This Privacy Policy (“Privacy Policy”) applies to the processing of your personal data by StreamYard Inc. (“StreamYard”, “we” or “us”) through the “www.streamyard.com” website (“Website”) and when you use our services and platform (“Services”) according to Regulation (EU) 2016/679–General Data Protection Regulation (“GDPR”), Directive 2002/58/EC – ePrivacy Directive, and other applicable privacy laws (collectively, “Applicable Privacy Laws”).
As described in Section 9 (Third-party Websites and Services), this Privacy Policy does not apply to third party websites or services linked to the Services, as well as to the processing activities carried out by StreamYard as Data Processor, which are regulated in our Data Processing Agreement (“DPA”). In particular, except as specified in Section 2 (Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing), StreamYard acts as Data Processor in relation to the personal data connected to your audio-visual contents, chats, and messages (“Contributions”). For these processing activities, the data controllers are the relevant Hosts, thus we invite you to review their privacy policies where applicable.
For the purposes of this Privacy Policy, stream means a live stream, a recording, or a webinar.
If you are a California resident, please see Section 10 (Additional Information for California Consumers) below.
1. Data Controller and Data Protection Officer
The Data Controller is StreamYard Inc., based at 169 Madison Ave, Suite 11218, New York, NY 10016.
For any requests regarding how we process your personal data, you can email us at privacy@streamyard.com or contact our Data Protection Officer (DPO) at dpo@bendingspoons.com.
2. Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing
We process the following categories of personal data, for the purposes and on the legal bases indicated below. Please note that not all of the below information may be deemed personal data in your jurisdiction in all cases.
| Purpose of the processing | Categories of data | Legal basis |
|
a) To enable you to use our Services ("Provision of the Service”). For example, we may process your data to enable you to perform the following activities:
|
First name and last name, username or similar identifier, image, title, IDs, email address (“Identity and Contact Data”). Transaction data (details about the payments made and the products and services purchased). We do not store card details on our servers.
|
Our contractual relationship provides the legal basis for processing this data for this purpose (article 6(1)(b) GDPR). |
| b) To enable all Users to use our website (“Website Usage”). | Technical Data. | Our contractual relationship provides the legal basis for processing this data for this purpose (article 6(1)(b) GDPR). |
|
c) To improve and develop our products and services (“Service Improvement”). For example, we may process your data by conducting statistical analysis or other research activities to optimize our features and provide you with new ones. |
Identity and Contact Data. Your interaction with and use of our Services, and your subscription status. Technical Data. |
Our legitimate interest to improve our products and services provides the legal basis for processing this data for this purpose (article 6(1)(f) of GDPR). |
| d) To ensure the quality and the proper functioning of the Services, by analyzing, preventing or correcting failures and bugs, as well as the illicit use or misuse of the services ("Troubleshooting”). |
Identity and Contact Data.
