Privacy Policy

01What we don't do

We start here because it's what worries people most, and in our case the answer is short:

• We don't sell your data. To anyone, under any circumstances, not even aggregated or anonymized.

• We don't share it with third parties for advertising, profiling, or data brokerage.

• We don't track you across other companies' apps or websites. There's no ad SDK, no pixels, no advertising identifiers. That's why the app never asks you for tracking permission.

• No one on our team watches your video, your audio, or your recordings, for the simple reason that they never reach our servers.

• We don't use tracking cookies on this site, which is why you won't see a consent banner.

02What never leaves your device

This is the most important part and the easiest to overlook. LiveDirector is a mixer that runs on your local network: video and audio from your cameras travel over your WiFi from each phone to the device directing, and never pass through us. When you go live, the signal goes straight from your device to YouTube, Facebook, Twitch, or whichever RTMP server you point it at. Recordings are written to your own disk. At no point do we have access to that content, or the technical means to.

• Video and audio from your cameras: your local network only.

• Program recordings: your device only.

• Stream keys for Facebook, Twitch, or your own RTMP: stored encrypted in your device's keychain and never sent to our servers.

• Compositions, layers, graphics, and settings: your device only.

03What we collect and why

Only what's needed for you to have an account, a plan, and an invoice. Nothing more:

• Identity: your email, and your name if you choose to share it. It's what identifies your account and where we send service notices.

• Devices: an identifier we generate ourselves, plus the model, platform, and OS and app versions. It's used to apply your plan's limits, so you recognize your own gear in the list, and so you can release a seat without calling support.

• Broadcast sessions: when one started and ended, from which device, and to which platforms (YouTube, Twitch, and so on). Not the content of the broadcast, only the fact that it happened. It's what makes your plan's simultaneous-broadcast limit possible.

• Product usage: a handful of narrow, fixed events like "a camera connected" or "a recording hit its cap." They tell us which parts of the product get used and which don't. They carry no content.

• Payment and billing: the plan you bought, your subscription status, the country of your payment method, and the tax documents we issue.

• Support: whatever you write to us, for as long as it takes to answer you.

04Sign in with Apple

When you sign in with Apple, Apple gives us a unique identifier for you and your email. Nothing else: we neither ask for nor receive any other data from your Apple account, not your contacts, not your activity.

• You can hide your email. If you choose "Hide My Email," we receive an Apple private relay address (`@privaterelay.appleid.com`) and it works like any other: your account, your notices, and your invoice all arrive without us ever seeing your real address. We don't block or treat those addresses differently.

• Your name only arrives the first time you authorize the app, and only if you choose to provide it. If you don't, your account works exactly the same.

• You can revoke access anytime from your device's Settings, under your Apple ID › Sign in with Apple. That cuts the link; to delete the account and its data, use the account deletion described below.

05Sign in with Google

When you sign in with Google, we receive your email, your account identifier, and your name and profile picture if they're public. We use them solely to create and identify your LiveDirector account. Our use of data received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements: we don't transfer it to third parties except to provide you the service, we don't use it for advertising, and no humans read it. You can review the Google Privacy Policy and revoke our access at any time from your Google account permissions page.

06The YouTube integration

LiveDirector Studio uses YouTube API Services so you can create a live broadcast and moderate its chat without leaving the app. This feature is optional: it only activates if you link your YouTube account, and everything else in the product works without it.

• What we access: with your authorization, we request the `youtube.force-ssl` scope, which lets us create and configure your live broadcast, get its ingestion URL, and read, delete messages, and moderate users in the live chat of your own broadcast.

• What we store: the Google access token is stored encrypted in your device's keychain, not on our servers. Chat messages are displayed on screen while you broadcast and we do not store them.

• Who we share it with: no one. This data never leaves your device except toward YouTube's own API.

• By using this feature you agree to be bound by the YouTube Terms of Service.

• Google's handling of your data is governed by the Google Privacy Policy.

