Legal
Privacy Policy
Last updated: May 10, 2026
This Privacy Policy explains how VIZUAL LIVE ("we", "us") collects, uses, shares and protects personal data when you use vizuallive.com, the VIZUAL LIVE studio, watch pages, channel pages and related services (the "Service"). It applies to creators with an account, guests invited into a stream, and viewers of public streams.
1. Who Is the Controller
VIZUAL LIVE is the data controller for personal data processed about creators and viewers. For Customer Content you broadcast (e.g. recordings of guests, chat messages, uploaded clips), we act as a processor on your behalf — you are the controller of that content and responsible for the lawful basis on which it is collected.
2. Data We Collect
a. Account & profile
- Email, password hash, display name, channel handle, profile image, bio.
- OAuth identifiers when you sign in with Google or connect platforms (YouTube, Twitch, Kick, Facebook, LinkedIn).
- Workspace and team membership.
b. Broadcast & production data
- Live audio/video sent through your studio session, scene layouts, brand assets and overlays.
- Recordings, multi-track exports, generated clips, thumbnails.
- Captions, transcripts, AI-generated show notes and summaries.
- Chat messages, reactions, polls, tips and viewer comments associated with your streams.
- Stream health telemetry (bitrate, packet loss, codecs, region, device type) used for diagnostics.
c. Billing data
- Plan, subscription status, invoices, billing email and country, tax ID.
- Payment is processed by Stripe; we do not store full card numbers.
- For viewer tips routed through Stripe Connect: payout account identifiers and aggregated transaction data.
d. Usage & device data
- IP address, approximate location (country/region), browser and OS, device capabilities (camera, mic, GPU).
- Pages visited, features used, error logs, security events.
e. Viewer & guest data
- If you watch a public stream: IP, device info, viewer count signals, chat messages and reactions you submit.
- If you join as a guest: name, email (when invited by token), camera/mic stream while in the room.
- If you register for a webinar: name, email, and any custom registration fields the host configures.
3. How We Use Data
- Operate the Service — authenticate you, route live video through LiveKit, transcode and store recordings, deliver streams to your chosen destinations, render watch and channel pages.
- Billing — process subscriptions, usage charges, tips and tax compliance via Stripe.
- AI features — generate captions, clips, transcripts and show notes from your recordings using the AI providers listed below. Your Customer Content is not used to train third-party foundation models.
- Safety & security — detect abuse, prevent fraud, enforce our Terms, respond to legal requests.
- Product improvement — diagnose bugs, measure performance, prioritise features. We use aggregated and de-identified data wherever possible.
- Communication — service announcements, security alerts, billing receipts, and (with consent) product updates.
4. Legal Bases (EEA / UK)
- Contract — to provide the Service you signed up for.
- Legitimate interests — security, fraud prevention, basic product analytics, defending legal claims.
- Consent — non-essential cookies, marketing emails, optional integrations.
- Legal obligation — tax records, lawful requests from authorities.
5. Sub-processors & Sharing
We share data with vetted infrastructure providers strictly to deliver the Service:
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, file storage | EU / US |
| LiveKit | Real-time WebRTC media routing & recording | Global edge |
| Cloudflare | CDN, DDoS protection, edge compute (Workers) | Global edge |
| Stripe | Subscription billing & viewer tip processing | Global |
| OpenAI & Google AI | Captions, transcripts, clip suggestions, show notes | US |
| Sentry | Error monitoring & diagnostics | EU / US |
| Destination platforms | Delivering streams you simulcast (YouTube, Twitch, Kick, Facebook, LinkedIn, custom RTMP) | Per platform |
We do not sell or rent personal data, and we do not share it with advertising networks. We may disclose data when required by law, to enforce our Terms, or to protect rights and safety.
6. International Transfers
Personal data may be processed outside your country, including in the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards with our sub-processors.
7. Retention
- Account data — while your account is active, plus up to 90 days after deletion for backups and legal records.
- Recordings, clips, transcripts — until you delete them or your plan's storage policy expires.
- Chat & engagement events — typically retained with the associated stream/clip.
- Billing records — up to 10 years where required by tax law.
- Diagnostic logs — typically 30–90 days.
8. Your Rights
Depending on where you live (e.g. EEA, UK, California, Brazil), you may have the right to:
- Access, correct, export, or delete your personal data.
- Object to or restrict certain processing.
- Withdraw consent for optional processing.
- Lodge a complaint with your local data protection authority.
Most actions can be performed from your dashboard. Otherwise, email privacy@vizuallive.com and we'll respond within 30 days. If you appear in a creator's recording, please contact that creator first; we'll assist where we are technically able.
9. Security
We use HTTPS/TLS for transport, encryption at rest for stored recordings, hashed credentials, row-level security on the database, scoped access tokens for destination platforms, and least-privilege access for our team. No system is 100% secure; we encourage strong, unique passwords and enabling SSO where available.
10. Children
The Service is not directed to children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can delete it.
12. AI Processing Notice
Captions, transcripts, magic clips and show notes are generated by AI models hosted by OpenAI and Google. Audio and transcript text are sent to those providers for the minimum time needed to produce the output and are not used to train their foundation models under our agreements. AI output may be inaccurate; review before publishing.
13. Changes
We may update this policy. Material changes will be communicated via the Service or by email at least 14 days before they take effect.
14. Contact
Vizual Live
221 Mechanic St, Bristol, CT 06010, USA
Privacy questions or rights requests: privacy@vizuallive.com. General support: support@vizuallive.com.