|
Our legitimate interest to ensure the quality and the smooth functioning of the Services and to ensure respect of our terms and guidelines (article 6(1)(f) GDPR) as well as the fulfillment of legal obligations (article 6(1)(c) GDPR) provide the legal basis for processing this data for this purpose. |
e) To analyze your usage information, including your preferences, interests and behaviors when you use our Services (“Profiling”). For example, we process your data in the following activities:
|
Identity and Contact Data. Your interaction with and use of our Services, and your subscription status. Inferences we generate about your use of our Services. Your answers to our surveys. |
Our legitimate interest to improve and customize our services provides the legal basis for processing this data for this purpose (article 6(1)(f) GDPR). |
| f) To carry out marketing activities, and send you information and marketing communications about our Services such as tips, offers, and newsletters through emails and push notifications, or to conduct user research activities ("Marketing”). |
Identity and Contact Data. IP address and other technical information we may receive from third-party advertising networks and platforms. In case of personalized marketing, information inferred from your use of the Services or from your answers to our surveys. |
Your consent provides the legal basis for processing this data for this purpose (article 6(1)(a) GDPR). Where your consent is not required, for example, to show you in-platform banners or send you promotional communications about products and services similar to the ones you have been using, our legitimate interest to send you commercial communication provides the legal basis for processing this data for this purpose (article 6(1)(f) GDPR). |
| g) To comply with our legal obligations, including requests from public authorities ("Compliance”). | Any information necessary to comply with legal obligations and requests from public authorities. | Legal obligations that we must comply with (article 6(1)(c) GDPR) and our legitimate interest to cooperate with public Authorities (article 6(1)(f) GDPR) provide the legal basis for processing this data for this purpose. |
| h) To send you administrative or technical updates and to process and respond to customer support communications and any other requests or communications from you ("Customer Support”). |
Identity and Contact Data. Content of your communication or request. |
Our contractual relationship provides the legal basis for processing this data for this purpose (article 6(1)(b) GDPR). |
| i) To establish, exercise or defend our rights and those of our employees, and to carry out corporate transactions or operations (“Defense”). For example, we may process your data in case of bankruptcy, merger, acquisition, reorganization, sale of assets or assignments, and due diligence related to any such transactions. | Any information necessary to ensure the performance of these purposes. | Our legitimate interest to establish, exercise or defend our rights and to carry out corporate transactions or operations provide the legal basis for processing this data for this purpose (article 6(1)(f) GDPR). |
To know how we process your data through the use of cookies, see Section 11 (Cookies) below.
3. Data Retention
Personal data may be processed by both automated and non-automated means and may be stored at our premises and on our service providers’ servers. We adopt technical and organizational measures designed to prevent the loss, improper use and alteration of your personal data. In some cases, we may also adopt data encryption and pseudonymization measures. However, transmissions over the Internet are never 100% secure, and you should not provide any personal data if you want to avoid any risk.
Personal data processed for the Provision of the Services and Website Usage will be kept for 3 years from your most recent interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
Personal data processed for Service Improvement, Profiling and Customer Support will be kept for no more than 3 years from your most recent interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
Personal data processed for Troubleshooting will be kept for no more than 1 year from your most recent interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
Personal data processed for Marketing will be kept for no more than 2 years from your most recent interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
Personal data processed for Compliance will be kept for no more than 7 years from your most recent interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction.
Personal data processed for Defense will be kept for no more than 10 years from your most recent interaction with our Services, or from the expiration of your subscription. If you use the Services after your subscription has expired, the retention period starts from this most recent interaction. Specific legal obligations might require different retention periods and, in such cases, those different periods will apply.
Upon the expiration of the mentioned retention periods, unless specific legal obligations require that the data is retained for longer, the data is either deleted or anonymized.
To know how long your data is stored through cookies, see Section 11 (Cookies) below.
4. Your Choices With Regard to the Use of Your Personal Data
It is mandatory for you to provide your personal data for the Provision of the Services, Website Usage, Compliance, and Customer Support. If you do not provide the personal data, you will not be able to use our Services.
Where we rely on your consent for Marketing, your provision of personal data is optional, and you have the right to withdraw your consent at any time. If you do not provide the personal data, you will still be able to enjoy the app’s services and features.
Where we rely on our legitimate interest for Service Improvement, Troubleshooting, Profiling, Marketing, and Defense, you may, at any time, exercise your right to object to such processing as explained in Section 7 (Your Rights) below.
You can freely decide whether to accept cookies and other tracking technologies not strictly necessary for the functioning of the website as indicated in Section 11 (Cookies) below.
