Privacy Policy
ScaledStream ("ScaledStream," "we," "us," or "our") is a service operated by Unbridled Technologies LLC, doing business as ScaledStream. ScaledStream lets you send a single live video stream to our ingest servers and relays ("restreams") it in real time to the destinations you choose, such as YouTube, Twitch, Facebook, or any custom RTMP endpoint.
This Privacy Policy explains what information we collect when you use scaledstream.com, app.scaledstream.com, our streaming ingest servers, and related services (together, the "Service"), how we use it, and the choices you have.
1. The short version
- We do not record or store your video. Your stream passes through our relay servers in real time and is forwarded to your chosen destinations. No copy is kept.
- We collect only what the Service needs to run: your email address, basic account details, your stream configuration, and operational logs.
- We never sell your personal information, and we don't use advertising trackers or third-party analytics on our sites or app.
- You can delete your account and data yourself, at any time, from inside the app. See our Data Deletion Policy.
2. Information we collect
2.1 Account information
- Email address — used to sign you in (we use passwordless login: a one-time code emailed to you; we never store a password) and to send the service emails described in Section 4.
- Display name and workspace name — provided by you during onboarding.
- Plan and account status — your subscription tier and whether onboarding is complete.
2.2 Sign-in security information
When you request a sign-in code, we capture the request's IP address, an approximate location derived from it (city, region, country, timezone), and your browser and operating system. This information is included in the sign-in email we send you so you can recognize a login attempt that wasn't yours. We use it for security and fraud prevention, not for advertising or profiling.
2.3 Stream configuration and credentials
- ScaledStream ingest keys — the secret key your encoder uses to send us your stream.
- Destination credentials — the stream keys or RTMP URLs for the platforms you restream to (e.g., your Twitch stream key). These are secrets you entrust to us solely so we can forward your stream on your behalf.
- Connected platform accounts (OAuth) — if you connect a platform account (such as YouTube or Facebook) instead of pasting a stream key, we store the OAuth access and refresh tokens that platform issues, plus basic profile details needed to display the connection (such as your channel or Page name and handle). OAuth tokens are encrypted at rest with AES-256-GCM. See Sections 6 and 7 for platform-specific terms.
2.4 Operational data
- Stream lifecycle events — timestamps of when a stream starts and stops, which destinations were active, and technical status/error information. This powers your dashboard's live status and history views.
- Service logs — standard server logs (request metadata, error traces) used to operate, debug, and secure the Service.
- Last sign-in time — recorded for account administration.
2.5 Communications
If you submit in-app feedback or email us, we keep the message and your contact details so we can respond.
2.6 What we deliberately do not collect
- Your video and audio content is never recorded, stored, or analyzed. It is relayed in real time, byte-for-byte, to the destinations you configure, and exists on our servers only in transient memory while in transit.
- We do not use third-party analytics, advertising cookies, or tracking pixels on our website or app.
- We do not collect payment card details at this time. If we add paid billing, payments will be processed by a dedicated payment processor (such as Stripe), which will handle your card details under its own privacy policy — we will not store card numbers ourselves.
3. Cookies and similar technologies
Our app uses browser storage to hold your session tokens so you stay signed in. We do not use advertising or cross-site tracking cookies. Our infrastructure provider (Cloudflare) may set strictly-necessary cookies for security purposes (such as bot mitigation).
4. How we use your information
- To provide the Service — authenticate you, resolve your ingest key to your configured destinations, and relay your stream.
- To send service emails — sign-in codes, and (if enabled in your notification settings) alerts when your stream goes live, when a destination fails, and an optional weekly summary. You can turn each of these off in the app; sign-in emails are required to use the Service.
- To secure the Service — detect unauthorized access, enforce our ingest authorization (only valid keys may publish), and investigate abuse.
- To improve the Service — review aggregate usage and error patterns and respond to feedback.
- To comply with law — meet legal, tax, and regulatory obligations.
We do not use your personal information for advertising, and we do not sell or rent it to anyone. We do not use your data to train machine-learning models.
5. How we protect your information
- All traffic between your browser, our APIs, and our dashboard is encrypted with TLS/HTTPS.
- Platform OAuth tokens are encrypted at rest with AES-256-GCM; encryption keys are held in a separate secrets store, not in the database.
- Stream keys are long, random, per-stream secrets that you can rotate at any time; ingest is fail-closed — unknown or revoked keys are rejected.
