We’ve written this privacy policy to meet Regulation (EU) 2016/679 – General Data Protection Regulation (“GDPR”), the Italian Legislative Decree 196/2003, and other applicable local laws, as amended or replaced (collectively, “Applicable Privacy Laws”). This privacy policy regulates the use of StreamYard (https://streamyard.com/), including its website, app (where available), service and platform (the “Services”).
This privacy policy doesn't apply to the processing activities covered by the Data Processing Addendum (the "DPA"). In particular, it doesn't apply to personal data that may be included in audio-visual content, chats, messages, and viewer data (together, "User Content"). For that content, the user hosting the stream is the data controller, unless they're using the Services purely for personal purposes. This is without prejudice to the specific provisions set out in Section 2 (Categories of Personal Data, Purposes and Legal Bases).
If you’re a US resident, section 10 (Additional Information for US Residents) covers what's specific to you.
- Data Controller and Data Protection Officer
Who's the data controller for my data?
The data controller is Bending Spoons US Inc., based at 169 Madison Ave, Suite 11218, New York, NY 10016.
Got a question about how we use your data, or want to reach our Data Protection Officer? Use this form.
- Categories of Personal Data, Purposes and Legal Bases
What data about me is collected, why, and on what legal basis?
Below, we list the personal data we process, what we use it for, and the legal basis for doing so. Be aware that not everything listed necessarily counts as "personal data" where you live, as this depends on local law.
| Purpose | Legal Basis | Categories of Processed Data |
|
To provide you with our Services ("Service Delivery"). This covers things like setting up and personalizing your profile, live streaming and on-air webinars, recording videos, processing your payments, and browsing our website. |
We process this data because it's needed to carry out our contract with you (article 6(1)(b) GDPR). |
|
|
To improve and develop our products and services, including how we acquire new users ("Service Improvement"). This includes building and testing new features, running statistical analysis and research (including A/B testing), analyzing how you use the Services (your preferences, interests, and behavior), and making our user acquisition campaigns more efficient. |
We process this data based on our legitimate interest in improving our products and services (article 6(1)(f) GDPR). Some of this work involves building profiles about you. You can object to this profiling. See Section 7 (Your Rights) to learn how. |
|
| To keep our Services running properly by analyzing, preventing, and fixing failures and bugs, and to prevent illegal use or misuse of our Services ("Troubleshooting"). | We process this data based on our legitimate interest in keeping the Services running smoothly and properly (article 6(1)(f) GDPR). |
|
| To enforce our terms and keep our Services and users safe and secure ("Service Integrity"). | We process this data based on our legitimate interest in enforcing our terms and maintaining the safety and integrity of our Services (article 6(1)(f) GDPR). |
|
| To send you administrative or technical updates, and to process and respond to customer support communications and any other requests or communications from you ("Customer Support"). |
We process this data because it's needed to carry out our contract with you (article 6(1)(b) GDPR). If you give us your consent, we can also access your account directly to help with your request (article 6(1)(a) GDPR). |
|
| To carry out marketing activities and send you information and marketing communications about our products and services, such as tips, offers, and newsletters, by email and push notification, or to run user research activities ("Marketing"). |
We process this data based on our legitimate interest in telling you about products and services related to, or similar to, the Services (article 6(1)(f) GDPR). To send you emails for surveys and interviews or updates about other products and services, your consent is needed (article 6(1)(a) GDPR). Some marketing communications may be customized based on your data. You can object to this activity. See Section 7 (Your Rights) to learn how. |
|
| To comply with, and prove that we’ve complied with, our legal obligations, including requests from public authorities ("Compliance"). |
When a specific legal obligation requires it, we use your personal data to the extent needed to comply with that obligation (article 6(1)(c) GDPR). When the law leaves us some discretion in how we comply, we use your data based on our legitimate interest in proving our compliance (article 6(1)(f) GDPR). |
Any information necessary to comply with legal obligations and requests from public authorities. |
|
To establish, exercise, or defend our rights and those of our employees, and to carry out corporate transactions or operations ("Defense"). For example, we may process your data in the case of a bankruptcy, merger, acquisition, reorganization, sale of assets, or due diligence related to any of these. |
We process this data based on our legitimate interest in establishing, exercising, or defending our rights, and in carrying out corporate transactions or operations (article 6(1)(f) GDPR). | Any information necessary to carry out these purposes. |
Some of the data used for the purposes described above is collected through cookies and similar technologies. For more information, see Section 11 (Cookies).
