Privacy Policy

StreamBot provides tools for livestream creators and their communities, including chat automation, AI chat characters, text-to-speech, alerts, overlays, clips, viewer rewards, and connected-platform features. This Privacy Policy explains how StreamBot ("StreamBot," "we," "us") collects, uses, discloses, and retains personal information through these services.

It applies to visitors, account holders, creators, and viewers whose interactions are processed through enabled StreamBot features. Contact us at [email protected]. Our Terms of Service explain the rules for using our services.

Connected platforms independently process information under their own policies. When a creator uses StreamBot to process community information, that creator also remains responsible for their own notices and lawful use of that information.

Account and support information. We collect information you provide when registering, configuring a profile, contacting support, or managing your account, such as your username, email address, authentication information, preferences, and correspondence. Do not send passwords or access tokens in support messages.

Connected-platform information. When you connect a supported platform, we process platform and channel identifiers, display names, profile images, connection status, granted permissions, and credentials needed for the connection. The Google and YouTube connection is described separately below.

Streaming and community activity. Depending on the features a creator enables, we process stream information, chat messages and associated usernames or identifiers, commands, moderation events, audience activity, reward balances, redemptions, giveaway participation, and feature settings. A viewer's interactions may be processed even if the viewer does not have a separate StreamBot account.

Content and AI inputs. We process content submitted to enabled features, such as audio, voice samples, text-to-speech text, character instructions, conversation history, clips, images, and overlay assets. AI character memory may associate previous interactions with a viewer identifier to provide continuity. Messages and generated output displayed in a public stream or chat can be seen, recorded, or copied by others.

Technical information. We process IP addresses, browser and device information, session identifiers, errors, security events, and usage information to operate, secure, and understand the service. Cookies and similar storage support authentication, preferences, and applicable analytics features. See our Cookie Notice.

Billing information. Dodo Payments handles checkout and payment processing. We receive information needed to administer purchases, such as transaction references, subscription status, purchased products, and billing-related information. The payment provider processes payment details under its own privacy terms.

StreamBot uses YouTube API Services. Connecting YouTube is optional and requires your authorization through Google. Google handles its own sign-in; the OAuth connection does not require you to give StreamBot your Google password.

Permissions and information accessed. The current channel-linking flow requests:

• –https://www.googleapis.com/auth/youtube.readonly: used to identify the YouTube channel associated with the authorized account. We retrieve the channel ID, channel title, handle when available, and thumbnail URL through the YouTube Data API.
• –openid: used to obtain Google's stable account identifier, when available, to distinguish accounts and prevent duplicate account connections.

We also receive OAuth access and refresh tokens, granted-scope information, and token-expiration information. We store connection information with the relevant StreamBot account and channel. OAuth tokens are encrypted before database storage.

Why we use this information. We use the returned channel identity to verify the connection, associate the correct channel with your StreamBot account, display its identity, and manage that connection. The Google account identifier helps prevent duplicate links. Tokens support the authorized connection and token renewal. Read-only authorization does not authorize StreamBot to upload videos, edit your channel, or post messages on your behalf. This linking flow does not request Gmail, Google Drive, Google Contacts, or Google Calendar permissions.

Other streaming features and information obtained separately from public activity are described in this policy. We will explain any new Google data access or materially different use and obtain additional authorization where required before enabling it.

Google data use restrictions. StreamBot's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We use this information only to provide or improve the user-facing features described here. We do not sell Google user data, use it for advertising or credit decisions, or use it to train generalized AI or machine-learning models.

We limit transfers of Google user data to those permitted by that policy, such as transfers necessary to provide or improve those features, comply with law, or protect against abuse. Any permitted business transfer requires the consent required by Google's policy. Human access is limited to circumstances permitted by the policy, such as your affirmative agreement to review specific information for support, security investigation, legal compliance, or permitted aggregated internal operations.

Your controls. You can disconnect a channel in StreamBot's channel settings. You can also revoke authorization through Google account permissions. Revocation prevents further authorized access; it does not itself erase information already stored by StreamBot. To request deletion of stored Google and YouTube information, contact [email protected] and identify the linked channel. Never include your password or tokens.