5. Recipients of Your Personal Data
We may disclose your personal data to the following categories of recipients:
- Vendors carrying out activities related or instrumental to our business and operations, either as outsourced data processors appointed in writing in accordance with Applicable Privacy Laws (such as IT or storage service providers) or as autonomous data controllers (such as advertising networks and platforms)
- If we carry out a corporate transaction or operation (for example, in case of merger, acquisition, reorganization, sale of assets or assignments, and due diligence related to any such transactions), personal data may be transferred to another owner, and disclosed to our advisers and any prospective purchaser's advisers, as part of such transaction or operation
- Hosts or other stakeholders (e.g. sponsors) whose streams you attend through your use of the Services
- Your employer if you register or access the Services using an email address with a domain that is owned by your employer
- Public, judicial and/or police authorities, within the limits established by applicable laws
- Other parties as necessary, in the event we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect our rights, property, and safety or that of our users, the public, or others
- Professional advisors where necessary to obtain advice or otherwise protect and manage our business interests
- Our corporate affiliates under common control and ownership
Your data can also be collected by third parties when you accept third party cookies. Please see Section 11 (Cookies) below for more information.
Personal data will not be disclosed for any reason other than those stated above, unless such disclosure is deemed necessary for the fulfillment of a legal obligation or if we request your consent.
6. International Transfers
StreamYard is a US Data Controller. Therefore, the collection of your data does not amount to an international transfer if you reside outside the US.
In any case, when your personal data will be stored outside of your country of residence, we will respect the Applicable Privacy Laws to ensure that such transfers ensure an adequate level of protection of your personal data.
When we select a provider outside of the EEA or the UK, we ensure an appropriate degree of protection to EEA/UK’s users as those afforded in those areas, implementing at least one of the following safeguards:
- Transferring your personal data to third parties residing in countries that have been deemed to provide an adequate level of protection for personal data by the European Commission or UK Information Commissioner’s Office
- Requiring our providers to sign a Data Processing Agreement which incorporates the appropriate Standard Contractual Clauses, or another legally applicable data transfer mechanism, which requires them to provide protection to EEA/UK data to the standard expected within the EEA/UK
For more information on the appropriate warranties that we adopt, contact us at privacy@streamyard.com.
7. Your Rights
At any time and free of charge, you can exercise the following rights, as specified and subject to certain limitations and exceptions under Applicable Privacy Laws:
- Right of access. You have the right to obtain information about the processing of your personal data and to access it.
- Right to rectification. You have the right to ask for the update, rectification or integration of your personal data.
- Right to erasure. You have the right to request the deletion of your personal data.
- Right to restriction of processing. You have the right to request the restriction of the processing of your personal data.
- Right to data portability. You have the right to obtain a portable electronic copy of your personal data.
- Right to object. Where we rely on our legitimate interest to process your personal data, you have the right to object to such processing, wholly or partly, on grounds related to your particular situation. In particular, you are entitled to object to the processing of your personal data for direct marketing purposes, including profiling.
- Right to withdraw your consent. Where we rely on your consent to process your personal data, you have the right to withdraw your consent, although the processing carried out before your withdrawal of consent will remain valid.
To exercise your rights, you can contact us at privacy@streamyard.com. We may take reasonable steps to verify your identity prior to responding to your request.
You also have the right to lodge a complaint before the competent national Data Protection Authority, in particular before the Data Protection Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.
8. Children’s Personal Data
We do not knowingly collect or process personal data from children without parental consent, and no part of our Services is directed to them. A “child” is a person under 16 years old.
If you believe we have received personal data from children under the age of 16, please email us at privacy@streamyard.com. If we become aware that we have collected personal data from a child without verification of parental consent, we take steps to remove that data from our systems.
9. Third-party Websites and Services
The Services may include links to other websites or services operated by third parties as well as to integration and partner providers of services associated with a particular stream. Clicking on links to third-party websites, content, applications, or integrations may allow those third parties to collect or share data about you. We do not control those third-party websites or content, and the activities described in this Privacy Policy do not apply to data processed by such third-party websites and services. We have no control over, and we are not responsible for, the actions and privacy policies of third parties and other websites and services.
Where you access or use third party services or integrations provided by the host, advertiser, sponsor or any other party who participates in a stream, we encourage you to request details of and read the privacy policy of that party.
