Privacy Policy
Last updated: September 3, 2026
This Policy explains which personal data StreamerKit processes, why, who we share it with and what your rights are, in compliance with the Brazilian General Data Protection Law (LGPD, Law 13,709/2018) and the Brazilian Internet Civil Framework (Marco Civil da Internet).
1. Controller and Data Protection Officer
Controller: VEVIDD COMPANY LTDA, CNPJ 63.606.368/0001-18, Av. Guido Caloi, 1000, Andar 4, Bloco 5, Jardim São Luís, São Paulo/SP, CEP 05802-140.
Data Protection Officer (DPO): streamer.kit@streamerkit.net. Use this channel to exercise your rights or ask questions.
2. What this Policy covers
The streamerkit.net website, the live.streamerkit.net dashboard and its APIs, the ingest servers and cloud OBS, the StreamerKit iOS app, the OBS Studio plugin, and the support chat inside the dashboard (together, the "Service"). Capitalized terms not defined here have the meaning given in the Terms of Service.
3. What data we process
3.1 Account and login
- Data received from the login platforms (Twitch, Kick, Google/YouTube, Apple): platform identifier, display name, username, e-mail, profile picture and account type (for example, affiliate or partner).
- Access tokens and the permissions you grant on those platforms, needed to operate the integrations.
- Login codes and tokens for devices, plugins and the iOS app.
3.2 Payment
- Card: customer and subscription identifiers at Stripe. Card details are collected and stored by Stripe only.
- Pix (Woovi): CPF and phone number, required by Woovi to issue the charge and set up Pix Automático, plus charge identifiers and payment status.
- Apple: App Store transaction and subscription identifiers. We do not receive your payment details from Apple.
- History of subscriptions, plans, complimentary periods and status.
3.3 Service configuration and use
- Stream destinations: platform, server URL and stream key for each destination you register.
- Ingest endpoints, cloud OBS scenes and settings, ingest shares and authorized moderators.
- Media you upload (images, video, audio) and overlay editor layouts.
- The video and audio feed of your streams, in transit only: we do not record streams; the servers keep temporary buffers for processing and restreaming.
- Technical records: IP address, device identifiers, browser, access dates and times, connection metrics (bitrate, packet loss, latency) and error logs.
3.4 Support and communication
- Messages exchanged in the support chat (hosted on our own infrastructure), together with your name, e-mail, picture, plan and subscription status so we can identify you.
- E-mails and messages you send us.
3.5 Analytics and cookies
- Google Analytics on the site and in the dashboard: pages visited, usage events, approximate location data and cookie identifiers.
- Session cookies to keep you signed in, and preferences (language, layout) stored in your browser.
We do not intentionally process sensitive data (art. 5, II of the LGPD), and we do not make automated decisions with legal effects on you.
4. What we use the data for and on what legal basis
| Purpose | Data | Legal basis (LGPD, art. 7) |
|---|---|---|
| Create and maintain your account, authenticate you and your devices | Account and login | Performance of a contract (V) |
| Receive, process and restream your broadcasts; operate the cloud OBS and the overlays | Configuration and use, media, feed in transit | Performance of a contract (V) |
| Connect to Twitch, Kick and YouTube on your behalf (read channel data, start streams, obtain the stream key) | Tokens and permissions | Performance of a contract (V) |
| Charge subscriptions, issue Pix and card payments, prevent fraud | Payment | Performance of a contract (V) and compliance with a legal obligation (II) |
| Keep tax and payment records | Payment | Compliance with a legal obligation (II) |
| Keep access logs for 6 months (Marco Civil, art. 15) | Technical records | Compliance with a legal obligation (II) |
| Assist you through support | Support | Performance of a contract (V) |
| Notify you about charges, changes to the Terms, incidents and Service status | Account, payment | Performance of a contract (V) |
| Diagnose faults, measure performance and protect the infrastructure against abuse | Technical records | Legitimate interest (IX) |
| Measure use of the site and the dashboard to improve them | Analytics | Consent (I), through your browser settings, or legitimate interest (IX) for aggregate metrics |
| Send news and offers | Consent (I), only if you opt in; you can opt out at any time |
Data marked as required at sign-up or at payment (for example, CPF and phone number for Pix) is necessary to provide the Service; without it we cannot complete the subscription through that method.
