1. Introduction
OneSound ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our Service. By using OneSound, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Information you provide directly:
Information collected automatically:
Information from third parties:
- Display name and email address when creating an account
- Twitch username and profile information when connecting your Twitch account
- Event information including titles, descriptions, and lineup data
- Messages sent in the Green Room chat
Information collected automatically:
- IP address and approximate location
- Browser type and device information
- Pages visited and features used within the Service
- Raid activity logs including handoff times and outcomes
Information from third parties:
- Twitch profile data including username, display name, and profile picture
- Payment information processed by Stripe (we do not store card details)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process payments and manage subscriptions
- Enable Twitch raid coordination features
- Send important account and service notifications
- Monitor and analyze usage patterns to improve the Service
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
4. Twitch Data
When you connect your Twitch account, we receive access to your Twitch profile information and, if you grant raid permissions, the ability to initiate Twitch raids on your behalf.
We store your Twitch access tokens in encrypted form. These tokens are used solely to perform raid actions you have authorized. You may revoke raid permissions at any time from your account settings, which will delete your stored tokens immediately.
We do not sell or share your Twitch data with third parties except as necessary to provide the Service.
We store your Twitch access tokens in encrypted form. These tokens are used solely to perform raid actions you have authorized. You may revoke raid permissions at any time from your account settings, which will delete your stored tokens immediately.
We do not sell or share your Twitch data with third parties except as necessary to provide the Service.
5. Payments and Stripe
All payment processing is handled by Stripe. When you make a purchase, your payment information is sent directly to Stripe and is never stored on our servers. We store only a Stripe customer ID to manage your subscription and billing history.
Stripe's privacy policy is available at stripe.com/privacy
Stripe's privacy policy is available at stripe.com/privacy
6. Data Sharing
We do not sell your personal information. We may share your information with:
- Firebase (Google): We use Firebase for authentication and data storage. Your data is stored in Google's infrastructure.
- Stripe: For payment processing and subscription management.
- Twitch: When performing raid actions on your behalf.
- Vercel: Our hosting provider processes requests and may log IP addresses.
- Law enforcement: When required by applicable law or to protect the rights and safety of our users.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.
Green Room chat messages and raid logs are retained for 90 days after an event ends and then automatically deleted.
Green Room chat messages and raid logs are retained for 90 days after an event ends and then automatically deleted.
8. Security
We take reasonable measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of Twitch access tokens at rest
- HTTPS encryption for all data in transit
- Firebase security rules to restrict data access
- Rate limiting to prevent abuse
- Regular security audits of our codebase
9. Cookies
OneSound uses cookies and similar tracking technologies to maintain your session and improve your experience. These include:
- Authentication cookies: Used to keep you logged in across sessions.
- Firebase cookies: Used by Firebase Authentication to manage your session.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- The right to access your personal information
- The right to correct inaccurate information
- The right to delete your personal information
- The right to withdraw consent at any time
- The right to data portability
11. Children's Privacy
OneSound is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at legal@onesound.events