Third-Party services to which you connect your account
If you link StreamYard to a third-party account, we may collect and store certain limited information to facilitate that connection. Your use of third-party services is subject to those third parties’ terms and privacy policies.
StreamYard may allow you to connect a YouTube channel to your StreamYard account. In this case, we will access certain information from YouTube about your channel using YouTube API Services. We may collect channel title, channel thumbnail, username / profile ID, email, access tokens, and live broadcasts. This includes information related to your live videos (such as comments, live viewer counts, ingest address, stream name). Moreover, this connection allows third parties to publish advertisements. If you decide to connect a YouTube channel to your StreamYard account, see Google’s privacy policy. When disconnecting a YouTube channel on StreamYard, StreamYard will delete the stored data associated with that YouTube channel. In addition, you can revoke access via Google’s security settings page.
10. Additional Information for California Consumers
This section provides additional disclosures required by the California Consumer Privacy Act (“CCPA”) and serves as our California notice at collection. If you reside in California, this section applies to you.
a) Additional Information Related to Collection, Use, and Disclosure of Personal Information
We collect personal information from several sources: directly from you (for example, when you make purchases or participate in a survey or contest), automatically when you use the Services (for example, browser information), and from other sources (for example, ad networks). We also generate inferences about you based on your use of the Services and other information we collect.
In the preceding 12 months, we have collected the following categories of personal information: identifiers, internet or other electronic network activity information, characteristics of protected classifications under California or U.S. federal law (such as gender if you participate in a survey), commercial information (such as purchases you make), approximate geolocation information (such as country), audio and visual information, inferences, and other information that relates to or is reasonably capable of being associated with you. For details about the personal information we collect, please see Section 2 (Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing) above. We collect personal information for the business and commercial purposes listed in the chart in Section 2 (Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing) above.
We may disclose your personal information to the categories of third parties as described in Section 5 (Recipients of Your Personal Data) above. In the preceding 12 months, we have disclosed the following categories of personal information for the business purposes described in Section 2 (Categories of Personal Data that We Collect, Purposes and Legal Bases for Our Processing) above: identifiers, internet and electronic network activity information, characteristics of protected classifications under California or U.S. federal law, commercial information, approximate geolocation information, and other information that we have inferred about you or that relates to or is reasonably capable of being associated with you.
We also disclose the following categories of personal information to advertising and marketing partners to show you targeted ads on third-party properties (these disclosures may be considered “sales” or “sharing” under the CCPA):
- Identifiers
- Commercial information
- Internet or other electronic network activity information
- Inferences
We don’t knowingly sell or share personal data about users under the age of 16.
We don’t collect information that’s considered “sensitive” under the CCPA.
We retain personal data as described under previous Section 3 (Data Retention).
b) Rights of California Consumers
Subject to certain limitations, the CCPA provides California consumers the right to:
- Request more details about the categories and specific pieces of personal information that we process, including in a portable format where feasible
- Request the deletion of their personal information
- Request the correction of inaccurate personal information
- Not to be discriminated against for exercising these rights
If you’re a California consumer, to exercise these rights, you can submit a request contacting us at privacy@streamyard.com. We may take steps to verify your request by asking you to provide information that matches information we have on file about you. California consumers can also designate an authorized agent to exercise these rights on their behalf, but we will require proof that the person is authorized to act on their behalf and may also still ask them to verify their identity with us directly.
In addition to the rights listed above, California consumers also have the right to opt out of “sales” or “sharing” of their personal information. You can opt out of cookie-based ad targeting on our website by following the prompts behind the “Cookie Preferences” link in the website footer. You may need to renew your opt-out choice if you use a different browser or device to access our Services, or if you clear your cookies.
11. Cookies
What are cookies and tracking technologies?
When we use the word “cookies” in this Privacy Policy, we mean any tracking technology that stores or accesses information on the user’s device, including any SDK, tracking pixel, HTML5 local storage, local shared object, and fingerprinting technique.
