Privacy Policy
Last updated: March 16, 2026
This Privacy Policy describes how Antopsis ("we", "us", or "our") collects, uses, and protects your information when you use the Antopsis platform, website, APIs, and related services (collectively, the "Service").
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (stored as a salted hash — we never store plaintext passwords)
- Organization name
- Google account info if you sign in with Google OAuth
Usage Data
We automatically collect information about how you use the Service:
- Streaming session start/end times and duration
- Number of streams, viewers, and restream targets
- API request logs (for security and debugging)
- Playback token issuance (stream ID, viewer ID if provided)
Payment Information
Payment processing is handled entirely by Stripe. We do not store credit card numbers or bank account details. We receive from Stripe: customer ID, subscription status, and payment event confirmations.
Stream Content
We process your live stream content (video/audio) solely to provide the Service — transcoding, delivering via CDN, and forwarding to restream targets. We do not analyze, monitor, or review stream content except as required to respond to abuse reports or legal obligations.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process payments and manage subscriptions
- Enforce usage limits and plan quotas
- Send service-related communications (password resets, billing notices)
- Detect and prevent abuse, fraud, or security threats
- Comply with legal obligations
We do not sell your personal information to third parties. We do not use your data for advertising purposes.
3. Data Sharing
We share your information only in the following circumstances:
- Service providers: Stripe (payments), Cloudflare/BunnyCDN (content delivery), Resend (transactional email)
- Restream targets: When you configure restreaming, your stream content is forwarded to the third-party platforms you specify
- Legal requirements: When required by law, subpoena, or court order
- Safety: To protect the rights, property, or safety of Antopsis, our users, or the public
4. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Stream content: Live streams are not permanently stored. HLS segments are transient and removed shortly after the stream ends.
- Usage records: Retained for billing and analytics purposes for up to 12 months.
- Server logs: Retained for up to 90 days for security and debugging.
5. Data Security
We implement industry-standard security measures:
- TLS encryption for all API and web traffic
- Passwords hashed with bcrypt (12 rounds)
- JWT tokens with short expiry (15 minutes) and secure refresh rotation
- Playback tokens for stream access control
- Webhook signature verification for Stripe events
- Database backups encrypted and stored in Cloudflare R2
6. Cookies
We use minimal cookies and local storage for authentication (JWT tokens). We do not use third-party tracking cookies, analytics cookies, or advertising cookies.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
- Object to processing of your data in certain circumstances
To exercise these rights, contact us at support@antopsis.io.
8. Children
The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.
9. International Data Transfers
Our servers are located in Europe (Hetzner Cloud, Falkenstein, Germany). If you access the Service from outside the EU, your data will be transferred to and processed in Germany. We ensure appropriate safeguards are in place for any international data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance.
11. Contact
If you have questions or concerns about this Privacy Policy, contact us at support@antopsis.io.