Privacy Policy

Who we are

Streamups Software LTD is the controller of your personal data.

• Company: Streamups Software LTD
• Registered address: 82A James Carter Road, Mildenhall, IP28 7DE
• Email: marketing@streamups.com
• Phone: 01284 645967
• Website: https://streamups.com
• Company number: 16941919

What we collect

We may collect the following categories of personal data:

• Account data: name, email, username, password hash, settings.
• Payment data: billing address, payment identifiers, Stripe customer IDs (we do not store full card details).
• Usage data: log data, timestamps, feature usage, diagnostics.
• Device and network data: IP address, user agent, device identifiers.
• Content and configuration: overlay settings, chat configurations, integrations, tokens or keys you provide.
• AI inputs/outputs: where AI features are enabled.

How we use data and lawful bases

We use personal data for the following purposes and lawful bases:

• Provide and operate the Services (contract).
• Process payments and manage subscriptions (contract/legal obligation).
• Secure and improve the Services and prevent abuse (legitimate interests).
• Analytics and performance measurement (consent for non-essential cookies; otherwise legitimate interests for cookieless analytics).
• Legal compliance and responding to lawful requests (legal obligation).
• Communications and support (contract/legitimate interests).
• Marketing emails (consent where required; you can opt out).

Third-Party Platform Integrations

StreamUps integrates with streaming platforms to provide chat functionality. When you connect a platform, you authorize us to access your account on that platform.

Google Integration (YouTube)

When you connect your Google account, you authorize StreamUps, via the YouTube API Services, to access YouTube Live Chat on your behalf. We:

StreamUps' use of information received from Google APIs adheres to the Google Privacy Policy.

• Retrieve live chat messages from your YouTube broadcasts
• Send chat messages to your YouTube live chat only when you initiate this action from your StreamUps dashboard

Google User Data Disclosure

Live chat messages retrieved from YouTube are transmitted to your streaming overlay for display to your viewers. This data is only accessible to viewers of your configured overlay. We do not sell, share, or disclose your Google user data to any other third parties.

Twitch Integration

When you connect your Twitch account, you authorize StreamUps to access your channel's chat. We:

• Retrieve live chat messages from your Twitch channel
• Send chat messages to your Twitch chat only when you initiate this action from your StreamUps dashboard

Kick Integration

When you connect your Kick account, you authorize StreamUps to access your channel's chat. We:

• Retrieve live chat messages from your Kick channel
• Send chat messages to your Kick chat only when you initiate this action from your StreamUps dashboard

Payment Processing (Stripe)

We use Stripe to process subscription payments. When you subscribe, we provide Stripe with your email address and account name to create your billing account.

Stripe handles all payment card processing directly - we never receive, transmit, or store your card details.

Infrastructure Services

We use third-party services to operate StreamUps. These services process data solely to provide their functionality and do not have independent rights to use your data:

• Real-time messaging infrastructure: Delivers chat messages to your overlay in real-time
• Cloud hosting: Hosts the StreamUps application and database
• Content delivery network: Serves static assets

Data Protection

We protect your data using the following measures:

• Authentication credentials are encrypted at rest
• All data transmission uses secure, encrypted connections (HTTPS/TLS)
• Access to your account requires authentication
• Each user's data is logically isolated from other users

Your Control

• Disconnect any platform integration at any time from your account settings
• Revoke Google access at myaccount.google.com/permissions
• Delete your account to permanently remove all stored data

Overlay Pages

When Overlay Pages load, we collect basic logs such as IP address, user agent, timestamp, and requested URL.

Option A (cookieless): we use server-side, aggregated metrics without non-essential storage/access; lawful basis is legitimate interests.

Option B (cookie-based): we use non-essential cookies or similar technologies only after consent; lawful basis is consent. Non-essential tracking is not used until consent is given where required.

Cookies and tracking

We use strictly necessary cookies for security and functionality. Non-essential analytics or marketing cookies are off by default until consent where required. See the Cookie/Tracking Notice for details.

Sharing and processors

We use vetted providers including: DigitalOcean (hosting and CDN), Google Analytics (analytics, with consent), Stripe and PayPal (payment processing), and AI service providers for chat generation. These providers act as processors and only process data on our instructions.

International transfers

Some providers are outside the UK/EU. We use appropriate safeguards such as standard contractual clauses and transfer risk assessments.

Data retention

We keep data only as long as needed:

• Account data: while your Account is active, plus a reasonable period afterwards.
• Billing records: as required by tax and accounting rules.
• Logs and analytics: typically 30 days to 24 months depending on purpose.
• AI inputs/outputs: limited to what is needed to operate features or for safety/quality.
• Chat messages: automatically deleted after 10 days.
• You can request deletion subject to legal obligations.

Your rights

You can request access, correction, deletion, restriction, objection, and portability. You can withdraw consent at any time. We will respond to your request within one month; complex requests may take up to three months total. You can complain to the UK Information Commissioner's Office. Contact us at marketing@streamups.com.

Security

We use appropriate technical and organisational measures such as access controls, encryption in transit, and monitoring.

Children

The Services are not intended for children under 16. We do not knowingly collect data from children under 16.

Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by email and/or by posting a prominent notice on our website prior to the change becoming effective. We will update the version number, last updated date, and effective date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.