Cookies are usually classified by:
(A) Purpose (Technical cookies, Analytics cookies, Profiling cookies)
(B) Publisher (First-party cookies, Third-party cookies), and
(C) Duration (Session cookies, Permanent cookies)
This classification is important because different legal requirements apply based on how the cookie is classified.
Below you will find the types of cookies and tracking technologies as classified with some practical examples.
- By purpose
Technical cookies
Technical cookies are used solely for the purpose of transmitting messages over an electronic communication network, or to provide a service specifically requested by the user.
In other words, technical cookies are essential for the correct functioning of the website and to provide the service offered to and requested by the user.
For example, technical cookies can be used to monitor sessions, to store specific server access information related to the user configuration, to facilitate the use of online content, or to keep track of items in a shopping cart or information used to fill in a form.
Technical cookies include the functional cookies you might find mentioned while browsing the Website.
Technical cookies do not need your consent.
Analytics cookies
Analytics cookies may be used to assess the effectiveness of an information society service provided by a publisher, to evaluate and improve the design of a website or to help measure its traffic.
In other words, analytics cookies may be used to track the traffic and performance of a website, by collecting aggregate data on the number of visitors and how they interact with the website to improve its services.
For example, analytics cookies may collect information about how users access a website, including the number of visitors, possibly grouped by geographical area, time slot, how long visitors stay on the site for, what parts of the site they visit or other characteristics, the number of pages visited or the number of users who viewed a particular section.
Please consider that if analytics cookies are properly anonymized, they can be installed without your previous explicit consent.
Profiling cookies
Profiling cookies may be used to trace specific actions or recurring behavioral patterns in the use of the offered functionalities back to specific, identified or identifiable individuals for the purpose of grouping the different profiles within homogeneous, multi-sized clusters. This is aimed in turn to enable a company to provide increasingly customized services beyond what is strictly necessary for the delivery of the service and also send targeted advertising messages in line with the preferences expressed by the user during their web-browsing activities.
In other words, profiling cookies may be used to convey behavioral advertising, measure the effectiveness of ads, or to customize the services offered in line with the user’s monitored behavior.
For example, profiling cookies can be used to create user profiles and offer content in line with the user’s interests, or to send targeted ads or messages.
Profiling cookies include the performance, marketing and social media cookies you might find mentioned while browsing the Website.
Profiling cookies need your explicit consent.
- By publisher
First-party cookies
Cookies are installed directly by the website that the user is browsing. In other words, the publisher of the website installs the cookies directly without using any third-party publishers and processes the information thereby acquired.
Third-party cookies
Third-party cookies are set by external providers other than those of the website that the user is browsing. In other words, the publisher of the website installs the cookies indirectly, using third-party publishers and processes the information thereby acquired.
For the purposes of this Privacy Policy, third party cookies include any tracker which, although directly published by us, is provided by third parties which receive or otherwise process for their own purposes the information acquired through these cookies when you visit our website. For further information, please refer to the privacy policy of such third party as indicated in the cookie table.
The data collected by these third parties is governed by their own specific privacy policies, terms and conditions, or cookie policies to which we have no control over.
When our website hosts third-party non-anonymized analytics cookies and/or profiling cookies, you will be asked to consent to such third-party cookies when landing on our websites for the first time, via a specific cookie banner.
You can manage and delete these third-party cookies at any time by accessing the privacy policies of the third parties as indicated in the following section ("Types of cookies used by the Website”).
- By duration
Session cookies
Session cookies expire when the user's browsing session expires.
Permanent cookies
Permanent cookies last longer than a single browsing session.
Types of cookies used by the Website
Our website installs the following types of cookies. You can customize your cookie preferences at any time by accessing the cookie management platform on our website.
