Privacy Policy
Last updated: [EFFECTIVE_DATE]
Who we are
L00P Stream is operated by [COMPANY_NAME], based in [JURISDICTION]. The data controller is [OWNER_NAME], reachable at support@loopstream.cc.
What we collect
Account data: your email address, chosen display name, password (hashed with bcrypt), and a device hardware identifier (HWID) used to bind licenses to a single machine.
Usage data: session start/end times, duration, wallet transactions, IP address (only for security and rate-limiting), client version and platform.
Payment data: we do not store card numbers. Payments go through Paystack, which stores this data under their own policy.
Reference images and video: reference images you upload for character transformation are sent to the AI provider for processing and are not stored on our servers. Live webcam video streams peer-to-peer between your device and the AI provider and does not pass through our infrastructure.
Support communications: if you email support or use the in-app live chat, we retain those messages to help resolve your issue.
How we use it
- To provide, maintain, and improve the Service
- To bill you and process refunds via Paystack
- To send transactional email (verification, receipts, password resets)
- To detect and prevent abuse (rate-limiting, HWID binding, session monitoring)
- To respond to support requests
Third-party services we use
AI provider (Decart AI): real-time video transformation. Video streams directly from your device to Decart. See their privacy policy at decart.ai.
Paystack: payment processing. See paystack.com/privacy.
Tawk.to: in-app live chat. See tawk.to/privacy-policy.
Namecheap Private Email: transactional email delivery.
Data retention
Account and usage data are kept while your account is active. Delete your account from the app's Account page and we will erase your personal data within 30 days, except where retention is required by law (e.g., tax records).
Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Contact support@loopstream.cc to exercise these rights.
For users in the EU/UK: our lawful basis for processing is contract (providing the Service you asked for) and legitimate interest (security and abuse prevention).
For users in Nigeria (NDPR): you have the rights described in Sections 3.1.3 – 3.1.9 of the NDPR. Our Data Protection Officer can be reached at support@loopstream.cc.
For users in California (CCPA/CPRA): we do not sell or share your personal information for cross-context behavioral advertising.
Security
Passwords are hashed with bcrypt. Session tokens are stored encrypted using the operating system's keychain. Traffic between the app and our servers uses TLS 1.2 or higher.
Cookies
The marketing website (loopstream.cc) does not set cookies. The admin control panel uses a single authentication cookie (lrt_a) required to keep you signed in.
Children
L00P Stream is not directed at children under 13. If you believe we have collected data from a child under 13, contact us and we will delete it.
International transfers
Our servers are located in Germany (Hetzner). If you access the Service from outside Germany, your data is transferred to and processed in Germany. Standard contractual clauses apply where required.
Changes
We will notify you of material changes to this policy via email or in-app notice.
Contact
Data controller: [OWNER_NAME]
Address: [DATA_CONTROLLER_ADDRESS]
Email: support@loopstream.cc