3. Data Storage and Protection
How is my data stored and protected?
We may process your personal data by both automated and manual means, and store it on our own premises and on our service providers' servers. We use appropriate technical and organizational measures to prevent your personal data from being lost, misused, or altered. In some cases, we also use encryption and pseudonymization. No transmission over the internet is ever 100% secure.
We keep personal data processed for Service Delivery for no more than three (3) years from your last interaction with our Services, or from when your subscription expires. If you keep using the Services after your subscription expires, that three-year period restarts from your most recent interaction. When the period ends, unless a specific legal obligation requires us to keep the data longer, we delete your account, and your data is either deleted or anonymized. Where your Service plan includes specific retention terms for User Content, your User Content is kept according to those terms instead.
We keep personal data processed for Service Improvement, Service Integrity, and Marketing for no more than three (3) years from your last interaction with our Services, or from when your subscription expires. If you keep using the Services after your subscription expires, that period restarts from your most recent interaction.
We keep personal data processed for Troubleshooting for no more than one (1) year from your last interaction with our Services, or from when your subscription expires. If you keep using the Services after your subscription expires, that period restarts from your most recent interaction.
We keep personal data processed for Customer Support for no more than five (5) years from when we close your request.
We keep personal data processed for Compliance for no more than ten (10) years from your last interaction with our Services, or from when your subscription expires. If you keep using the Services after your subscription expires, that period restarts from your most recent interaction.
We keep personal data processed for Defense for no more than ten (10) years from your last interaction with our Services, or from when your subscription expires. If you keep using the Services after your subscription expires, that period restarts from your most recent interaction.
When the retention period ends, unless a specific legal obligation requires us to keep the data longer, we delete or anonymize the data.
4. Your Choices About How Your Personal Data is Used
What choices do I have about how my personal data is used?
We need your personal data for Service Delivery and Customer Support, or else you won't be able to use our Services. Some of the data you provide is also used for Compliance and Defense, based on our legitimate interest or to meet our legal obligations.
Where we rely on your consent to process your personal data, providing that data is optional, and you can withdraw consent at any time. If you choose not to provide your data, you can still use our Services.
Where we rely on our legitimate interest as the legal basis for processing your personal data, you can object to this processing at any time. See Section 7 (Your Rights) for how.
5. Recipients of Your Personal Data
Who do we share your data with?
We may share your personal data in certain cases, with the following recipients:
- Vendors that carry out activities related to, or needed for, our business and operations. Depending on the vendor, they act either as outsourced data processors we've appointed in writing in line with Applicable Privacy Laws (for example, IT or storage providers), or as independent data controllers (for example, advertising networks and platforms).
- If we go through a corporate transaction, such as a merger, acquisition, reorganization, sale of assets, or related due diligence, your personal data may be transferred to the new owner, and shared with our advisers and any prospective buyer's advisers as part of that process.
- Public, judicial, or police authorities, within the legal limits.
- Other parties, where necessary, if we believe your actions go against our user agreements or policies, if we believe you've broken the law, or if we believe it's necessary to protect our rights, property, and safety, or those of our users, the public, or others.
- Professional advisors, where necessary to get advice or otherwise protect and manage our business interests.
- Our corporate affiliates under common ownership and control.
