Privacy Policy

1. Information We Collect

We collect the following information when you use DrewStac Live:

• Account information: email address, username, display name, and your first and last name. Your first and last name are kept private — they are not shown on your profile or to other users, and are used to operate your account, provide support, and communicate with you. We ask for your date of birth at signup only to confirm you are 18 or older; it is not stored
• Payment-related information: records of purchases you make on the Platform (such as virtual gifts, subscriptions, and stream promotion), including amounts, dates, and the parties involved. Payment card details are collected and stored by our payment processor, Stripe — not by us (see Section 3)
• Creator payout information: if you onboard as a creator to receive gifts, Stripe collects identity, tax, and bank information under its own terms; we store your connected-account identifier and payout-eligibility status
• Stream data: stream titles, categories, duration, and viewer counts
• Content you create: One Take clips, comments, and profile content you post are stored and shown publicly until deleted. Prayer requests you send during a church stream are stored and are visible only to you and that stream's host, including any reply the host sends you
• Usage data: pages visited, features used, and interaction patterns
• Product link clicks: when you follow a product link from the Shop, a seller's profile, or a One Take clip, we record the link, the seller, the time, and your account
• Technical data: browser type, device type, and IP address

2. How We Use Your Information

We use your information to:

• Provide and maintain the DrewStac Live platform
• Authenticate your account and keep it secure
• Process payments, gifts, and creator payouts through Stripe
• Display your profile and streams to other users
• Send notifications you have opted into, such as emails when creators you follow go live
• Prevent fraud and abuse, including enforcing gifting limits
• Show sellers how their products perform and help answer questions about purchases that began on the Platform
• Improve the platform and fix technical issues
• Respond to support requests and reports

3. Payments

Payments on DrewStac Live (including virtual gifts, subscriptions, and stream promotion) are processed by Stripe. Your full payment card number is provided directly to Stripe and is never stored on our servers. If you choose to save a card for faster gifting, Stripe stores it; we store only a reference identifier and a flag that a card is saved.

We keep transaction records for purchases made on the Platform — such as which gift was sent, its amount, the sender, and the recipient — to operate features like creator earnings, enforce our terms, and meet legal and accounting obligations.

Sales of physical or external products that a seller lists or promotes happen off-platform, on the seller's own store. Following a product link requires a signed-in account, and we record the link, the seller, the time, and your account ID so we can show sellers how their products perform and help answer questions about purchases that began on DrewStac Live. We do not receive your payment or order details for those purchases.

4. Live Streaming

When you go live, your video and audio stream is broadcast to viewers in real time through our streaming infrastructure (LiveKit) and, for some viewers, delivered via Cloudflare's content delivery network. Live streams sent from an external encoder (such as OBS or Restream) are automatically recorded and offered as replays to signed-in users for 30 days, after which the recording is deleted. For those streams we also keep a timed log of what the host pinned on screen — such as scripture passages and pinned chat comments — so the replay can show them; if a host pins your comment, it may appear in the replay. Live streams made directly from your phone or browser are not recorded. Viewers can see your display name and the content you choose to share during your stream, and hosts can see the display names of signed-in viewers present in their stream.

5. Third-Party Services

We use the following third-party services to operate DrewStac Live:

• Supabase: database, authentication, and realtime features
• Stripe: payment processing and creator payouts (Stripe Connect)
• LiveKit (self-hosted on DigitalOcean): live video streaming infrastructure
• Cloudflare: stream delivery for some viewers
• Vercel: platform hosting, delivery, and privacy-focused analytics
• Resend: transactional and notification emails

Each of these services has its own privacy policy governing how it handles data.

6. Cookies and Analytics

We use cookies and similar technologies that are essential for the platform to work — primarily to keep you signed in. We also use Vercel Analytics and our own basic visit counting to understand overall platform usage.

We do not use advertising pixels, ad-network trackers, or social-media tracking embeds, and we do not track you across other websites.

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data with the service providers listed above strictly to operate the platform. We may disclose information if required by law or to protect the safety of our users.

8. Data Retention

We retain your account information for as long as your account is active. Transaction records may be retained after account deletion where required for legal, tax, accounting, or fraud-prevention purposes. You may request deletion of your account and associated data by contacting us. Stream metadata (titles, categories, duration) may be retained for analytics purposes in anonymized form.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Opt out of any non-essential communications, including go-live notification emails

10. Security

We implement industry-standard security measures to protect your information, including encrypted connections (HTTPS) and secure authentication. However, no method of transmission over the internet is 100% secure.

11. Children's Privacy

DrewStac Live is not intended for users under the age of 18. We do not knowingly collect information from minors. If you believe a minor has created an account, please contact us and we will remove it promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by posting a notice on the platform. Continued use after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, please contact us at contact@drewstac.com.