• You can revoke our access to your YouTube data at any time from the Google security permissions page, or by disconnecting the account from within the app.

07Permissions the app requests

The system will ask when they're needed, and each has a single purpose:

• Camera: to use the device's camera as another studio source, or so a phone can act as a remote camera.

• Microphone: to take audio as a mixer source.

• Local network: so the studio can advertise its server and cameras can find it over Bonjour. Without this permission cameras can't pair.

• Photos, only if you choose to save a recording to your photo library.

08Who we share data with

No one who uses it for their own purposes. We work with providers who process data on our behalf and under our instructions, and only with the minimum each one needs:

• PayPal and dLocal, to process payment. They receive what's needed to charge you; we never see or store your card number.

• Amazon Web Services, where our servers and database run.

• Cloudflare, which serves this site and protects the API.

• Our email provider, to send you service notices.

• Our electronic invoicing provider in Chile, to issue receipts and export invoices.

• Authorities, only if a valid legal order compels us. If that happens, we'll tell you unless the law forbids it.

09Where data lives and international transfers

Our servers are on Amazon Web Services, Oregon region (United States). If you're in the European Union, the United Kingdom, Chile, or anywhere else, your account data is transferred and processed there. We use standard contractual clauses with our providers where applicable. Remember this only affects account and billing data: your video and your recordings never travel anywhere.

10How long we keep each thing

• Account data: as long as the account exists.

• Broadcast sessions and usage events: 24 months, then aggregated or deleted.

• Tax documents and payment receipts: six years, because Chilean law requires it and an issued document can't be deleted. When you delete your account they're detached from your name but kept with their folio number, so the Chilean tax authority can still verify them.

• Support correspondence: 24 months.

11Deleting your account

You can request it from inside the app, under Settings › Account, without writing to anyone and without going through support. Also from your web portal.

• Deletion is scheduled for 7 days out, not immediate. That's deliberate: it protects you from second thoughts and from someone with access to your session deleting your account with no way back.

• Signing back in during those 7 days cancels it, with nothing else for you to do.

• Once the window passes, we anonymize: your name, email, and Apple and Google identities are detached, and your devices, sessions, and events are deleted. Only the tax records described above survive, now without personal data.

• If you have an active subscription, it has to be canceled first: we don't anonymize an account the gateway is still charging.

12Your rights

It doesn't matter where you live: we apply these rights to everyone, not only to those the law covers.

• Know what we hold about you and get a copy in a format you can take elsewhere.

• Correct anything that's wrong.

• Delete your account, as described above.

• Object to a processing activity or withdraw your consent, without affecting what was done before.

• Complain to your country's data protection authority. In Chile, the Personal Data Protection Agency.

• Write to us and we answer within 30 days at most. We never charge for exercising any of these rights.

13Security

All traffic is encrypted with TLS. There are no passwords: you sign in with Apple, with Google, or with a one-time code that expires in ten minutes, so there's no password of yours we could leak. Session tokens rotate and revoke themselves on any suspicious reuse. Credentials that live on your device (stream keys, YouTube tokens, your license) go into the system keychain, never into a preferences file. Even so, no system is infallible: if a breach ever affects you, we'll tell you, and we'll tell you what happened.

14Children

LiveDirector isn't directed at children under 13, and we don't knowingly collect data from anyone under that age. If you manage cameras or accounts for minors (a school, a parish, a club), supervision and consent are the institution's responsibility. If you believe a child gave us their data, write to us and we'll delete it.

15Analytics on this site

We use Cloudflare analytics, which counts visits in aggregate without cookies and without identifying you. There's no Google Analytics, no social media pixels, and nothing that needs your consent, which is why you don't hit a banner on arrival.

16Changes to this policy

If something meaningful changes you'll see it here, with its date at the top. If the change affects how we handle your data, we'll also email you before it takes effect. We don't make retroactive changes to data already collected without asking you first.