This Privacy Policy explains what personal data the operator of the StreamSona service (“StreamSona,” “we,” “us”) collects, how we use it, and the choices you have. It applies to the StreamSona websites and services (the “Platform”). By using the Platform you acknowledge this policy.
1. Data we collect
Account data
When you sign in with Google we receive your name, email address, and profile picture, and we create an account identifier for you. We use this to operate your account and to contact you about your account.
Camera and microphone streams
When you start a studio session, your camera and microphone streams are transmitted in real time to our AI model provider to generate your transformed persona. We do not record or store your camera or microphone streams; they are processed transiently to produce the live output, and we do not use them to train AI models. What happens to the output after it leaves the Platform (for example, a broadcast you send to Twitch or OBS) is under your control.
Character images
Character images you upload, and character images generated for you, are stored so you can reuse them. Do not upload images of other people without their consent — see the Acceptable Use Policy.
Usage and billing data
We record session metering data (for example session start/stop times and seconds consumed), credit balances and transactions, subscription status, and the lifecycle of checkout attempts. Payments are processed by third-party payment providers; we receive transaction status, a customer reference, and any billing country you provide during checkout, but never your full card number. Each provider’s processing is described in its own privacy policy.
Analytics and attribution data
We load Google Analytics 4, Microsoft Clarity, and Umami when Platform pages load to understand page visits and product interactions. Separately, our own analytics database stores anonymous and signed-in page and product events. We set 30-day HttpOnly visitor and attribution cookies, and use a per-tab session identifier. Attribution may include campaign parameters (UTM source, medium, campaign, term, and content), Google or Microsoft advertising click identifiers, search engine, the external referring URL without its query string, and a landing-page path containing only marketing parameters. First touch is retained and a later meaningful external source may update last touch.
For each event we may store the visitor, tab session and account identifiers, event time and properties, approximate two-letter country code from Cloudflare request metadata, locale, device category, raw IP address, and the complete browser User-Agent string (subject to a technical length limit). Event properties are limited to short primitive values; we do not intentionally send prompts, image URLs, names, or email addresses as event properties. Country indicates the location associated with a request or billing address, not nationality.
Logs and cookies
Our infrastructure may also keep standard technical request logs (which can include IP address, browser type, timestamps, and errors) for security, debugging, and abuse prevention. We use cookies for sign-in sessions, preferences, the 30-day visitor identifier, and first/last-touch attribution. Internal testers can use ?notrack=1 to stop analytics in that browser and ?notrack=0 to resume it.
Support
If you contact support@streamsona.com, we keep the correspondence to handle your request.
2. How we use data
- to provide, operate, and secure the Platform, including real-time persona generation and session metering;
- to process payments, grant credits, and manage subscriptions;
- to understand acquisition sources and product usage and improve the Platform;
- to prevent fraud and abuse and to enforce our Terms of Service and Acceptable Use Policy;
- to comply with legal obligations, including mandatory reporting of child sexual abuse material to NCMEC and/or law enforcement; and
- to fix bugs and improve the reliability of the service.
Where the GDPR applies, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, and your consent where required. We do not sell your personal data, and we do not use it for third-party advertising.
3. Who we share data with
We share personal data only with service providers who process it for us and only as needed to run the Platform:
- our payment providers — payment processing;
- Google — sign-in;
- Google Analytics, Microsoft Clarity, and Umami — usage analytics loaded directly on Platform pages;
- our hosting, storage, and database providers (cloud infrastructure); and
- our AI model provider — real-time processing of your camera/microphone streams and character images to generate output.
We may also disclose data to comply with law or lawful requests, to enforce our terms, to protect the rights, property, or safety of any person, or as part of a merger, acquisition, or asset sale. We will provide the current list of processor categories on request.
4. International transfers
Our providers may process data in the United States and other countries. Where data of EEA/UK residents is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
5. Retention
Anonymous analytics events and associated IP and User-Agent data are retained on a long-term basis while useful for growth analysis, security, fraud prevention, and operation of the Platform; we do not currently run an automatic analytics deletion schedule. Account, checkout, billing, subscription, and metering records are kept while your account exists and as required for fraud prevention and legal, tax, and accounting purposes. Camera and microphone streams are not stored. Character images are kept until you delete them or your account. To delete your account, email support@streamsona.com; we will delete or anonymize your personal data except where the law requires us to keep it (for example billing records).
6. Your rights
Depending on where you live (including under the GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to processing, to withdraw consent where consent is the applicable legal basis, and to complain to your data-protection authority. California residents: we do not sell or share personal data as defined by the CCPA, and we do not use sensitive personal data other than to provide the service. To exercise a right, email support@streamsona.com; we may need to verify your identity first. We do not discriminate against you for exercising your rights. We do not respond to browser Do Not Track signals.
7. Children
The Platform is restricted to users 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it and terminate the account. If you believe a minor is using the Platform, contact support@streamsona.com.
8. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and signed, time-limited tokens for live sessions. No system is perfectly secure, and we cannot guarantee absolute security; you are responsible for keeping your account credentials safe.
9. Changes
We may update this policy from time to time. The “Last updated” date above reflects the current version; for material changes we will give notice by email or through the Platform.
10. Contact
Privacy questions and requests: support@streamsona.com.