Retention and deletion. We retain Google connection information while it is needed for the connection you authorized. Disconnecting clears stored OAuth access and refresh tokens from the channel record. Channel identity and configuration records remain available for a 30-day recovery period, after which they are eligible for scheduled permanent deletion. Reconnecting during that period can restore the channel configuration. Revoking access through Google is separate from disconnecting in StreamBot; contact us to request removal of information already stored. We process deletion requests subject to applicable legal requirements and explain any information that must be retained. Deletion of StreamBot data does not delete your Google account, YouTube channel, or content held independently by YouTube.

No incentivized engagement. StreamBot does not offer rewards, points, prizes, or compensation in exchange for YouTube views, likes, comments, shares, or subscriptions. Loyalty and reward features, where a creator enables them, are managed within StreamBot and are never conditioned on YouTube engagement.

Google's processing is described in the Google Privacy Policy. Use of YouTube features is also subject to the YouTube Terms of Service.

We use information to create and secure accounts; provide the features users enable; process commands and community interactions; generate requested speech or AI responses; display overlays, alerts, and selected content; administer rewards and subscriptions; provide support; investigate abuse; diagnose problems; and meet legal obligations.

Where we send optional marketing communications, you can unsubscribe using the message's instructions. Essential account, billing, and security messages may still be necessary. General statements about analytics, personalization, or improvement do not override the Google-specific restrictions above.

Where data-protection law requires a legal basis, we rely on performance of our agreement for requested services, legitimate interests such as service security and support where appropriate, legal obligations, or consent where required. You may withdraw consent without affecting processing that was lawful before withdrawal.

Your selected audience and integrations. Content you publish or configure for public display may appear in chats, streams, overlays, public profiles, or shared clips. Creators and authorized channel managers can access information needed to operate their channels. Consider what you submit to public features.

Service providers. We use providers for hosting, storage, communications, payment processing, analytics, and enabled AI or speech functionality. Information provided to them should be limited to what is needed for the relevant service. Enabled AI and speech features may send the text, relevant conversation context, or audio needed to generate the requested output to the provider performing that function. Google data remains subject to Section 3.

Legal and security needs. We may disclose information when required by law or when necessary and legally permitted to investigate abuse, protect people or systems, or establish or defend legal claims.

Business changes. Information may be transferred in a merger, acquisition, or reorganization subject to applicable law, required notice or consent, and the Google-specific restrictions above.

We do not sell personal information. Contact us about applicable privacy choices or use the controls described in our Cookie Notice.

We retain information for the period needed for its disclosed purpose, taking account of account activity, user requests, security needs, and applicable legal obligations. Google and YouTube information follows Section 3 rather than a general account-retention period.

Account information is retained while needed to provide the account. Chat history, AI memory, audio, clips, and reward records are retained to operate the associated features and respond to deletion requests. Unlinked channel records follow the 30-day recovery process described above. Billing, security, and legal records may be retained where needed to meet legal obligations, investigate abuse, or resolve disputes. Residual copies may remain in backups until they are replaced through the backup lifecycle; backup retention is separate from removal from active systems. Information no longer needed for these purposes is deleted or anonymized. Contact us for information about a particular record or to request deletion.

We use safeguards appropriate to the information and risks involved, including access controls and encryption of stored OAuth tokens. No system is completely secure. If a breach requires notification, we will notify the affected people and authorities as required by applicable law. Do not upload sensitive information that a feature does not need.

Depending on your location, you may request access, correction, deletion, portability, or restriction of processing; object to certain processing; withdraw consent; and complain to your local data-protection authority. Applicable legal exceptions may limit a request.

Contact [email protected] with your account email or channel identifier and the request. We may take proportionate steps to verify your identity or authority. We respond within applicable legal deadlines and explain any extension or refusal. Viewers can contact us even if they do not hold a StreamBot account. Where a creator controls the relevant processing, we may need to coordinate with that creator.

You can manage platform connections and available preferences in settings, unsubscribe from marketing, and manage browser storage. Disabling essential cookies or disconnecting a platform may prevent the associated features from working.

Providers may process information outside your country. Where required, we use lawful transfer mechanisms and safeguards. Contact us for information about safeguards relevant to your information.

StreamBot is not directed to children under 13, or a higher minimum age where required by local law. If you believe a child has provided personal information contrary to these requirements, contact us so we can investigate and take appropriate action.

We will update the effective date when this policy changes and provide notice of material changes through appropriate means. Where a change requires consent, we will request it before applying that change. A policy update does not by itself authorize unrelated uses of previously collected Google data.

Privacy questions or complaints: [email protected].