Legal
Privacy Policy
Last updated: August 27, 2026
1. Introduction
This Privacy Policy explains how Streamlnd ("we", "us", or "our") collects, uses, discloses, and protects personal data when you use our platform (the "Service"). We act as the data controller of personal data we process in connection with the Service. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data we collect
We collect the following categories of personal data: (a) Account data — name, email address, company, role, and credentials you provide when registering; (b) Usage data — information about how you interact with the Service, including feature usage, device and browser information, and IP address; (c) Content data — the data and files you upload to your workspace, which may contain personal data you choose to store; (d) Communication data — records of your support requests and correspondence with us. We only collect personal data necessary for the purposes described below.
3. How we use your data
We process your personal data to: provide, operate, and maintain the Service; create and administer your account; process payments and manage billing; provide customer support and respond to inquiries; monitor and improve service performance, security, and reliability; detect, prevent, and respond to fraud, abuse, and security incidents; and comply with legal obligations. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
4. Legal bases for processing (GDPR)
Under the GDPR, we process your personal data on the following bases: (a) Performance of a contract — to deliver the Service you requested under your subscription; (b) Legitimate interests — to secure, improve, and analyze the Service, where those interests are not overridden by your rights; (c) Legal obligation — to comply with applicable laws, tax, and accounting requirements; and (d) Consent — for optional processing such as marketing communications or non-essential cookies, which you can withdraw at any time.
6. Data sharing & recipients
We do not sell your personal data. We do not share or sell consumer personal information — including phone numbers — to third parties or affiliates for marketing or lead generation purposes. We do not use your phone number for marketing or lead generation except where you have affirmatively opted in to receive such messages, and we do not disclose it to others for those purposes. We may share personal data only with: (a) Sub-processors — trusted third-party providers that help us operate the Service (such as cloud hosting, email delivery, and analytics), under written agreements that require confidentiality and GDPR-compliant safeguards, and only to the extent necessary to provide the Service; (b) Authorities — where required by law or to protect our rights, safety, or property. A current list of sub-processors is available on request. International transfers are made only with appropriate safeguards, such as Standard Contractual Clauses.
7. Data retention
We retain your personal data only as long as necessary for the purposes described in this policy, to comply with legal obligations, to resolve disputes, and to enforce our agreements. Account data is retained while your account is active and for a limited period after closure to allow recovery. Usage and communication data are retained according to our retention schedule. Your workspace content is retained until you delete it or your account is terminated, after which it is securely deleted within a defined period.
8. Your rights (GDPR)
Depending on your location, you may have the right to: access the personal data we hold about you; rectify inaccurate data; erase your data (the "right to be forgotten"); restrict or object to processing; receive your data in a structured, portable format (data portability); and withdraw consent at any time. To exercise any of these rights, contact us through our Contact page. We will respond within one month, as required by the GDPR, and may verify your identity before acting on a request.
9. Data security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, role-based access controls, multi-tenant isolation with row-level security, regular security reviews, and incident response procedures. No system is perfectly secure, but we design the Service to protect your data against unauthorized access, alteration, disclosure, or loss.
10. International data transfers
Because we and our sub-processors may process data in countries outside your region, your information may be transferred to and processed in such countries, which may have different data protection laws. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.
11. Children's data
The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us and we will take steps to delete it promptly.
12. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices, legal requirements, or Service features. We will notify you of material changes by email or in-app notice and post the updated policy with a revised "last updated" date. We encourage you to review this policy periodically.
13. Contact & data protection officer
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us through our Contact page. For GDPR-related matters, you also have the right to lodge a complaint with your local data protection authority.