- Where the Service involves live streaming or broadcasting, hosts or other stakeholders (for example, sponsors) whose streams you attend through your use of the Services.
For more on how your data may be shared with third parties through tracking technologies, see Section 11 (Cookies).
We won't disclose your personal data for any reason beyond those listed above, unless we need to for a legal obligation, or you give us your consent.
6. International Transfers
Is my data transferred internationally?
You submit your data directly to us, a US-based data controller. So even if you live outside the US, this does not amount to an international data transfer.
When we store your personal data outside your country of residence, we follow Applicable Privacy Laws to make sure that data still gets an adequate level of protection.
When we use a provider based outside the EEA or the UK, we make sure EEA and UK users still get the same level of protection they'd have within those regions, using at least one of these safeguards:
- Sending your data only to countries that the European Commission or the UK Information Commissioner's Office has recognized as providing an adequate level of data protection.
- Requiring our providers to sign a Data Processing Agreement that includes the relevant Standard Contractual Clauses, or another legally valid data transfer mechanism, committing them to protect EEA/UK data to the standard expected in the EEA/UK.
Contact us if you'd like more information on these safeguards.
7. Your Rights
What rights do I have?
Depending on where you're located, you have certain rights over your personal data. You can exercise these rights at any time, free of charge, subject to the limitations and exceptions in Applicable Privacy Laws. Your rights may include:
- Right of access. You can ask for information about how we process your personal data, and get a copy of that data.
- Right to rectification. You can ask us to update, correct, or integrate your personal data.
- Right to erasure. You can ask us to delete your personal data.
- Right to restriction of processing. You can ask us to limit how we process your personal data.
- Right to data portability. You can ask for a portable electronic copy of your personal data.
- Right to object. Where we rely on our legitimate interest to process your personal data, you can object to that processing, in whole or in part, based on your particular situation. This includes the right to object to us processing your data for direct marketing, including profiling.
- Right to withdraw your consent. Where we rely on your consent to process your personal data, you can withdraw that consent at any time. This won't affect the lawfulness of any processing we carried out before you withdrew it.
You also have the right to lodge a complaint with the relevant national Data Protection Authority, or another applicable regulator where you live.
To exercise your rights, submit a request through this form.
We may take reasonable steps to verify your identity before responding to your request, such as asking for information that matches what we already have on file about you. If you're submitting a request as an authorized agent, we may ask for proof of your authorization, or contact the person the request is about to confirm it, in line with Applicable Privacy Laws.
If you live in the US, see Section 10 (Additional Information for US Residents) for details on your privacy rights and how to exercise them.
If the UK GDPR applies to you, you can also lodge a data protection complaint with us about how we process your personal data, or about our compliance with data protection law, through this form.
If you are located or reside in the EEA, you may also contact our EU Representative appointed under Article 27 GDPR, Bending Spoons S.p.A., with registered office at Via Nino Bonnet 10, 20154 Milan, Italy, at eurepresentative.streamyard@bendingspoons.com, on all matters relating to the processing of your personal data, including the exercise of your rights under the GDPR.
- Children's Personal Data
Can I use the Services if I'm under 16?
Our Services aren't meant for anyone under 16. We don't knowingly collect or process personal data from children without parental consent. If you believe we've received personal data from a child under 16, contact us. If we learn that a user is under 16, we'll take reasonable steps to delete their data and close the account.
9. Third-party Websites and Services
What happens when I use third-party websites or services?
Our Services may include links to other websites or services run by third parties, as well as to integration and partner providers connected to a particular stream. If you click these links, whether to third-party websites, content, apps, or integrations, those third parties may collect or share data about you. We don't control those third-party websites or content, and this privacy policy doesn't cover how they process your data. We have no control over or responsibility for the actions or privacy policies of any third-party websites or services.
Where you access or use third-party services or integrations provided by a host, advertiser, sponsor, or anyone else taking part in a stream, we encourage you to read that party's privacy policy.
