Privacy Policy

StreamWizard is run by Dienes Péter E.V., a sole trader trading as "StreamWizard", of Kőszeg utca 55. 1/8, 1144 Budapest, Hungary. We are the controller of the personal data described in this policy, except where we say that another company is responsible for its own processing (for example Paddle, see section 5).

For any privacy question or request, email [email protected]. We have not appointed a data protection officer.

The table lists each kind of data, why we use it and the legal basis under the EU and UK GDPR. "Contract" means we need the data to provide the Service you signed up for; "legitimate interests" means we use it for a reasonable purpose that does not override your rights.

You have to give us an email address to have an account, and you have to connect a platform to use the features that rely on it. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

When a streamer connects a platform, the platform sends us events from their channel or server, for example chat messages, follows, subscriptions or Discord messages, including the usernames and IDs of the people involved. We use this information only to run the flows, alerts and Collectables the streamer has set up, and to investigate errors. The streamer decides which features use it.

If you are a viewer, you can use your rights (section 8) by emailing [email protected] with your platform and username. In particular, you can ask us to delete your data, including your messages kept in our event logs, or object to us keeping them. If you don't want a streamer's StreamWizard bot to reply to or message you, tell the streamer, or email us and we will pass it on. You can also ask the streamer directly about any of this.

We use these cookies and browser storage items:

Paddle's checkout script (Paddle.js) is loaded on the Subscription page so that the checkout can open, and it may use its own cookies; see Paddle's Privacy Notice.

We only use PostHog analytics and session recordings in your browser if you accept them in the cookie banner. Until then PostHog collects nothing and stores nothing in your browser except your answer. You can change your answer at any time with the Cookie settings button, also found in the footer of the public pages. The product events in section 2 are recorded by our servers and are not affected by this choice.

We do not use advertising cookies, and no third party uses our pages to track you across other websites. We do not currently respond to browser "Do Not Track" signals.

We use these service providers. They process personal data on our behalf under data processing agreements and only for the purposes below.

We also share personal data with:

• Paddle, our reseller and Merchant of Record, when you buy or manage a subscription. Paddle is responsible for the data it collects at checkout (including payment details) as an independent controller, under Paddle's Privacy Notice. We share your email address and our internal account identifiers with Paddle to set up your checkout and link your subscription to your account.
• The platforms you connect (Twitch, Discord), when your flows send messages or run commands there on your behalf. They handle that data under their own privacy policies. OBS Manager talks to OBS on your own computer through a browser source.
• Authorities or others when the law requires it, or to protect the rights and safety of our users or the Service.
• A successor, if StreamWizard is transferred to someone else, who must then respect this policy.

We keep the Service's data in the European Union. Some providers are based in the United States or may access data from there: Resend stores email data in the United States and covers the transfer with the EU Standard Contractual Clauses and its certification under the EU-U.S. Data Privacy Framework (including the UK Extension). DigitalOcean is certified under the EU-U.S. Data Privacy Framework and its data processing agreement falls back to the Standard Contractual Clauses. Google Cloud's and Google Workspace's data processing terms (Google's Cloud Data Processing Addendum) include the Standard Contractual Clauses. Paddle transfers data under its own Privacy Notice. You can ask us for more information about these safeguards.

• Account data, your content and connected platform data: while your account exists. When you disconnect a platform, we delete its access tokens straight away and unlink your platform identity from your account. We keep the unlinked record (platform user ID, username, display name and profile picture link) so it can be reused if you connect the same platform account again; email us to have it deleted.
• Login codes: a code and its sign-in link work once and for 15 minutes. Only the hash of your latest code is kept; it is replaced when you log in or request a new code.
• Community data and event logs: event logs, which include chat messages and usernames, are kept in full for 90 days. After that we keep only a slim record for 2 years (the event type and time, and the platform IDs of the channel and the person involved, without names or message texts), then delete it. This also applies after the streamer's account is deleted. Viewers' platform identity records are shared by every streamer whose community they are part of, and are kept without a time limit; email us to have yours deleted.
• Billing data: while your account exists, and afterwards for as long as needed for legal, tax and accounting obligations.
• Emails: Resend keeps sending logs for a limited time. Support emails stay in our inbox as long as we need them to answer you and keep a record of your request; email us to have them deleted.
• Analytics: PostHog keeps analytics events for 1 year and session recordings for 30 days.

Depending on where you live, you have the right to:

• get a copy of your personal data and information about how we use it;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• receive data you gave us in a structured, machine-readable format, or have it sent to another provider;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting earlier processing;
• complain to a data protection authority, in particular in the country where you live or work. Our lead authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu); in the UK it is the Information Commissioner's Office.

To use any of these rights, or to delete your account, email [email protected] from the email address of your account. We answer within one month (we may extend this by two months for complex requests and will tell you if we do), and we may ask you to confirm your identity. If you want to complain about how we handled your data, email us; we confirm receipt within 30 days and tell you the outcome.

We do not sell personal data or share it for cross-context behavioral advertising, and we will not treat you differently for using your rights.

StreamWizard accounts are for people aged 16 or older (see the Terms of Service). The Service is not directed at children, and we do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact us and we will delete it.

We protect personal data with technical and organizational measures, including encrypted connections (HTTPS), databases and backups encrypted at rest, login codes and connection passwords stored only as hashes, session cookies that scripts cannot read, permission checks on the server, and access to production systems limited to the people who run StreamWizard. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

We will update this policy when our processing changes. The date at the top shows the latest version. If we make important changes, we will tell you by email or in the app before they take effect.

For any question about this policy, email [email protected].