Privacy Policy

1. Data controller

Camly is the data controller for the processing of your personal data on the platform. You can contact us via the contact page.

2. What data we process

We process the following categories of data:

• Account data: email address (used for one-time-code login), username, date of birth, country and an optional profile picture.
• Payment-related data: your coin balance, coin purchases, video purchases and tips.
• Content: live streams, recordings, published videos, chat messages and profile content.
• Technical data: IP address, device and browser information, and log data necessary for operation and security.
• Inquiries: email address, topic and message when you contact us via the contact form — automatically deleted no later than 12 months after receipt.
• Moderation and agreement data: decisions about content and accounts (e.g. video approvals/rejections and sanctions) and your acceptance of the streamer agreement (version and timestamp).

3. Purposes and legal basis

We process your data for the following purposes:

• Providing the service (contract, GDPR art. 6(1)(b)): login, streaming, purchases and access to content.
• Operation and security (legitimate interest, art. 6(1)(f)): troubleshooting, abuse prevention and protecting the platform and its users.
• Legal compliance (legal obligation, art. 6(1)(c)): bookkeeping and responding to lawful requests from authorities.

4. Processors and third parties

We use a small number of providers to run the platform. They only process data on our behalf and under our instructions:

• Auth0 (Okta) — login and account security.
• LiveKit — live streaming and stream recording.
• Cloudflare — storage of recordings and videos, and network security.
• SpacetimeDB (Clockwork Labs) — the platform's database.
• Cloudinary — storage of profile and thumbnail images.
• Resend — email delivery (login codes and notifications).
• Google — support mailbox for handling inquiries.
• To be announced — payment processing for coin purchases.
• To be announced — identity and age verification.

5. Retention and deletion

We only keep data for as long as necessary:

• Stream recordings that the streamer does not publish or save are automatically deleted after 7 days. Only the streamer's own camera and audio feed is recorded — viewers joining private streams with camera or microphone are not included in recordings.
• Account data is kept for as long as your account exists and is deleted upon account deletion, unless law requires longer retention (e.g. bookkeeping rules).
• Payout data and receipts are retained under bookkeeping rules, including after account deletion.
• Chat and tip history for a live stream is stored while the stream is live, so viewers arriving later can see it — and is automatically deleted when the stream ends. Chat messages may additionally be deleted by the streamer or through moderation.

6. Your rights

Under the GDPR you have the right to:

• Access the data we process about you.
• Rectification of inaccurate data.
• Erasure (the right to be forgotten).
• Restriction of and objection to processing.
• Data portability.
• Lodge a complaint with the data protection authority in your country of residence.

7. Cookies and local storage

Camly only uses technically necessary local storage in your browser — for example to keep you signed in and remember your settings (language and currency). We do not use tracking or marketing cookies.

8. Changes to this policy

We may update this policy. Material changes are announced on the platform or by email before they take effect.