Privacy Policy – Brascast Live

Last updated: Updated on December 3, 2025 (GMT-03)

This Privacy Policy apply to the Brascast Live application (“App”), describes how BRASCAST SERVIÇOS DE TRANSMISSÃO LTDA (“BrasCast”, “we”, “us”, or “our”), CNPJ 15.294.932/0001-61, collects, uses, stores, and protects personal information when users access or interact with the platform live.brascast.com (the “Platform”). By using the Platform, you agree to the practices described in this Privacy Policy.

Address:
Av. João Sacavem, 571 – Sala 609, Centro, Navegantes – SC, CEP 88370-438, Brazil.

1. Information We Collect

1.1. Information You Provide

• Account registration details (such as your name, email address, and password)
• Profile information and contact details
• Messages sent to our support team or through contact forms
• Preferences related to your account and streaming settings

1.2. Information Collected Automatically

When you use the Platform, we may automatically collect:

• IP address and approximate location
• Browser type, device type, operating system
• Pages visited, access dates and times, and other usage data
• Technical logs for error tracking and performance monitoring

1.3. Information from Third-Party Integrations

When you connect external services to the Platform (such as YouTube, Facebook, or other streaming/social platforms), we may receive information from those third parties, depending on the permissions you grant. This may include:

• Channel or page information (e.g., YouTube channels, Facebook pages)
• Live broadcast metadata and configurations
• Stream keys, ingest URLs, or related identifiers (where applicable)
• Thumbnails, titles, descriptions, and other content metadata
• Broadcast status and metrics related to your own content

We do not receive or store your passwords for these third-party services. Authentication is handled via secure OAuth or similar authorization mechanisms when provided.

2. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the Platform and its features
• Allow you to create, schedule, configure, and manage live streams across integrated platforms
• Display and synchronize data from third-party services you connect (e.g., YouTube, Facebook)
• Monitor stream status, performance, and relevant analytics for your broadcasts
• Customize your experience and improve the Platform’s usability and performance
• Provide customer support, respond to inquiries, and resolve technical issues
• Protect the security and integrity of the Platform

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Third-Party Integrations (YouTube, Facebook, and Others)

The Platform may integrate with third-party services, such as:

• Google / YouTube (for managing live streams, channels, and content)
• Facebook (for publishing and managing live streams on profiles, pages, or groups)
• Other streaming or social platforms that may be added in the future

When you connect these services, you may be asked to grant permissions via OAuth or a similar authorization flow. We only request the minimum necessary scopes to provide the features you are using, such as:

• Creating, updating, and deleting live broadcasts
• Reading and updating metadata (titles, descriptions, thumbnails, etc.)
• Starting, stopping, and monitoring live streams
• Reading basic analytics or status information related to your content

Data received from these third-party platforms is used exclusively to operate the features you enable within the Platform and is not shared with other third parties for their own purposes.

4. Use of Google APIs (YouTube)

When you connect your YouTube account, we use Google APIs in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• We access YouTube data only to allow you to manage your own live streams, videos, and channel information.
• We do not use Google API data for advertising or profiling.
• We do not share Google API data with third parties except as necessary to provide the Platform’s services.

You may revoke our access to your Google account at any time via:
https://myaccount.google.com/permissions

5. Use of Facebook APIs

When you connect your Facebook account, page, or profile, we may use Facebook APIs to allow you to:

• Create, configure, and schedule live streams to Facebook
• Publish or update broadcast titles, descriptions, and metadata
• Read status and basic analytics for your own content on Facebook

We only request the permissions strictly required to support these features, and we use Facebook data exclusively to operate the Platform functions you choose to enable. We do not share Facebook data with other third parties for their independent use.

6. Data Security and Protection of Sensitive Information

We implement industry-standard technical and organizational measures to protect all sensitive data processed by the Platform. This includes authentication tokens (such as OAuth tokens), refresh tokens, API keys, account identifiers, and data retrieved from third-party integrations.

6.1. Encryption and Secure Transmission

• All communication between your device and our servers is protected using HTTPS/TLS.
• Sensitive data, such as tokens and credentials, is encrypted at rest in our systems.

6.2. Secure Handling of Tokens and Credentials

• Tokens are never logged in plain text and are stored only in secure, restricted components.
• Tokens are used solely to perform operations authorized by you within the Platform.
• We do not share tokens or credentials with third parties.

6.3. Access Controls

• Access to sensitive data is restricted to backend systems that need it for core functionality.
• No human has direct access to tokens or sensitive data unless required by law or with your explicit request.

6.4. Data Retention and Deletion

• We retain sensitive data only while your account is active or until you revoke access.
• When you delete your account or revoke third-party access, related tokens and sensitive data are permanently deleted.

6.5. Ongoing Security Practices

• We perform regular security reviews and monitoring.
• We keep our infrastructure updated according to best security practices.

7. Cookies and Tracking Technologies

We may use cookies and similar technologies to:

• Maintain your session logged in
• Remember your preferences
• Improve site performance and user experience
• Analyze usage patterns of the Platform

You may disable cookies in your browser settings, but some features of the Platform may not function properly if you do so.

8. Sharing of Information

We do not sell or rent your personal data to third parties. We may share information only in the following cases:

• Legal obligations: When required by law, regulation, or legal process.
• Service providers: With third-party vendors (e.g., hosting providers) that process data on our behalf under strict confidentiality and data protection agreements.
• User consent: When you explicitly ask us or authorize such sharing.

9. Data Retention

We retain your personal data only as long as necessary to provide the Platform’s services, fulfill legal obligations, resolve disputes, and enforce our agreements. Data related to third-party integrations (such as OAuth tokens) is deleted once access is revoked or your account is removed.

10. International Data Transfers

Your data may be processed on servers located in countries other than your own. Regardless of the location, we apply the same level of protection described in this Privacy Policy.

11. Children’s Privacy

The Platform is not directed to children under 13 years old, and we do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information.

12. Your Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:

• Right to access your data
• Right to correct inaccurate or incomplete data
• Right to request deletion of your data
• Right to restrict or object to processing
• Right to data portability (where applicable)

To exercise any of these rights, please contact us using the details provided below.

13. Revoking Access to Third-Party Services

You may revoke our access to your accounts on integrated platforms at any time, using their respective security/permissions pages (for example, your Google Account permissions page or Facebook settings). After revocation, related tokens and associated sensitive data are removed from our systems.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.

15. Contact Information

BRASCAST SERVIÇOS DE TRANSMISSÃO LTDA

CNPJ: 15.294.932/0001-61
Address: Av. João Sacavem, 571 – Sala 609, Centro, Navegantes – SC, CEP 88370-438, Brazil
Email: dev@brascast.com