Third-party services
If you link a Service to a third-party account, we may collect and store some limited information to make that connection work. Your use of a third-party service is subject to that party's own terms and privacy policy.
Where a Service lets you connect a YouTube channel to your account, we'll access certain information about your channel from YouTube, using YouTube API Services. This may include your channel title, channel thumbnail, username or profile ID, email, access tokens, and live broadcasts, including information tied to your live videos, such as comments, live viewer counts, ingest address, and stream name. This connection also allows third parties to publish advertisements. If you connect a YouTube channel, see Google's privacy policy for more detail. When you disconnect a YouTube channel from a Service, we'll delete the stored data tied to that channel. You can also revoke access yourself, through Google's security settings page.
- Additional Information for US Residents
What do I need to know as a US resident?
Some US states have their own privacy laws that require specific disclosures and give their residents certain rights ("State Privacy Laws"). This section applies to you if you live in California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia.
a) Collection of Personal Data
As explained elsewhere in this policy, we collect different categories of personal data depending on how you interact with us. Here, we explain where that data comes from.
- We collect information you give us directly. This includes identity and contact data, account data, user-generated content, and feedback. For example, we collect this when you create an account, make a purchase, fill out a form, post content through our Services, contact us, or sign up for rewards or marketing communications.
- We automatically collect information about your interactions with us or our Services. This includes transaction data (such as details of a purchase) and online activity and technical data (such as your IP address, browser type, and other technical details about the devices you use to access the Services). We collect this through tracking technologies like cookies, pixels, and SDKs. See Section 11 (Cookies) for more.
- We collect information we get from other sources. This includes data from identity verification services, advertising networks, data analytics providers, data enrichment vendors, publicly available sources, and our corporate affiliates. If you create or log into your account through a third-party platform, such as YouTube, we'll also have access to certain information from that platform, based on the authorization process that platform sets.
- We may derive information or draw inferences about you based on the information we collect. For example, we may make inferences about your approximate location based on your IP address.
b) Use and Disclosure of Personal Data
Section 2 (What data is collected about me, why, and on what legal basis) already describes the categories of personal data we collect and how it’s used. Some State Privacy Laws require us to lay out this same information in table form too, so we've done that below. We've also added more detail on our targeted advertising and analytics activities.
Use and Disclosure for Business Purposes
| Category of Personal Data | Recipients of Personal Data | Use of Personal Data |
|
|
|
We don't collect information considered "sensitive" under State Privacy Laws, and we don't use or disclose it to infer characteristics about you. We don't "sell," "share," or use sensitive personal data for targeted advertising.
We may disclose aggregated or de-identified information that can't reasonably be used to identify you. We keep and use this information only in de-identified form, and we won't try to re-identify it, except as permitted by law.
We keep personal data for as long as needed to carry out the purposes we originally collected it for, and for the other purposes described in Section 3 (Data Storage and Protection).
Sales, Sharing, and Targeted Advertising Activities
We disclose certain categories of personal data to extend the reach of our own marketing campaigns. To do this, we may share information collected through cookies, pixels, SDKs, and similar tracking technologies, including your device identifiers, IP address, and web browser and mobile network information, with third parties so they can show you ads about our Services on other companies' websites and apps.
Under State Privacy Laws, these disclosures may count as sales, sharing, or use of personal data for targeted advertising. The table below shows the categories of personal data we disclose for these purposes, and the categories of third parties that receive it.
| Category of Personal Data | Category of Third Parties |
|
Advertising and marketing partners |
We don't sell, share, or use personal data for targeted advertising if we know the consumer is under 18.
c) Your Rights Under State Privacy Laws
Opt Out of Sales, Sharing, and Targeted Advertising
Some of the activities in this privacy policy may count as sales or sharing of your personal information, or use of it for "targeted advertising," under the law that applies to you. You, or your authorized agent, can opt out of these activities through the link "Your Privacy Choices" in our website's footer. Your opt-out choice is tied to your browser, so you'll need to opt out again if you visit our website from a new device or browser, or if you clear your browser's cookies.
