Privacy Policy

This policy applies to everyone who visits breakcastr.com and the subdomains we use to run the service (for example the app, Studio, and overlay hosts), creates an account, or uses Breakcastr, wherever you are located.

Because our users come from the United States, the United Kingdom, the European Economic Area (EEA), and potentially anywhere in the world, this policy is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA (CCPA).

We collect only what we need to run the service and improve the product.

Account and identity information

• Email address
• Password (always stored in hashed form; never in plain text)
• Display name
• Optional logos you upload
• Optional social media handles

Technical and usage information

• A session cookie used to keep you signed in
• First-party feature usage and stream/break activity, used to improve the product

Payment information

Payments and subscriptions are handled entirely by Stripe. Your card details go directly to Stripe. Breakcastr never receives, processes, or stores your payment card information.

Communications

The content of support and account-related emails you send us.

What we do not collect

Breakcastr does not collect, process, or store your audience’s data. Viewer names, chat, and live bid information never pass through or get stored by our overlays or servers. We also do not use third-party advertising or analytics trackers; all analytics are first-party and in-house.

• Directly from you when you register, upload a logo or social handle, or email support.
• Automatically through a first-party session cookie and our own in-house usage logging.
• Through Stripe when you make a payment. Stripe collects this data directly under its own privacy policy and shares limited confirmation data with us, such as your subscription status.

Under the GDPR and UK GDPR we must have a lawful basis for using your data. The purposes and their bases are:

• Create and authenticate your account, and provide the service (basis: performance of a contract).
• Process payments and manage your subscription via Stripe (basis: performance of a contract).
• Send account verification and essential service emails (basis: contract or legitimate interests).
• Keep the service secure and prevent fraud and abuse (basis: legitimate interests).
• Improve the product using in-house usage analytics (basis: legitimate interests).
• Send optional subscription reminders and product-feedback requests in the future (basis: consent or legitimate interests, with an unsubscribe option in every message).

We collect usage data strictly to improve the product. We do not sell it and we do not share it for anyone else’s commercial gain.

Breakcastr uses a single essential session cookie to keep you signed in across the website and Studio. It is strictly necessary for the service to function, so it does not require consent under the ePrivacy rules.

We do not use advertising cookies, and we do not use third-party analytics cookies. All usage measurement is first-party and in-house.

We do not sell your personal data, and we do not share it for advertising. We share data only with the service providers that help us operate Breakcastr, and only as needed:

• Stripe: payment and subscription processing
• Amazon Web Services (AWS): hosting, infrastructure, and database storage
• AWS Simple Email Service (SES): sending account and support emails

Each provider is contractually bound to protect your data and to process it only on our instructions. We may also disclose data if required by law or to protect our legal rights.

Our service providers, including Stripe, AWS, and AWS SES, may store and process data in the United States. If you are in the EEA or the UK, your personal data may be transferred outside your home country.

Where we make such transfers, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, so your data receives an equivalent level of protection.

We keep your personal data for as long as your account is active. If you close your account or ask us to delete your data, we delete or anonymize it within a reasonable period, except where we need to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements. Payment records held by Stripe are retained under Stripe’s own retention policies.

We use reasonable technical and organizational measures to protect your personal data, including hashing passwords, restricting access, and relying on established infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to address any issues promptly.

If you are in the EEA or the UK (GDPR / UK GDPR)

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (the right to be forgotten)
• Restrict or object to how we process your data
• Data portability, so you can receive your data in a portable format
• Withdraw consent at any time, where we rely on consent
• Lodge a complaint with your local data protection authority

If you are in California (CCPA / CPRA)

• Know what personal information we collect and how we use it
• Access and request a copy of your personal information
• Delete your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of your personal information

We do not sell or share your personal information as those terms are defined under the CCPA, and we do not use it for cross-context behavioral advertising. We will never discriminate against you for exercising your privacy rights.

How to exercise your rights

To make any request, email us at support@breakcastr.com. We will respond within the timeframes required by applicable law and may need to verify your identity before acting on a request.

We currently send only account and service-related emails, which are necessary to run your account. If in the future we send subscription reminders or product-feedback requests, every such message will include a one-click unsubscribe link, and you can opt out at any time. Opting out will not affect essential account emails.

Breakcastr is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us at support@breakcastr.com and we will delete it.

We may update this policy as the product and the law evolve. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you. Your continued use of Breakcastr after an update means you accept the revised policy.

For any questions, concerns, or requests about your privacy or this policy, email us at support@breakcastr.com.