5. Who we share data with
We share data only with processors acting under our instructions, or when you instruct us to send it to a destination platform:
| Recipient | Purpose | Location |
|---|---|---|
| Stripe | Card payments | USA/EU |
| Woovi | Pix payments | Brazil |
| Apple | Sign in with Apple and in-app purchases on iOS | USA |
| Twitch, Kick, Google/YouTube | Login, reading channel data and the restreaming you configured | USA and others |
| Cloud infrastructure providers (CDN, hosting, storage and ingest servers) | Hosting of the site, dashboard and database; storage of uploaded media; ingest and cloud OBS; attack protection and traffic metrics | Brazil, USA and Europe |
| Google Analytics | Usage metrics for the site and the dashboard | USA |
| Support chat (our own system) | Support chat | Our own infrastructure |
We may also disclose data to comply with a court order or the law, to protect the rights of StreamerKit or third parties, and in the event of a corporate reorganization, with prior notice to you.
We do not sell personal data.
6. International transfers
Some of the processors listed above are outside Brazil. Those transfers rely on the mechanisms of art. 33 of the LGPD, in particular standard contractual clauses signed with the providers and the necessity of performing the contract with you. Ingest servers are located in the countries you choose when configuring your stream (Brazil, USA and Europe).
7. How long we keep data
| Data | Retention |
|---|---|
| Account, settings, media and overlays | For as long as the account exists; deleted when the account is deleted |
| Platform tokens | Until you disconnect the platform or delete the account |
| Stream keys and destinations | Until you remove them or delete the account |
| Video feed in transit | Seconds, in processing buffers only |
| Access logs (IP, date and time) | 6 months (Marco Civil, art. 15), extendable by court order |
| Payment and tax records | 5 years after payment (tax obligations and the CDC limitation period) |
| Support conversations | Up to 2 years after the last contact |
| Analytics | 2 to 14 months, according to the retention configured in Google Analytics |
After the account is deleted, we keep only a minimal record of the deletion (internal identifier and date) and the records the law requires us to keep.
8. Security
We use encryption in transit, role-based access control, segregation of each user's infrastructure, and monitoring. Stream keys and tokens are accessible only to the components that need them. No system is completely secure; if an incident occurs that could put you at risk, we will notify you and the Brazilian National Data Protection Authority (ANPD) as required by law.
9. Your rights
At any time and free of charge, you may (LGPD, art. 18):
- confirm whether we process your data and access it;
- correct incomplete, inaccurate or outdated data;
- request anonymization, blocking or deletion of data that is unnecessary or processed in breach of the law;
- request portability of your data;
- find out who we share your data with;
- withdraw consent and be informed of the consequences of refusing;
- object to processing based on legitimate interest;
- delete data processed on the basis of consent.
To exercise these rights, write to streamer.kit@streamerkit.net or use the support chat. We may ask you to confirm your identity. We respond within 15 days. You may also file a complaint with the Brazilian National Data Protection Authority (ANPD).
Account deletion: request it by e-mail or through the support chat; we complete it within 15 days and confirm in writing. Deletion cancels active subscriptions, removes media, overlays, destinations, platform tokens, moderators and sessions, and anonymizes your registration data (name, e-mail, CPF, phone number, picture).
10. Platform integrations and revocation
- Twitch: we access your e-mail and profile, the channel's stream key and stream data (title, category) to configure and start streams. Revoke at https://www.twitch.tv/settings/connections.
- Kick: we access your profile, channel data and write permissions on the channel to configure streams. Revoke in your Kick account settings.
- Google/YouTube: we use the YouTube API Services. We access your e-mail, profile and read-only data from your YouTube channel to identify the channel and configure restreaming. By using this integration you agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy. Use of data obtained from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Revoke access at https://myaccount.google.com/permissions.
- Apple: we use Sign in with Apple (identifier and e-mail, which may be a relay address) and in-app purchases. Revoke in Settings › Apple ID › Sign in with Apple.
Data obtained from the platforms is used only to operate the features you configured, is not sold or used for advertising, and is deleted when you disconnect the platform or delete your account. You can also disconnect each platform from the dashboard.
11. Cookies and analytics
- Necessary: the session cookie that keeps you signed in, and preferences stored in your browser. Without them the dashboard does not work.
- Analytics: Google Analytics. To opt out, use the Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout), block third-party cookies or turn on "Do Not Track" in your browser.
12. Children and teenagers
The Service is not intended for anyone under 18. Minors may only subscribe with their legal guardian's authorization. If we learn that we are processing a child's data without the consent required by art. 14 of the LGPD, we will delete it.
13. Changes to this Policy
We will publish the new version on this page with an updated date. Material changes will be announced by e-mail or in the dashboard at least 15 days in advance.
14. Contact
- E-mail and Data Protection Officer (DPO): streamer.kit@streamerkit.net
- Support chat in the dashboard (live.streamerkit.net)
- Discord: https://discord.gg/N7ZcUt7epv
VEVIDD COMPANY LTDA · CNPJ 63.606.368/0001-18 · Av. Guido Caloi, 1000, Andar 4, Bloco 5, Jardim São Luís, São Paulo/SP, CEP 05802-140