- All customer data is strictly scoped to your account; our APIs enforce tenant isolation on every query.
- Access to production systems is restricted to authorized personnel and protected by credential-based machine authentication.
6. Google and YouTube data
If you connect a YouTube account, ScaledStream uses Google's OAuth and the YouTube API Services to, with your explicit consent:
- list your live streams to retrieve your RTMP ingest settings so we can restream to your channel without you copying keys manually; and
- where you enable chat features, read and moderate the live chat of your active broadcasts on your behalf.
ScaledStream's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we only use Google user data to provide the user-facing features described above; we do not transfer it to third parties except as necessary to provide those features, comply with law, or as part of a merger or acquisition with notice to you; we do not use it for advertising; and we do not allow humans to read it except with your consent, for security purposes, to comply with law, or when aggregated and anonymized.
Because ScaledStream uses YouTube API Services, users of these features are also agreeing to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke ScaledStream's access to your Google account at any time from the app's connection settings or via the Google security settings page. When you disconnect a YouTube connection or delete your account, we delete the stored Google tokens and associated data as described in our Data Deletion Policy.
7. Facebook (Meta) data
If you connect a Facebook account, ScaledStream uses Facebook Login and the Meta Graph API to, with your explicit consent:
- read your basic profile and email to identify your connection;
- list the Facebook Pages you administer so you can choose where to broadcast;
- create Live Video broadcasts on the Page you select and retrieve the ingest URL and stream key needed to deliver your stream; and
- where you enable comment features, read and moderate comments on your Live Videos on your behalf.
We store only the resulting access tokens (encrypted at rest), your Page selection, and display metadata (Page name/handle). We do not access your friends list, posts, photos, or messages, and we never post to your profile or Pages except to create the Live Video broadcasts you initiate. You can revoke ScaledStream's access at any time from the app's connection settings or from your Facebook Business Integrations settings. When you disconnect a Facebook connection, delete your ScaledStream account, or remove the app from within Facebook, we delete the stored tokens and associated Facebook data — see our Data Deletion Policy.
8. When we share information
We share personal information only with the service providers ("subprocessors") we need to run ScaledStream, and only the minimum they require:
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare, Inc. | Hosting for our website, dashboard, APIs, and databases; network security | Account data, stream configuration, request metadata |
| Mailgun (Sinch) | Transactional email delivery (sign-in codes, notifications) | Email address, email content (including sign-in security context) |
| Destination platforms you configure (e.g., YouTube, Twitch, Facebook) | Delivering your live stream where you direct it | Your live stream content and the credentials/tokens you provided for that platform |
Our stream relay servers are operated on infrastructure we control. We may also disclose information if required by law or legal process, to protect the rights, safety, or property of ScaledStream or others, or in connection with a merger, acquisition, or sale of assets (in which case this policy continues to apply and we will notify you of any change of control).
We do not sell or share personal information for advertising purposes, as those terms are defined under applicable privacy laws, and we have not done so in the preceding 12 months.
9. Data retention
- Account data, stream configuration, and credentials — retained while your account is active; deleted when you delete your account or the specific stream/connection.
- Video content — not retained at all (relay only).
- Stream lifecycle events — retained as operational history; when an account is deleted these records no longer reference any personal information.
- Server logs — retained for a limited operational window and then discarded.
- Support and feedback correspondence — retained as long as needed to handle the matter, and deleted with your account.
10. Your rights and choices
You can access and update your profile, notification preferences, stream configuration, and platform connections at any time in the app. You can delete individual streams, destinations, and platform connections, or delete your entire account (see the Data Deletion Policy).
Depending on where you live, you may have legal rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, use the in-app tools or contact us at the address below. We will not discriminate against you for exercising your rights.
For users in the European Economic Area and United Kingdom: our legal bases for processing are performance of a contract (providing the Service you signed up for), legitimate interests (securing and improving the Service), and consent (optional notifications and platform connections, which you may withdraw at any time).
11. International transfers
ScaledStream is operated from the United States, and your information is processed and stored in the United States and in the global infrastructure of the providers listed in Section 8. Where required, we rely on appropriate safeguards for international transfers.
12. Children
The Service is not directed to children under 13 (or the higher minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The effective date at the top shows when it was last revised.
14. Contact us
Unbridled Technologies LLC (d/b/a ScaledStream)
Email: support@scaledstream.com