Privacy Policy
Your privacy matters to us. This policy explains how Stream Factory collects, uses, and protects your information.
Important Notice About Your Data
Stream Factory is committed to protecting your privacy. We do not use your YouTube channel data, video content, or any personal information for AI training, machine learning, or any automated decision-making processes. Your content is used solely to provide our streaming services.
1. Introduction
Welcome to Stream Factory ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud-based streaming platform service ("Service") available at unireplay.com and related applications.
Stream Factory is a Software-as-a-Service (SaaS) platform that enables content creators to broadcast pre-recorded video content as live streams on platforms including YouTube, Twitch, and Facebook. This Privacy Policy applies to all users of our Service, including both free trial and paid subscribers.
By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Service.
2. Information We Collect
2.1 Information You Provide Directly
We collect information that you voluntarily provide when you:
- Create an Account: Email address, password (stored in hashed format), name, and optional profile information.
- Subscribe to Our Service: Billing information processed through Stripe (see Section 5).
- Upload Content: Video files, titles, descriptions, and metadata for your streaming playlists.
- Contact Us: Any information you provide when contacting our support team.
- Configure Streams: Stream settings, schedules, quality preferences, and platform configurations.
2.2 Information Collected Automatically
When you access our Service, we automatically collect:
- Usage Data: Stream duration, storage usage, bandwidth consumption, and feature utilization for billing and service optimization.
- Log Data: IP address, browser type, operating system, referring URLs, pages visited, and access times for security and debugging purposes.
- Device Information: Device type, unique device identifiers, and browser settings.
- Stream Metrics: Technical metrics including bitrate, frame rates, and stream health status for service reliability.
2.3 Information from Third-Party Platforms
When you connect your streaming platform accounts (YouTube, Twitch, Facebook), we receive certain information as authorized by you during the OAuth authentication process. This information is detailed in Section 4 below.
3. How We Use Your Information
We use the information we collect for the following purposes:
Service Provision
- To create and manage your account
- To process and encode your video content for streaming
- To transmit your streams to connected platforms
- To monitor stream health and provide automatic recovery
- To store and organize your playlists and schedules
Billing and Payments
- To process subscription payments via Stripe
- To track usage for metered billing features
- To send billing-related communications
- To prevent fraud and unauthorized transactions
Communication
- To send service-related notifications and alerts
- To respond to your inquiries and support requests
- To send product updates and feature announcements (with opt-out option)
Service Improvement
- To analyze usage patterns and improve our platform
- To identify and fix technical issues
- To develop new features based on user needs
What We Do NOT Do With Your Data
- We do NOT sell your personal information to third parties
- We do NOT use your data for AI training or machine learning
- We do NOT share your content with other users without consent
- We do NOT use your YouTube data beyond providing our streaming service
- We do NOT analyze your video content for advertising purposes
4. YouTube API Services
Google API Services User Data Policy Compliance
Stream Factory's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4.1 YouTube Data We Access
When you connect your YouTube account via OAuth 2.0, we request access to the following scopes with your explicit consent:
- youtube.readonly: To read your channel information and verify account ownership.
- youtube.force-ssl: To create and manage live broadcasts on your behalf.
- youtube.upload: To manage stream configurations (not for video uploads).
4.2 How We Use YouTube Data
YouTube data is used exclusively for:
- Creating and configuring live broadcasts on your YouTube channel
- Managing stream keys and RTMP configurations
- Monitoring broadcast status and health
- Displaying your channel information in our dashboard
4.3 YouTube Data Protection
Our Commitments Regarding YouTube Data:
- We NEVER send your YouTube data to any AI, machine learning, or automated analysis systems
- We NEVER share your YouTube credentials or channel data with third parties
- We NEVER use your YouTube data for purposes other than providing our streaming service
- We NEVER sell, rent, or lease your YouTube data to anyone
- We NEVER use your YouTube data for advertising or marketing purposes
- OAuth tokens are encrypted at rest using AES-256 encryption
- Access tokens are automatically refreshed and old tokens are invalidated
4.4 Revoking YouTube Access
You can revoke Stream Factory's access to your YouTube account at any time:
- Through your Stream Factory dashboard under Platform Connections settings
- Through your Google Account Security Settings
Upon revocation, we will delete your YouTube OAuth tokens and cease accessing your YouTube data. Any active streams to YouTube will be terminated.
