Privacy policy

Controller

Sebastian Arcas V. (tax ID 60406633P), Carrer Princep de Viana 78. Contact for anything about your data: info@srtserver.app.

What data we process

Account: name, email and password (stored only as a secure hash). Licenses: email, license key, plan, an anonymized identifier of the PC where the license is activated (a hash, not your hardware data), the IP address and app version of each validation. Purchases: data that PayPal sends us about the payment (we never see your card) and the billing details you give us. Support: what you write to us.

Why

To manage your account and licenses and provide the software you bought (performance of the contract); to issue invoices and keep them as the law requires (legal obligation); to protect the service against fraud and abuse, for example limiting attempts or detecting a license used on several PCs (legitimate interest); and to answer your messages.

Demos on Zoom

If you book a demo at srtserver.app/demo, we keep your name, your company (if you give it), your email, the product you are interested in, your comment, the chosen time and your time zone, to run the demo, send you the confirmation and reminders, and let you change or cancel it. For each demo we create a meeting in our Zoom account (Zoom Video Communications), which receives your name in the meeting title and, when you join, the details you give it; it is governed by its privacy policy (zoom.com/privacy). The legal basis is your request. We keep the booking for 12 months after the demo and then delete it; you can ask us to delete it sooner by writing to us.

Ads and website statistics

We do not use advertising or analytics cookies, or third-party tools that follow you across other websites. To know which pages are visited, we count each day's visits per page and per origin (the website or search engine you come from and, if any, the campaign), without storing your IP address or anything that identifies you.

If you reach srtserver.app from a Google ad, the link carries a click identifier set by Google (gclid). We keep it in your session and, if you create an account or sign in, in your account, so we can tell Google which ads end in a sign-up, a purchase or a subscription. We only send Google that identifier, the date and time, the type of conversion and the amount: never your name, email or billing details. The legal basis is our legitimate interest in measuring how well our ads work, which does not affect you beyond that. The identifier stops being used 90 days after the click and is deleted with your account; you can object by writing to us and we remove it from your account. Google's processing is governed by its privacy policy (policies.google.com/privacy).

How long

While your account or license is active. Invoices and payment data, for the periods required by tax law (generally 6 years). Validation logs, up to 2 years.

Who receives it

Our hosting provider (servers in the EU), PayPal for payments and our email provider. We do not sell your data or use it for advertising.

Community Manager: social network keys and accounts

Community Manager (social media live streaming) uses the stream keys you paste and, when you connect an account (YouTube, Facebook, Twitch or others), the permissions you authorize on each network's official page. Keys and access tokens are stored encrypted on your PC (Windows data protection) and the App talks to each network directly from your PC: they never go through our servers and we neither see nor store them. The only exception is Kick, which requires the sign-in to be completed on a server: the Kick sign-in code and the access renewal go through srtserver.app without being stored, and to show your channel's Kick chat in Community Manager, Kick sends the public chat messages of your channel to srtserver.app while you are live with Community Manager, where they are kept for at most 10 minutes for Community Manager to collect and then deleted. Keys and tokens are only used to create, start, check the status of and end the live streams you ask for in Community Manager; they are not used for advertising or shared with third parties. You can remove a key or disconnect an account in Community Manager at any time (disconnecting also revokes Community Manager's access on that network), and also revoke access from each network's security settings (for example, in your Google account: myaccount.google.com/permissions). When you connect YouTube, you agree to the YouTube Terms of Service (youtube.com/t/terms) and the Google Privacy Policy applies (policies.google.com/privacy). Community Manager's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Internet name for your PC

If you turn on your PC's internet name, we store the name, the license it belongs to, the public IP your PC updates it from and the date of each change, in order to publish it in the pc.srtserver.app DNS (run by deSEC, a non-profit association based in Berlin, Germany), prevent license misuse and solve incidents. The IP is published in the DNS while the name is active; it is withdrawn when you release the PC or the license is deactivated. The change history is deleted after 90 days. To obtain the certificate, the name is sent to Let's Encrypt, which by design records it in the public, permanent certificate logs (Certificate Transparency).

SAMedia connection service and remote assistance

If you use the SAMedia connection service, its server processes the public IP of your PC and of the devices that connect to it (cameras, phones, browsers) only to route the connections while they last, and stores each license's traffic for the current month to apply the plan limits; the content that passes through it is neither stored nor inspected. The server's technical logs, which may include IPs, are used only to solve incidents and prevent abuse, and are deleted periodically. The server is in Spain, on SAMedia equipment. If you book the installation assistance, what you tell us in the ticket and what we see on your PC during the remote session is used only to provide it: we do not copy your files or store your passwords. The ticket conversation is kept like any other support ticket.

MeetOut

MeetOut's full policy is on its own page: srtserver.app/meetout/privacy (MeetOut privacy policy). In short: to check the license, MeetOut sends our license server (licencias.srtserver.app, in Spain, on SAMedia equipment) the license key, an anonymous identifier of the PC (a cryptographic, non-reversible digest of the Windows identifier) and the program version; the server also stores when each PC was last seen, until the computer is deactivated or the license ends. If you connect a Zoom account, the server stores its user id, email, name and the tokens of the authorization Zoom grants MeetOut (encrypted), only to obtain the token Zoom requires to join meetings of other accounts on your behalf; the only scopes requested from Zoom are user:read:token and user:read:user, and it is deleted when you disconnect it in MeetOut, remove the app in Zoom or ask us.

The video and sound of the meetings are processed only on your PC to create the NDI and OMT sources: they do not go through our servers and we do not store them. With Google Meet, Teams and Zoho, the MeetOut extension works in your browser and only talks to MeetOut on the same PC. From the subscription we keep your email, the PayPal reference, the license sent and the invoices, as with other purchases. License data is kept while the license exists and as required by tax law; the license server's technical logs (IP, time and path), which also go through our network provider (Cloudflare), for up to 30 days.

How to delete your data

Community Manager data on your PC: in Community Manager, remove each network (or disconnect the account); to delete everything, uninstall the App. Stream keys and access tokens exist only on your PC. To also revoke the access you gave Community Manager on a network, do it from that network's settings (Facebook: Settings › Business integrations; Google: myaccount.google.com/permissions; Twitch: Settings › Connections; Kick: your account settings). Data of your account, licenses and purchases at srtserver.app: write to info@srtserver.app from your account email and we will delete it within 30 days at the latest, except what the law requires us to keep (invoices).

Your rights

You can request access, rectification, erasure, objection, restriction and portability by writing to info@srtserver.app. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Cookies

We only use technical cookies needed for the website to work: your session (to keep you signed in) and your language. They do not track you and do not require consent. The anti-bot check of the forms runs in your browser and does not use cookies or third parties.