Privacy Policy

1. Introduction

HighlightHub ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video highlight detection service and website (the "Service").

By using our Service, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and profile information
• Discord Information: Discord user ID, username, and server membership when you use our Discord bot
• Twitch Information: Twitch username, channel ID, stream data, and OAuth tokens when you connect your Twitch account
• Payment Information: Billing address and payment details (processed securely through Stripe)
• Video Content: Videos you upload for highlight detection and analysis, including live stream segments
• Communication Data: Messages you send us through support channels or Discord bot commands
• Social Media Data: If you connect YouTube or other social accounts, we may access public profile information and video metadata as authorized

2.2 Automatically Collected Information

• Stream Data: When using real-time detection, we temporarily process your live stream segments to detect highlights
• Usage Data: How you interact with our Service, features used, bot commands executed, and time spent
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Server logs, error reports, and performance metrics
• Cookies and Tracking: As described in our Cookie Policy

2.3 Third-Party Sources

• OAuth Providers: Information from Google, YouTube, Twitch, Discord, or other connected services
• Twitch API: Stream status, channel information, and EventSub notifications when you go live
• Discord API: User information and server data when you use our Discord bot
• Analytics Services: Aggregated usage statistics from analytics providers

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: Process videos, generate highlights, monitor live streams in real-time, and deliver our core AI services
• Real-Time Processing: Analyze your Twitch streams automatically when you go live to detect and extract highlights
• Discord Bot Services: Provide bot commands, send Direct Messages with highlight notifications, and manage your authentication
• Account Management: Create and maintain your account, process payments, and provide customer support
• Communication: Send service updates, security alerts, highlight notifications via Discord DM, and respond to inquiries
• Improvement: Analyze usage patterns to improve our AI models and user experience
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Security: Detect fraud, prevent abuse, and protect our Service and users
• Marketing: Send promotional materials (with your consent, where required)

4. Legal Basis for Processing (GDPR)

For users in the European Union, we process your data based on:

• Contract Performance: To provide the services you've subscribed to
• Legitimate Interest: To improve our services, ensure security, and conduct business operations
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following circumstances:

5.1 Service Providers

• Payment Processing: Stripe for payment processing
• Cloud Infrastructure: DigitalOcean, Cloudflare, or similar providers for hosting
• Platform APIs: Discord, Twitch, and YouTube APIs for service integration
• Storage: DigitalOcean Spaces for temporary video clip storage
• Analytics: Privacy-focused analytics services
• Support Tools: Customer service and communication platforms

5.2 Legal Requirements

We may disclose information when required by law, court order, or to:

• Comply with legal obligations
• Protect our rights and property
• Investigate potential violations of our Terms of Service
• Ensure user safety and security

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data in transit and at rest is encrypted using modern standards
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: SOC 2 compliant hosting and cloud services
• Employee Training: Regular security awareness training for our team

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion
• Video Content: Uploaded videos are automatically deleted after processing; saved highlights retained until you delete them
• Stream Segments: Live stream segments processed in real-time are immediately deleted after highlight extraction (not stored)
• Highlight Clips: Generated clips stored in secure cloud storage until you delete them or your account is closed
• Discord/Twitch Data: Connection tokens stored securely; refreshed as needed; deleted when you disconnect accounts
• Usage Data: Aggregated and anonymized for up to 2 years for service improvement
• Legal Requirements: Some data may be retained longer to comply with legal obligations

8. Your Rights and Choices

8.1 Access and Control

• Account Settings: Update your profile and preferences in your account dashboard
• Data Download: Request a copy of your personal data
• Data Deletion: Delete your account and associated data
• Correction: Update or correct inaccurate information

8.2 Communication Preferences

• Opt out of marketing emails using unsubscribe links
• Manage notification settings in your account
• Contact us to update communication preferences

8.3 EU/UK Rights (GDPR)

If you're in the EU or UK, you have additional rights:

• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interest
• Withdraw Consent: Withdraw consent for consent-based processing
• Complaint: File a complaint with your local data protection authority

9. International Data Transfers

Your information may be processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Other appropriate safeguards as required by applicable law

10. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

11. Discord Bot and Real-Time Processing

11.1 Discord Bot Data Collection

When you use our Discord bot, we collect:

• User Identification: Discord user ID and username to link your account
• Command Usage: Bot commands you execute and their parameters
• Server Information: Discord server(s) where you use the bot
• Direct Messages: Messages sent to/from the bot for authentication and notifications

11.2 Real-Time Stream Processing

For automatic highlight detection:

• Stream Monitoring: When you go live on Twitch, we receive a webhook notification and begin processing
• Temporary Processing: Stream segments are downloaded in small chunks (5-10 seconds), analyzed, and immediately deleted
• No Storage: We do NOT store your full streams - only detected highlight clips you choose to keep
• Auto-Monitoring: You can disable automatic detection at any time using Discord bot commands

11.3 Third-Party Platform Data

• Twitch: We use Twitch EventSub to detect when you go live (requires your authorization)
• Discord: Bot sends you Direct Messages with highlight notifications
• YouTube: Optional integration for automatic clip uploads (requires separate authorization)

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

• Email: [email protected]
• Subject Line: "Privacy Policy Inquiry"
• Response Time: We'll respond within 30 days

14. Compliance Certifications

HighlightHub is committed to maintaining the highest standards of data protection:

• GDPR Compliant: Full compliance with EU data protection regulations
• CCPA Compliant: Adherence to California privacy rights
• SOC 2: Infrastructure partners maintain SOC 2 Type II compliance