4.5 YouTube Terms Compliance
Your use of our Service in connection with YouTube is also subject to:
5. Payment Processing (Stripe)
All payment processing is handled by Stripe, Inc. ("Stripe"), a PCI DSS Level 1 certified payment processor. Stream Factory does not store, process, or have access to your complete credit card numbers.
5.1 Information Shared with Stripe
- Your email address for receipt delivery
- Your name for billing purposes
- Subscription plan and pricing information
- Payment method details (collected directly by Stripe)
5.2 What We Receive from Stripe
- Stripe Customer ID (for subscription management)
- Subscription status and plan details
- Last 4 digits of your payment card (for display purposes only)
- Payment success/failure status
- Invoice and receipt information
5.3 Stripe's Privacy Practices
Stripe's collection and use of your payment information is governed by their privacy policy. We encourage you to review:
6. Data Hosting and Security
6.1 Infrastructure Provider
Stream Factory's infrastructure is hosted on Hetzner Online GmbH ("Hetzner") servers located in the European Union (primarily Germany and Finland). Hetzner is a German hosting company that adheres to strict European data protection standards.
For more information about Hetzner's data processing:
6.2 Security Measures
We implement industry-standard security measures including:
- Encryption in Transit: All data transmitted to and from our Service uses TLS 1.3 encryption.
- Encryption at Rest: Sensitive data including OAuth tokens and stream keys are encrypted using AES-256.
- Password Security: User passwords are hashed using Argon2id with industry-recommended parameters.
- Access Controls: Role-based access control and principle of least privilege for all systems.
- Network Security: Firewalls, DDoS protection via Cloudflare, and private network isolation.
- Monitoring: 24/7 infrastructure monitoring and automated security alerting.
- Regular Updates: Automated security patching and dependency updates.
6.3 Data Retention
- Account Data: Retained while your account is active and for 30 days after deletion request.
- Video Content: Deleted immediately upon your request or 30 days after account termination.
- Usage Logs: Retained for 90 days for debugging and then anonymized.
- Billing Records: Retained for 7 years as required by tax and accounting regulations.
- Support Communications: Retained for 2 years for quality assurance.
7. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal data under applicable data protection laws (including GDPR, CCPA, and other regional regulations):
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate personal data.
Right to Erasure
Request deletion of your personal data ('Right to be Forgotten').
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing of your personal data for specific purposes.
Right to Restriction
Request restriction of processing in certain circumstances.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
Right to Complain
Lodge a complaint with your local data protection authority.
To exercise any of these rights, please contact us at privacy@unireplay.com. We will respond to your request within 30 days.
7.1 Account Deletion
You can delete your account at any time through your dashboard settings. Upon deletion:
- Active streams will be terminated immediately
- Video content will be scheduled for deletion within 30 days
- Platform connections will be revoked
- Personal data will be removed according to our retention policy
- Aggregated, anonymized data may be retained for analytics
9. Third-Party Services
Our Service integrates with or may contain links to third-party services. This Privacy Policy does not apply to the practices of those third parties. We encourage you to review their privacy policies:
Google/YouTube
YouTube livestreaming integration
Stripe
Payment processing
Cloudflare
DDoS protection and CDN
Hetzner
Infrastructure hosting
10. International Data Transfers
Stream Factory primarily processes data within the European Economic Area (EEA). However, some of our service providers may process data outside the EEA. In such cases, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions for countries with equivalent data protection laws
- Binding Corporate Rules where applicable
For transfers to the United States (e.g., Stripe, Google), we rely on appropriate safeguards including the EU-US Data Privacy Framework where applicable, or Standard Contractual Clauses.
11. Children's Privacy
Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@unireplay.com.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email (for registered users)
- Display a prominent notice on our website
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:
For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@unireplay.com.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.