Privacy Policy

This policy explains how TekSpert Ltd, a company registered in England and Wales (Company No. 16711813) (“TekSpert”, “we”, “us”), collects and uses your personal data when you use TekSpert StreamOverlay (the “Service”) — the desktop application, the website at streamoverlay.co.uk, and the related backend services. We are the data controller for that personal data.

• Account data: your name, email address and password (stored only as a secure hash).
• Billing data: subscription status and billing records. Card payments are handled by Stripe — we do not store your full card details.
• Licence data: your activation key, subscription status and a device identifier and label used to bind and validate your key.
• Technical data: information such as IP address, app version and timestamps collected when the app checks your licence or you use the website.
• Connected platform data: where you choose to connect a streaming account (TikTok, Twitch, YouTube or Kick), the data described in section 3.
• Support data: any information you provide when you contact us for help.

StreamOverlay lets you connect your own streaming accounts so the app can react to your live events — such as chat messages, follows, subscriptions, gifted subs, bits, Kicks, Super Chats and gifts — by playing overlays on your screen and in OBS. You start each connection yourself, and you can disconnect it at any time (see “Disconnecting and deleting platform data” below).

What we access and why. For each platform you connect, we access only what is needed to power your overlays:

• Account identity — your channel/handle and account id — so we can attribute events to your channel.
• An authorization token (and, where the platform issues one, a refresh token) that lets us receive your events on your behalf.
• Your live events — e.g. chat messages, follows, subscriptions, gifted subscriptions, bits/cheers/Kicks/Super Chats and gifts — which are used solely to trigger the overlays you have configured.

How your platform data is handled. Authorization tokens are stored on our servers encrypted at rest (AES-256-GCM). Live event data is processed transiently and relayed to your own StreamOverlay desktop app to play your overlays; we do not build viewer profiles, and we do not sell your data or use it for advertising. We access your platform data only for the overlay features you use. We may also derive a non-identifying activity signal — the event type and platform only (for example “a gift on TikTok”), plus a coarse recency such as “moments ago”, never usernames, message content or amounts — which is held transiently (about an hour) and may be shown as anonymous live activity on our website.

• to create and manage your account and provide the Service;
• to process subscriptions and payments through Stripe;
• to issue, validate and manage activation keys and enforce licensing;
• to receive your connected-platform events and play the overlays you have configured;
• to maintain security, prevent abuse and keep the Service reliable;
• to respond to your enquiries and provide support;
• to comply with our legal obligations.

Where UK data protection law applies, we rely on the following legal bases: performance of our contract with you (to provide the Service and process your subscription); our legitimate interests (to secure, improve and administer the Service); consent (for example when you choose to connect a streaming platform); and compliance with legal obligations.

We share personal data only where necessary, including with:

• Stripe, our payment processor, to take and manage subscription payments;
• the streaming platforms you connect (TikTok, Twitch, YouTube/Google, Kick), through their APIs, to authenticate and receive your events;
• hosting and infrastructure providers that operate our servers and databases;
• professional advisers and authorities where required by law.

We do not sell or rent your personal data, we do not use it for advertising, and we do not use it for behavioural tracking.

Payments are processed by Stripe. Your card details are provided directly to Stripe and are handled under Stripe’s own privacy policy and security standards. We receive limited information such as your subscription status and the outcome of payments, but not your full card number.

We use a small number of strictly necessary cookies, including an essential session cookie to keep you signed in. These are required for the Service to function and do not track you for advertising.

We keep your account and billing data for as long as you have an account and for as long afterwards as necessary to meet our legal, accounting and reporting obligations, or to resolve disputes. Connected-platform tokens are kept only while that platform is connected and are deleted when you disconnect it, revoke access or close your account. Live platform events are transient and are not stored after they have been relayed to your app. When data is no longer needed, we delete or anonymise it.

We take appropriate technical and organisational measures to protect your personal data, including hashing passwords, encrypting connected-platform tokens at rest (AES-256-GCM), serving the website and APIs over HTTPS, and restricting access. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately to any incident.

Some of our providers may process data outside the United Kingdom. Where they do, we take steps to ensure appropriate safeguards are in place, such as standard contractual clauses or an equivalent lawful transfer mechanism.

Subject to applicable law, you have rights to access, correct, delete or restrict the use of your personal data, to object to certain processing, and to data portability. You may also withdraw consent where we rely on it — for example by disconnecting a streaming platform. To exercise these rights, contact us using the details below.

The Service is not intended for children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps.

We may update this policy from time to time. Where changes are material, we will take reasonable steps to notify you and, where required, ask for your consent again. The “last updated” date above shows when this policy was last revised.

You can contact us about this policy or your personal data at privacy@streamoverlay.co.uk. If you are in the UK and have a concern we have not resolved, you have the right to complain to the Information Commissioner’s Office (ICO).