You can also opt out by visiting our website with a legally recognized universal opt-out signal turned on, such as the Global Privacy Control. If you're not logged into your account, we'll only apply that signal to cookie-based sales, sharing, and targeted advertising for the specific browser or device you're using.
Access, Correction, and Deletion
You have the right to ask for more information about, and access to, your personal data, including in a portable format. You also have the right to ask us to delete your personal data, and to ask us to correct any of it that's inaccurate.
If you are a resident of Connecticut, Minnesota, or Oregon, you can also ask for a list of the third parties we've disclosed your personal data to. Rhode Island residents can also learn more about these third parties.
To exercise these rights, submit a request through this form.
Nonretaliation
We won't discriminate or retaliate against you for exercising your privacy rights.
Appeals
If we deny your request, you can appeal through this form. If you're not satisfied with the outcome of your appeal, you can contact the attorney general in the state where you live.
Authorized Agents
If you're an authorized agent making a request to opt out of sales, sharing, or targeted advertising on behalf of someone else contact us through this form.
If you reside in California, you can also name an authorized agent to submit an access, deletion, or correction request on your behalf.
We may ask an authorized agent for proof of their authority, such as a valid power of attorney or signed permission from the subject of the request, and in some cases, we may contact the subject of the request directly to confirm their identity or the agent's permission. If you're an authorized agent making an access, correction, or deletion request on behalf of a California resident, contact us through this form.
Contact Us
If you have questions, comments, or concerns about this policy or our privacy practices, reach us through this form.
11. Cookies
How do you use cookies, and what control do I have?
In this privacy policy, by "cookies" we mean any tracking technology that stores or accesses information on your device. This includes SDKs, tracking pixels, HTML5 local storage, and local shared objects.
Types of cookies used by the website
To see all the cookies installed through our Services, check the link Your Privacy Choices in our website's footer.
Cookie consent and settings
If you're located in the EEA, the UK, or another jurisdiction where prior consent is required, we'll ask for your consent before placing non-essential cookies and similar technologies. You can give, refuse, or withdraw your consent at any time, through our cookie banner or our cookie preference center. These are accessible via the link Your Privacy Choices in our website's footer, and within our apps where available.
If you withdraw consent, we'll stop collecting your data through those cookies. We'll still process the data we collected before you withdrew it.
If you're located in the United States or another jurisdiction where prior express consent isn't required, you can opt out at any time via the link Your Privacy Choices in our website's footer, and within our apps where available.
Where the law requires it, we also recognize and honor Global Privacy Control signals as a valid opt-out request.
Browser-level cookie management (all users)
You can disable technical cookies, in whole or in part, through your browser's own settings. If you don't allow technical cookies, you may not be able to use the website, view its content, or take advantage of its services. Blocking technical cookies may mean some services or features don't work properly, and you may need to re-enter certain information or preferences each time you visit. You'll also need to reset your cookie preferences if you switch devices or browsers.
You can find out how to manage cookie settings on these browsers:
- Chrome
- Firefox
- Microsoft Edge
- Safari (iPhone, iPad, Mac)
For more on limiting third-party cookies in your browser, visit www.youronlinechoices.com. Once there, go to the "Your ad choices" section to see the list of third parties that install cookies on your browser, and manage your consent for each one individually ("On/Off"). You can also expand the "Info" section for more detail on each third party's privacy and cookie policies.
- Changes to this privacy policy
How will I know if this policy changes?
We may change, update, or add to this privacy policy, in whole or in part, and we'll notify you of any changes in line with Applicable Privacy Laws. If we make changes, we'll update the date at the bottom of the privacy policy. In some cases, we may also notify you in another way, such as a pop-up on our website or an email.
Last updated: October 1, 2026
Related to