Privacy Policy
At NexStream, we believe in privacy by design. We strictly process your streaming signals and account telemetry to deliver low-latency multistreaming and will never sell your personal data.
No Data Selling
We never sell, rent, or monetize your personal credentials or subscriber logs.
Encrypted Ingest
Live WebRTC feeds and RTMP ingest streams are secured via TLS 1.3 / SRTP.
Creator Control
Full control to revoke third-party platform tokens and erase recordings anytime.
Overview & Commitment to Privacy
NexStream Inc. ("NexStream", "we", "us", or "our") is committed to safeguarding the privacy and security of all content creators, guests, and viewers who interact with our browser-based live production studio and multistreaming services.
This Privacy Policy sets forth our data collection practices, storage standards, lawful bases for processing under the EU General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
Information We Collect
We collect information in three distinct categories:
- Account Registration: Your full name, email address, password hash, organization name, and avatar picture.
- Billing Information: Payment card details, billing address, and tax identification numbers (processed securely by PCI-DSS compliant payment gateway Stripe; NexStream never stores raw credit card numbers).
- Broadcast Metadata: Stream titles, game categories, stream descriptions, guest display names, and scheduled broadcast times.
- Real-time Media Feeds: Ephemeral WebRTC audio/video feeds captured from your camera, microphone, or screen share to enable real-time encoding and relay to your selected destination servers.
- Network Telemetry: Ingest bitrate, round-trip time (RTT), dropped frame percentages, packet loss, video resolution, and encoder keyframe cadence used strictly for diagnostic alerts and performance tuning.
- IP address (used to dynamically route your feed to the geographically closest cloud ingest edge), browser type, operating system version, hardware acceleration capabilities, and crash reports.
How We Use Your Information
We process your data based on legitimate business purposes and contractual necessity to:
- Deliver Multistream Relay: Ingest, composite, transcode, and push simultaneous video streams to YouTube, Twitch, Kick, and custom RTMP endpoints.
- Provide Studio Functionality: Render studio scenes, overlays, lower-thirds, guest invitations, and unified chat aggregation.
- Diagnostics & Latency Optimization: Monitor stream health, diagnose ISP packet drops, and alert you in real-time when upload bandwidth deteriorates.
- Account Administration & Security: Authenticate logins, prevent unauthorized account takeovers, and process subscription renewals.
- Customer Support: Troubleshoot setup issues and investigate error reports submitted via our Help Center.
Platform Integrations & OAuth (YouTube, Twitch, Meta)
NexStream enables creators to authenticate their destination channels using OAuth 2.0 authorization frameworks. We store only authorized refresh and access tokens necessary to initiate live broadcasts on your behalf.
NexStream utilizes YouTube API Services to allow creators to broadcast live video to YouTube channels and display unified chat streams.
By connecting your YouTube account with NexStream, you agree to be bound by the YouTube Terms of Service and acknowledge that your data will be handled in accordance with the Google Privacy Policy.
You can view, modify, or revoke NexStream's access to your Google account data at any time through the Google Security Settings Permissions Page .
We use Twitch API scopes strictly to update broadcast category/title, fetch your stream key securely, and aggregate chat messages. You may revoke access in your Twitch Settings > Connections.
Facebook Live transmissions are governed by the Meta Privacy Policy. Ingest keys and page tokens are encrypted and used only during active broadcasts.
Data Storage, Security & International Transfers
Security Architecture: All account credentials and OAuth tokens are encrypted at rest utilizing AES-256 encryption. All transit communications between your browser, NexStream studio edge clusters, and destination ingestion servers are secured using TLS 1.3 and SRTP.
International Transfers: NexStream hosts servers across North America, Europe, and Asia-Pacific. Where data of European Economic Area (EEA) or UK residents is transferred outside the European region, we implement European Commission Standard Contractual Clauses (SCCs) and UK International Data Transfer Addenda.
Your Rights (GDPR & CCPA/CPRA)
Depending on your geographic residency, you possess substantial statutory rights concerning your personal information:
Data Retention Policies
We adhere to strict data minimization. Live stream video and audio packets passing through our transcoding pipeline are held in volatile RAM buffers strictly for real-time delivery and are purged within seconds.
Cloud recordings saved to your account are maintained for the duration configured in your subscription plan (e.g., 30 days for Pro) or until manually erased by you. Inactive accounts can be permanently deleted upon written request.
Children's Privacy
Our Services are not targeted at or intended for children under 13 years of age (or under 16 in certain European jurisdictions). We do not knowingly collect personal data from children. If we become aware that personal data of a minor has been collected without parental consent, we take immediate steps to delete that data from our servers.
Contacting Our Data Protection Officer (DPO)
If you have inquiries, complaints, or wish to exercise your statutory privacy rights, please reach out directly to our Data Protection Officer:
NexStream Inc.
548 Market Street, Suite 9400
San Francisco, CA 94104 USA
Privacy Team: privacy@nexstream.app
Response SLA: Within 30 calendar days