Privacy Policy

This Policy explains how Stream OS collects, uses, stores, and shares information when you use our website, Windows application, APIs, and connected streaming integrations.

1. Information we collect

• Account data, including username, display name, email address, password hash, and account identifiers.
• Workspace data, roles, invitations, settings, and activity needed to provide team features.
• Integration data received through authorized OAuth connections, such as provider account identifiers, encrypted access tokens, channel status, alerts, and permitted control settings.
• Operational data such as IP address, timestamps, request metadata, security events, and error logs.
• Subscription data such as payment-provider customer and subscription identifiers, status, billing period, and limited card metadata. Stream OS does not store full card numbers.

2. How we use information

We use information to create and secure accounts, operate workspaces and integrations, enforce role and subscription access, provide support, prevent abuse, troubleshoot failures, comply with legal obligations, and improve reliability.

3. Legal basis and consent

We process information as necessary to provide the service you request, protect legitimate security interests, comply with legal duties, and, where required, based on your consent. You may revoke an integration's access by disconnecting it from Stream OS and, where applicable, from the provider.

4. Service providers and third parties

We share only the information required with infrastructure, database, authentication, streaming, and payment providers that help deliver the service. These may include Railway, PostgreSQL hosting, Twitch, Streamlabs, Nightbot, OBS, Streamer.bot, and the selected merchant-of-record/payment provider. Each third party processes data under its own terms and privacy policy.

5. Cookies and local storage

Stream OS uses an essential secure session cookie and local preferences such as language and selected workspace. These technologies are required for login, security, and core functionality; we do not use them to sell personal data.

6. Security

Passwords are stored as cryptographic hashes. Sensitive provider tokens are encrypted at rest, sessions use secure cookie protections in production, and server-side authorization is applied to workspace and billing actions. No system is perfectly secure, but we maintain safeguards appropriate to the service.

7. Retention

We keep account and workspace information while your account is active and as reasonably required for security, dispute resolution, legal compliance, backups, and fraud prevention. Data no longer required is deleted or anonymized according to operational and legal requirements.

8. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of your personal information. You may disconnect integrations and cancel subscription renewal. Some records may be retained where legally required or necessary to protect legitimate claims.

9. International processing

Providers may process information outside your country. Where required, we rely on provider safeguards and contractual protections for international transfers.

10. Children

Stream OS is not directed to children who cannot legally consent to data processing or enter a subscription agreement. A parent or guardian must supervise use where required by law.

11. Changes and contact

We may update this Policy and will revise the effective date. Privacy questions and rights requests can be submitted through the contact page.