Technical cookies
| Cookie Subgroup | Cookies | Cookies used | Lifespan |
|---|---|---|---|
| cloudflare.com | _cfuvid, __cfruid | Third party | 1 Year, 1 Year |
| linkedin.com | bcookie, bscookie, lidc | Third party | 1 Year, 1 Year, 1 Day |
| m.stripe.com | m | Third party | 1 Year |
| onetrust.com | OptanonAlertBoxClosed, OptanonConsent | Third party | 1 Year, 1 Year |
| streamyard.com | cookietest, csrfToken, jwt, language, teamId | First party | 1 Year, 1 Month, 1 Month, 1 Month, 1 Month |
| stripe.com | __stripe_mid, __stripe_sid | Third party | 1 Year, 1 Year |
| youtube.com | VISITOR_PRIVACY_METADATA | Third party | 5 Months |
Analytics cookies
| Cookie Subgroup | Cookies | Cookies used | Lifespan |
|---|---|---|---|
| ads.microsoft.com | _uetvid | Third party | 1 Year |
| analytics.google.com | _ga, _ga_xxxxxxxxxx, _gid | Third party | 1 Year, 1 Year, 1 Day |
| fullstory.com | fs_uid, fs_lua | Third party | 1 Year, 1 Hour |
| linkedin.com | AnalyticsSyncHistory | Third party | 1 Month |
| segment.com | ajs_anonymous_id, __tld__ | Third party | 1 Year |
| t.co | muc_ads | Third party | 1 Year |
| youtube.com | VISITOR_INFO1_LIVE | Third party | 5 Months |
Profiling cookies
| Cookie Subgroup | Cookies | Cookies used | Lifespan |
|---|---|---|---|
| ads.google.com | NID | Third party | 6 Months |
| ads.microsoft.com | _uetsid | Third party | 1 Day |
| adsense.google.com | _gcl_au | Third party | 2 Months |
| analytics.google.com | _gat_UA-XXXXXX-X | Third party | 1 Minute |
| bing.com | MUID, MSPTC, MR | Third party | 1 Year, 1 Year, 6 Days |
| doubleclick.net | IDE, test_cookie | Third party | 1 Year, A few seconds |
| facebook.com | _fbp | Third party | 2 Months |
| linkedin.com | li_sugr, UserMatchHistory | Third party | 2 Months, 1 Month |
| mountain.com | tt, guid | Third party | 1 Year, 1 Year |
| t.cometlytrack.com | [a-zA-Z+0-9]{40}, cometly_tracker_session, XSRF-TOKEN | Third party | A few seconds, A few seconds, A few seconds |
| twitter.com | personalization_id | Third party | 1 Year |
| youtube.com | YSC | Third party | 1 Year |
Cookie settings
You can disable (in whole or in part) technical cookies through the specific functions of your browser. Please note, however, that if you don’t allow technical cookies, you may not be able to use the website, view its contents and take advantage of its services. Inhibiting technical cookies may result in some services or features of the website not being available or not working properly and you may be required to modify or manually enter certain information or preferences each time you visit the website.
The choices you make with respect to the website's cookies will be recorded in a cookie. However, in some circumstances this cookie may not work properly: in such cases, we recommend that you delete the cookies you do not like and inhibit their use through the features of your browser.
Your cookie preferences will need to be reset if you use different devices or browsers to access the website.
You can find information on how to manage cookie settings on certain browsers via the following links:
For more information about how to limit the use of third-party cookies installed in your browser, please visit www.youronlinechoices.com. Once arrived on the website, by accessing the "Your ad choices" section, you will be able to view the list of third parties that install cookies on your browser and manage your consent granularly ("On/Off"). Moreover, by expanding the "Info" section, you will be able to access more information about each third party and its privacy and cookie policies.
With regards to your rights under Applicable Privacy Laws, please refer to Section 7 (Your Rights) above.
12. Changes to this Privacy Policy
We may modify, integrate or update, in whole or in part, this Privacy Policy, and we will notify you of any modification, integration or update in accordance with Applicable Privacy Laws. If we make modifications, we will notify you by posting an updated, date-stamped version of this Privacy Policy on our website and, if required, by additional means such as pop-ups or push notifications.
Last updated: November 6, 2024
Related to
Updated