated the recap and summary data.
• Ephemeral live data (for example, Redis-based leaderboards, live counters, and overlay queues) is short-lived and naturally expires after a relatively short period.

Specific retention periods and aggregation strategies may evolve over time as the Service grows. Where required by law, we will update this policy to reflect material changes.

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under one or more of the following legal bases:

• Contract: To provide the Service and perform our contract with you.
• Legitimate interests: To operate, secure, and improve the Service, and to prevent abuse or fraud, where these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent, such as when you connect your Twitch account or opt in to certain features. You may withdraw consent at any time as described in this policy.
• Legal obligation: Where processing is necessary to comply with applicable laws.

5. How We Share Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers: With trusted third-party vendors who help us operate the Service (for example, hosting providers, database providers, analytics tools, and payment processors such as Stripe), and who are contractually obligated to handle data in accordance with this policy and applicable law.
• Legal and safety: Where required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our users or others.
• Business transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our business, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections.
• With your consent: When you direct us to share information or otherwise consent to a specific sharing arrangement.

6. International Transfers

The Service may be operated from and data may be processed in locations outside of your country of residence. Where required by law, we implement appropriate safeguards to protect personal data transferred across borders, such as standard contractual clauses or equivalent mechanisms.

7. Your Rights & Choices

Depending on your location, you may have certain rights regarding your personal data, including:

• Accessing the personal data we hold about you.
• Requesting correction of inaccurate or incomplete data.
• Requesting deletion of your personal data, subject to legal limits.
• Objecting to or requesting restriction of certain processing activities.
• Exporting your data in a portable format where technically feasible.
• Withdrawing consent where we rely on consent as the legal basis for processing.

To exercise these rights, please contact us at kim@kimtech.dev. We may ask you to verify your identity before responding to your request.

8. Data Security

We implement reasonable technical and organizational measures designed to protect your information, such as secure storage of credentials where supported by our infrastructure providers, role-based access controls, and short-lived overlay tokens. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe that a child has provided us with personal information in violation of this policy, please contact us at kim@kimtech.dev, and we will take appropriate steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page and, where required, provide additional notice (for example, via email or in-app notification). Your continued use of the Service after the updated policy becomes effective constitutes your acceptance of the changes.