1. Controller
SourceArt Ltd
Evagora Pallikaridi 38
8010 Pafos, Cyprus
Represented by: Steve vom Wege
E-Mail: legal@animstream.com
2. Who this notice covers
This notice covers website visitors, agency owners, LIVE managers and streamers using Streamer Dashboard, as well as Backstage Companion users. Agencies will generally control data they independently enter about their members and streamers; the precise allocation of responsibilities is governed by the applicable agreement.
3. Data we process
- Account data such as name, email, profile image, language, role and agency membership.
- Agency and coaching data such as manager assignments, teams, tasks, messages and audit events.
- TikTok LIVE performance data such as username, goals, LIVE time, LIVE days, diamonds, milestones, forecasts and data freshness.
- Incentive and reward data such as rules, audience, progress, evidence, monetary value and fulfilment status.
- Billing data and status information; complete payment details are processed by Stripe.
- Technical security data such as timestamps, device instance, sync version, error and access information.
4. Purposes and legal bases
We process data to enter into and perform contracts, provide the role-based agency platform, support billing, and secure and improve the service. Depending on context, we rely on Article 6(1)(b) GDPR, Article 6(1)(f) GDPR, legal obligations or consent. Legitimate interests include IT security, abuse prevention, traceability and reliable operation.
5. Backstage Companion
The Companion is deliberately paired by an authorized agency owner or LIVE manager. The time and version of permission and the selected data sources are recorded and limited by the member's role. It reads only approved data on live-backstage.tiktok.com that the currently signed-in TikTok account may view and sends structured performance data to the associated agency workspace. TikTok passwords, cookies and session tokens are neither transferred to Streamer Dashboard nor shared between agency members. The agency must hold valid authorization for its use and the data processed.
6. Recipients and international transfers
We may use carefully selected processors for hosting, authentication, email and billing, including Hetzner, Clerk and Stripe. The application database is operated within our own hosting environment. Where data is processed outside the EEA, the required transfer mechanisms and safeguards are put in place. Agency members see data only within their server-validated role and assignment.
7. Retention
Data is retained only for as long as required for the contract, agency operations, security, evidence and legal obligations. Raw snapshot diagnostics and source-record payloads are automatically cleared after 30 days; hashes, provenance and published normalized facts may remain longer under the contractual deletion rules. The local Companion outbox strips payloads immediately after terminal delivery failure and removes all entries within 24 hours; disconnecting, withdrawing consent, or changing environment or agency deletes them immediately. After contract termination, data is deleted or anonymized after agreed export and deletion periods unless retention obligations apply.
8. Rights and contact
Subject to the GDPR, individuals may request access, correction, deletion, restriction and portability, object to processing, and withdraw consent for the future. They may also complain to a competent data protection authority.
Privacy contact: legal@animstream.com