JeetBot Privacy Policy

1. WHO WE ARE

1.1. This Privacy Policy explains how personal data is processed when you use JeetBot (jeetbot.cc, the "Service"): a bot, dashboard and widgets for streamers on Twitch, Kick, VK Video Live and YouTube. It forms part of the JeetBot Terms of Service.

1.2. The data controller is Aleksandr Popov, an individual, Limassol, Cyprus (operating the JeetBot service) (the "Operator"). Contact for privacy questions and requests: support@jeetbot.cc.

2. DATA WE PROCESS

2.1. The Operator processes the minimum necessary amount of User personal data to provide the Service, namely:
• unique account identifier (ID) and username on the streaming platform used to sign in (for example, Twitch);
• for a connected YouTube channel: OAuth tokens, the channel ID and title, and the YouTube live chat data described in section 10;
• contact details (email address and/or phone number) — when necessary for issuing payment receipts and support communications.

3. LEGAL BASES

3.1. Such data constitutes personal data and is processed in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), exclusively for the purposes of providing Service functionality and fulfilling obligations to the User.

3.2. Legal bases for processing personal data:
a) performance of a contract (Article 6(1)(b) GDPR);
b) compliance with a legal obligation to which the Operator is subject (Article 6(1)(c) GDPR), including accounting, tax, fraud-reporting and other regulatory obligations;
c) the legitimate interests pursued by the Operator or a third party (Article 6(1)(f) GDPR), including Service security, abuse handling, logging, enforcement of the Terms and fraud prevention, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject;
d) consent of the data subject (Article 6(1)(a) GDPR), where consent is specifically required, including for the transfer of contact data to payment providers for issuing receipts and notifications, and, where applicable, explicit consent under Article 9(2)(a) GDPR.

4. PURPOSES OF PROCESSING

4.1. Identification of the User in the system, providing access to Service features, informing about service status, issuing payment receipts, processing support requests, compliance with applicable legal requirements.

5. STORAGE PERIODS

5.1. Personal data is stored for the duration of service provision and/or for the periods required for compliance with applicable legal requirements regarding accounting and settlement documents.

5.2. Data received through YouTube API Services is subject to the shorter periods set out in section 10.

6. YOUR RIGHTS

6.1. As a data subject you have the right of access to your personal data, rectification (updating, modification), restriction of processing, withdrawal of consent, erasure (right to be forgotten), data portability, and the right to lodge a complaint with a supervisory authority, provided such actions do not conflict with legal requirements. Requests are accepted at support@jeetbot.cc.

6.2. The User may request deletion of their data from the system by sending a request to support@jeetbot.cc. In this case, data is deleted within 30 calendar days (unless otherwise required by law), after which the User loses the ability to use the Service. Deletion of YouTube data follows section 10.

7. DATA TRANSFERS

7.1. The Operator ensures compliance with applicable data protection laws regarding cross-border data transfers, including the use of appropriate safeguards as required by the GDPR.

8. DISCLOSURE TO THIRD PARTIES

8.1. Personal data may be disclosed to third parties only where there is a legal basis and to the extent necessary to achieve the purposes of processing (e.g., payment providers such as Stripe, hosting providers). Such parties are required to ensure the confidentiality and security of personal data.

9. VOICE FEATURES

9.1. Where the User uses voice upload, voice synthesis, voice cloning or other voice-related features of the Service, the Operator may process voice samples, audio recordings, generated outputs, technical voice parameters, voice-model data and related metadata to provide the relevant functionality, maintain Service security, review abuse reports and comply with legal obligations, subject to applicable data protection law. Where such processing involves the use of voiceprints or similar technical representations to uniquely identify a natural person, it constitutes processing of biometric data within the meaning of Article 4(14) and Article 9 GDPR and is carried out only on a lawful basis under Article 9(2) GDPR, including the explicit consent of the data subject, the obtaining of which is the responsibility of the User.

