Privacy Policy

1. Controller and Scope

Straimo operates this service and processes the data needed to offer its tools to streamers, buyers, tippers, and viewers interacting with their widgets. You can use the email at the end of this Policy to ask about your data.

2. Account and Integration Information

We receive the account and authorization data needed for the integrations you connect. We also store your settings, referral codes, orb balances and transactions, and API keys you choose to provide for certain features. We do not receive your Twitch, Spotify, or Google password through OAuth authorization.

3. Viewer Data and Content

When you interact with a channel using Straimo, we may process Twitch usernames, identifiers, chat messages, answers, votes, redemptions, and events such as subscriptions and bits. The precise data depends on the tools enabled by the streamer. Some of it may appear in overlays, streams, or public pages according to settings chosen by the creator.

We also process images, audio, video, text, and other resources users upload or configure. Not all events are retained: some are used in real time, while others become part of a history for the feature.

4. Purchases, Tips, and Referrals

For purchases and tips, we receive transaction information from PayPal, which may include payment identifiers, payer name, email and identifier, amount, recipient, and payment status. We store orders, access rights, applied referral codes, and orb transactions to fulfill purchases, provide support, manage refunds, and prevent fraud.

PayPal processes payment details. Straimo does not store full card numbers or PayPal account credentials.

5. How We Use Data

We use data to authenticate users, run widgets and chatbots, generate speech when the creator enables that feature, display requested content, carry out authorized integrations, deliver products and tips, manage orbs and referrals, provide support, prevent abuse, and meet legal obligations.

6. Twitch, Spotify, and Integrations

When you connect Twitch, the OAuth permissions you accept allow access to channel information and, depending on enabled tools, allow us to read events and perform authorized actions such as sending messages or managing channel features. Spotify is optional and used for connected music features. You can review and revoke these permissions in your account with each provider. Revocation may prevent related features from working.

7. Google Account and YouTube Data

Connecting YouTube is optional and requires your authorization through Google. Straimo requests openid, email, profile, and YouTube read-only access. Google may provide your basic account profile and email under those permissions; the current connection flow uses your Google account identifier to link the correct account to your Straimo profile. We store that identifier, your YouTube channel identifier, the granted scopes, access and refresh tokens, and token expiration so the integration can remain connected without asking you to authorize each time. We do not receive your Google password.

With YouTube read-only access, Straimo retrieves your channel information, such as its name, handle, and image, and identifies an active live broadcast and its chat. While the integration is enabled, we process live-chat messages and related events, which may include participant names, identifiers, profile images, message text, Super Chat or Super Sticker details, memberships, gifts, and polls, to show the chat and configured alerts in your dashboard and stream overlays. This access does not permit Straimo to post messages, edit your channel, or manage your videos.

YouTube information is used to provide these user-facing streaming features, not for targeted advertising, sale to data brokers, credit decisions, or training generalized AI models. Live-chat content and events may be visible to viewers when you display an overlay or broadcast; service providers needed to host and operate Straimo may process the data as described below. If you enable a feature that converts message text to speech, the text may be sent to the applicable voice provider to generate that output.

Google account identifiers, channel identifiers, authorization tokens, and your YouTube feature settings are retained while the connection or account is active or as otherwise required for service operation and legal obligations. Live events may be processed in real time rather than retained as a permanent history; any feature history follows the retention rules below. You can disconnect the Google account in your Straimo account settings, which removes the stored connection and stops future access, and you can revoke access in your Google Account permissions. If token revocation cannot be completed immediately, revoking access from Google remains available. You may also request deletion using the privacy contact below.

8. Providers and Visibility

We share necessary information with providers involved in each feature: Twitch and Spotify for integrations, PayPal for payments, Vercel and Railway for hosting, Neon for the database, Cloudinary for files, DeepL for translation, OpenAI for AI chat, ElevenLabs for voice generation if you configure your API key, and Google Text-to-Speech as a voice fallback. Providers may process data under their own terms and policies.

Content the creator chooses to show in an overlay, profile, or broadcast is visible to their audience. We do not sell personal data. Providers may process information in countries other than yours.

9. Security

We use access controls and other security measures to protect accounts and data. Measures depend on the type of information and the provider processing it; no system can guarantee absolute security. Data needed to display a feature may be sent to the browser or overlay using it.

10. Cookies and Technical Data

We use cookies and technical data needed to sign in, maintain your session, and run the site and its services. Our hosting provider may log connection information needed for security and operation.

11. Retention

We keep account data and settings while your account is active or needed to provide the service. Purchase, tip, and orb transaction records may remain after account closure when needed for legal obligations, accounting, fraud prevention, or dispute resolution. Widget histories and uploaded files are kept according to the feature and applicable deletion requests; events processed only in real time may not be stored.

When there is no longer a reason to keep personal data, we delete or de-identify it, taking account of backups and legally required retention periods.

12. Your Rights

You can request access, correction, or deletion of your data, as well as other rights available under applicable law, using the email below. We may need to verify your identity and retain certain legally required records even if you request account deletion.

13. Changes to this Policy

We display the updated date on this page. If we make significant changes, we will endeavor to notify you through available channels before they take effect.

14. Privacy Contact

For requests or questions about personal data processing, contact us by email.

Email: cafaruoc2000@gmail.com