1. Controller
SourceArt Ltd
Evagora Pallikaridi 38
8010 Pafos, Cyprus
Represented by: Steve vom Wege
E-Mail: info@streamer-dashboard.com
2. Who this notice covers
This notice covers website visitors, applicants, agency owners, LIVE managers and streamers using Streamer Dashboard, as well as Backstage Companion users. For public application processes, the agency named on the form decides on selection and contracting and will generally act as controller; Streamer Dashboard processes application data on its behalf. The precise allocation of responsibilities is governed by the applicable agreement.
3. Data we process
- Account data such as name, email, profile image, language, role and agency membership.
- Application data such as contact details, country of residence, timezone, languages, TikTok and professional experience, availability, motivation, scenario answers and voluntarily supplied profile links.
- Contract and signature evidence such as contract version, address, confirmed legal name, timestamp, technical security attributes and content checksum. An optional tax or VAT ID is processed only when supplied in the contract form.
- Agency and coaching data such as manager assignments, teams, tasks, messages and audit events.
- TikTok LIVE performance data such as username, goals, LIVE time, LIVE days, diamonds, milestones, forecasts and data freshness.
- Incentive and reward data such as rules, audience, progress, evidence, monetary value and fulfilment status.
- Billing data and status information; complete payment details are processed by Stripe.
- Technical security data such as timestamps, device instance, sync version, error and access information.
4. Purposes and legal bases
We process data to conduct the application process controlled by the relevant agency, enter into and perform contracts, provide the role-based agency platform, support billing, and secure and improve the service. Depending on context, the agency and we rely on Article 6(1)(b) GDPR, Article 6(1)(f) GDPR, legal obligations or consent. Legitimate interests include structured candidate selection, IT security, abuse prevention, traceability and reliable operation.
5. Backstage Companion
The Companion is deliberately paired by an authorized agency owner or LIVE manager. The time and version of permission and the selected data sources are recorded and limited by the member's role. It reads only approved data on live-backstage.tiktok.com that the currently signed-in TikTok account may view and sends structured performance data to the associated agency workspace. TikTok passwords, cookies and session tokens are neither transferred to Streamer Dashboard nor shared between agency members. The agency must hold valid authorization for its use and the data processed.
6. Recipients and international transfers
We may use carefully selected processors for hosting, email delivery and billing, including Hetzner, the configured email delivery provider and Stripe. Authentication and session data are processed in the self-hosted application database. Where data is processed outside the EEA, the required transfer mechanisms and safeguards are put in place. Agency members see data only within their server-validated role and assignment.
7. Retention
Data is retained only for as long as required for application processes, contracts, agency operations, security, evidence and legal obligations. Rejected LIVE manager applications, including their application details and internal rejection reasons, are automatically deleted after 180 days; related email correlations are removed and any outstanding messages are discarded. A status-only record of the decision that can no longer be linked to the person may remain in the immutable audit log; applicant IP addresses, browser identifiers and rejection reasons are not stored there. Completed contracts and signature evidence may be retained longer in line with statutory retention and limitation periods. Raw snapshot diagnostics and source-record payloads are automatically cleared after 30 days; hashes, provenance and published normalized facts may remain longer under the contractual deletion rules. The local Companion outbox strips payloads immediately after terminal delivery failure and removes all entries within 24 hours. After contract termination, data is deleted or anonymized after agreed export and deletion periods unless retention obligations apply.
8. Rights and contact
Subject to the GDPR, individuals may request access, correction, deletion, restriction and portability, object to processing, and withdraw consent for the future. They may also complain to a competent data protection authority.
Privacy contact: info@streamer-dashboard.com