9.2. Where the User uploads, processes or causes the processing of voice samples or other personal data of third parties through the Service, the User acts as an independent controller in respect of the decision to upload such personal data, the purposes of that processing and the legal basis relied upon by the User. To the extent the Operator processes such personal data solely on the User's documented instructions in order to provide the Service, the Operator acts as a processor within the meaning of Article 4(8) GDPR. The Operator acts as an independent controller for processing carried out for its own purposes, including Service security, fraud prevention, abuse handling, logging, billing, legal compliance and enforcement of the Terms. Where and to the extent Article 28 GDPR applies to the Operator's processing on behalf of the User, the Operator shall make available an Article 28-compliant Data Processing Addendum upon reasonable written request before, or without undue delay after, the relevant processing begins.

9.3. Unless expressly agreed separately with the User, voice samples, audio recordings and other materials uploaded by the User that relate to an identifiable natural person shall not be used by the Operator to train general machine-learning models or to create voice models for other users. Any different use of such materials requires a separate lawful basis and, where applicable, separate explicit consent of the data subject under Article 9(2)(a) GDPR.

10. YOUTUBE API SERVICES

10.1. Use of YouTube API Services

The Service uses YouTube API Services. By using the YouTube features of the Service, you are also bound by the YouTube Terms of Service. Google's handling of personal data is described in the Google Privacy Policy. The Service's use and transfer to any other app of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10.2. What YouTube data we access and why

When a streamer connects YouTube (Google OAuth, scope https://www.googleapis.com/auth/youtube), the Service accesses:
a) OAuth access and refresh tokens, and the YouTube channel ID and title — to detect the streamer's live broadcasts, read their live chat, post the bot's replies to that chat from the separate JeetBot bot channel and, at the streamer's request, make the bot a chat moderator;
b) while the streamer is live: live chat messages (text, author channel ID, display name, author role badges, time) — to run the chat commands, text-to-speech, chat widgets and moderation tools that the streamer has configured;
c) viewer records: YouTube channel ID, display name and per-viewer bot settings, such as the text-to-speech voice.

10.3. Storage, retention and deletion

a) YouTube API data (chat messages, viewer records, channel metadata) is stored no longer than 30 days and is then deleted or refreshed.
b) OAuth tokens are kept while the integration stays connected. When the streamer disconnects YouTube, the tokens are revoked and deleted, and the other YouTube data is deleted within 30 days.
c) On a request to support@jeetbot.cc, YouTube data is deleted within 7 calendar days.

10.4. How to revoke access

The streamer can disconnect YouTube in the Dashboard at any time. Access can also be revoked in the Google Account security settings at https://security.google.com/settings/security/permissions.

10.5. Sharing

YouTube data is not sold and is not used for advertising. It is processed only to provide the features described above and is shown only to the streamer and in the streamer's own overlays and chat. It is shared with infrastructure providers (such as hosting) only as far as needed to run the Service.

10.6. Cookies and local storage

See section 11: the Service stores and accesses information on your device (cookies, local storage) for sign-in sessions and preferences, and for analytics only with your consent.

10.7. Contact

Aleksandr Popov, an individual, Limassol, Cyprus (operating the JeetBot service). Email: support@jeetbot.cc.

11. COOKIES AND LOCAL STORAGE

11.1. The Service stores and accesses information on your device using cookies and browser local storage. Essential cookies and local storage entries keep you signed in to the Dashboard, store your interface preferences (such as language and layout) and protect the Service against abuse. They are necessary to operate the site.

11.2. With your permission only, the Service also uses Yandex Metrica analytics cookies to collect anonymized statistics on Service usage. When you first visit the site, a cookie banner lets you accept or reject them. Your choice is saved in your browser and you can change it at any time with the "Cookie settings" link in the page footer. You can also disable cookies in your browser settings, which may limit access to some Service features.

11.3. When you connect YouTube, the Dashboard keeps your sign-in session on your device in the same way as for other platforms. No YouTube data is stored on your device beyond that session and the interface preferences described above.

12. CHANGES

12.1. The Operator may update this Privacy Policy. The current version is always available at this address, and the date of the last update is shown at the top.

13. CONTACT

13.1. Aleksandr Popov, an individual, Limassol, Cyprus (operating the JeetBot service). Email: support@jeetbot.cc.