Privacy Policy

1. Introduction

MNPLY Stream Companion ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our streaming management service.

By using our service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Google Account Information

When you sign in with Google, we collect:

• Email address
• Full name
• Profile picture URL
• Google account ID

2.2 YouTube API Data

When you connect your YouTube channel, we collect and store:

• YouTube channel ID, title, and thumbnail
• OAuth access and refresh tokens (encrypted at rest using AES-256-GCM)
• Authorized OAuth scopes
• Live broadcast information (IDs, titles, descriptions, scheduled times)
• Video metadata (titles, descriptions, tags, categories)
• RTMP stream keys and ingestion URLs

2.3 Video and Content Data

• Uploaded video files and thumbnails
• Video metadata (filename, size, duration, resolution)
• Overlay images and configurations

2.4 Usage and Analytics Data

• Stream analytics (duration, bitrate, bytes transferred)
• Worker performance metrics (CPU, RAM, network usage)
• Job processing logs and status

3. How We Use Your Information

We use the collected information for the following purposes:

• Authentication: To verify your identity and provide secure access to our service
• YouTube Integration: To manage your YouTube live streams, broadcasts, and video metadata
• Video Processing: To store, transcode, and stream your video content
• Service Delivery: To provide core functionality including stream management, scheduling, and broadcasting
• Service Improvement: To analyze usage patterns and improve our service
• Communication: To send service-related notifications and updates

4. YouTube API Services

Our service uses YouTube API Services to integrate with your YouTube channel. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service.

YouTube Scopes Requested:

• https://www.googleapis.com/auth/youtube - To manage your YouTube account, create/update live broadcasts, and manage video metadata

Your use of YouTube data is also subject to the Google Privacy Policy.

Revoking Access: You can revoke our access to your YouTube data at any time by visiting your Google Account Permissions or by disconnecting your channel within our application.

5. Data Storage and Security

5.1 Where We Store Your Data

• AWS S3 (South America - São Paulo / sa-east-1): Video files, thumbnails, and overlay images
• PostgreSQL Database: User accounts, channel information, stream metadata, and analytics
• Redis: Job queuing and temporary session data

5.2 Security Measures

We implement industry-standard security measures to protect your data:

• Token Encryption: OAuth access and refresh tokens are encrypted at rest using AES-256-GCM encryption
• Secure Communication: All data transmission uses HTTPS/TLS encryption
• Access Controls: Database access is restricted to authorized services only
• Regular Updates: We keep our dependencies and infrastructure up to date with security patches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. Data Sharing and Disclosure

6.1 Third-Party Services

We share your data with the following third-party service providers:

• Amazon Web Services (AWS): For cloud infrastructure and file storage
• Google: For authentication and YouTube API integration
• Vercel (if applicable): For application hosting and deployment

These service providers are bound by data protection agreements and are only authorized to use your data as necessary to provide services to us.

6.2 We Do NOT

• Sell your personal information to third parties
• Share your data with advertisers
• Use your data for marketing purposes without consent
• Share data between users (your content is private to you)

6.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• User Account Data: Until you delete your account
• YouTube OAuth Tokens: Until you disconnect your channel or delete your account
• Video Files: Until you delete them or delete your account
• Analytics Data: Retained for operational purposes, typically up to 90 days for active monitoring

When you delete your account, we permanently delete all your personal data, including files stored on S3, within 30 days.

8. Your Rights and Choices

You have the following rights regarding your personal data:

8.1 Access and Portability

You have the right to access your personal data and receive a copy in a structured, machine-readable format. Use the "Export My Data" feature in your account settings.

8.2 Correction

You can update your profile information (name, email) through your account settings or by contacting us.

8.3 Deletion

You have the right to request deletion of your personal data. You can delete your account and all associated data through your account settings or by contacting us at rapz@ward.live.

8.4 Revoke YouTube Access

You can disconnect your YouTube channel at any time, which will revoke our access to your YouTube data and delete stored OAuth tokens.

8.5 Objection and Restriction

You have the right to object to or request restriction of certain data processing activities. Contact us to exercise this right.

9. International Data Transfers

Your data may be transferred to and stored on servers located in different countries, primarily in South America (sa-east-1 region). We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

10. Children's Privacy

Our service is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically.

Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: rapz@ward.live
• Website: yt.mnply.com.br

13. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making

To exercise these rights, contact us at the email address provided above.

14. LGPD Compliance (Brazilian Users)

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD):

• Confirmation of data processing
• Access to your data
• Correction of incomplete or inaccurate data
• Anonymization, blocking, or deletion of data
• Portability of data to another service provider
• Information about public and private entities with which we share data
• Information about the possibility of not providing consent and consequences
• Revocation of consent

To exercise these rights, contact us at the email address provided above.