Privacy Policy

1. Introduction

Welcome to Daybot ("we," "our," or "us"). This Privacy Policy explains how we collect, use, store, and share information when you use our YouTube live chat automation service. By using Daybot, you agree to the terms outlined in this policy.

Daybot uses YouTube API Services to provide automated chat responses and engagement features for YouTube live streams. Your use of our service is also governed by the Google Privacy Policy and the Google API Services User Data Policy, including the Limited Use requirements.

2. Google API Services User Data Policy Compliance

Daybot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2.1 Limited Use Requirements

We access your YouTube data exclusively to provide and improve the Daybot live chat automation service. Specifically:

• We DO NOT use your YouTube data to serve advertisements
• We DO NOT sell your YouTube data to third parties
• We DO NOT use your YouTube data for purposes unrelated to providing Daybot functionality
• We DO NOT allow humans to read your data unless:
  • You give explicit permission
  • It's necessary for security purposes (e.g., investigating abuse)
  • It's required to comply with applicable law
  • Our use is limited to internal operations and necessary for maintaining or improving Daybot

2.2 Transparency and User Control

You maintain full control over your YouTube data. You can revoke Daybot's access to your YouTube data at any time through your Google Account Permissions page. Once revoked, Daybot will immediately lose access to your YouTube data and will no longer function for your channel.

3. Information We Collect

When you use Daybot, we access, collect, and store the following types of information:

3.1 YouTube Data (via YouTube API Services)

We request OAuth access to your YouTube account to provide live chat automation. The specific data we access includes:

• Channel Information: Your YouTube channel name, channel ID, channel handle, and profile picture
• Live Chat Messages: Messages posted by viewers in your YouTube live stream chat (read-only access)
• Chat Participant Information: Usernames and user IDs of chat participants
• Live Broadcast Details: Active live stream ID and associated live chat ID
• OAuth Access Tokens: Secure tokens that allow Daybot to perform authorized actions on your behalf (stored encrypted)

Why we need this data: To monitor your live chat for messages, respond automatically with AI or custom commands, moderate inappropriate content, and execute chat management tasks you configure.

3.2 Account Information

• Email address: For account creation, authentication, and important service notifications
• Name: As provided during registration (used for account identification)
• Password: Encrypted using bcrypt hashing and stored securely in our database

3.3 Bot Configuration Data

• Custom commands and automated responses you create
• Banned keywords and moderation rules
• Timer messages and greeting configurations
• Bot settings (language, response style, rate limits)

3.4 Usage and Analytics Data

• Chat messages processed by the bot (for analytics and performance monitoring)
• Bot activity logs (message counts, command usage, moderation actions)
• Login times and session information
• Error logs and debugging information

3.5 Cookies and Similar Technologies

We store, access, and collect information directly or indirectly on or from your devices by placing, accessing, or recognizing cookies and similar technologies on your devices or browsers. These include:

• Session Cookies: To keep you logged in and maintain your session state
• CSRF Tokens: For security purposes to prevent cross-site request forgery attacks
• Authentication Tokens: To manage your Google OAuth connection securely
• Preference Cookies: To remember your bot settings and dashboard preferences

4. How We Use Your Information

We use the collected information exclusively for the following purposes:

• Service Delivery: To operate the chatbot, monitor your live chat, and respond to messages according to your configuration
• Authentication: To verify your identity and manage your account securely
• Bot Configuration: To store and execute your custom commands, automated responses, and moderation rules
• AI Response Generation: To send chat messages to OpenAI API for intelligent response generation (if enabled)
• Content Moderation: To detect and handle inappropriate content, spam, and banned keywords
• Analytics and Monitoring: To track bot performance, message statistics, and service health
• Service Improvement: To identify bugs, improve features, and enhance user experience
• Communication: To send you important updates about your account, service changes, or security alerts
• Compliance: To comply with legal obligations and enforce our Terms of Service

5. How We Process and Share Your Information

5.1 Internal Processing

Your data is processed internally within our secure application servers hosted on trusted infrastructure. We use your YouTube data solely to provide the chatbot functionality you have configured. Access to your data is restricted to essential system processes and authorized personnel only when necessary for security or support purposes.

5.2 Third-Party Services

We share limited information with the following third-party services to provide Daybot functionality:

• Google/YouTube API Services: We interact with YouTube API Services to read live chat messages and post bot responses on your behalf. This data sharing is governed by the YouTube Terms of Service and Google Privacy Policy.
• OpenAI API: Chat messages may be sent to OpenAI's language models (GPT-4, GPT-3.5) to generate intelligent responses if you enable AI features. OpenAI's use of your data is governed by their Privacy Policy and Terms of Use. OpenAI does not use API data to train their models.

Note: You can disable AI features at any time to prevent chat messages from being sent to OpenAI.

5.3 Data We DO NOT Share

5.4 Legal Disclosure

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

6. Data Storage and Security

We take data security seriously and implement industry-standard security measures to protect your information:

• Encryption: All passwords are encrypted using bcrypt hashing algorithm
• Secure Transmission: All data transmission uses HTTPS/TLS encryption
• OAuth 2.0 Security: YouTube access tokens are stored encrypted and transmitted securely
• Access Control: Database access is restricted to authorized systems and personnel only
• Regular Updates: We perform regular security audits and apply security patches promptly
• Session Security: User sessions expire after inactivity and use secure cookie flags

6.1 Data Retention

We retain your data for as long as your account is active or as needed to provide services:

• Account Data: Retained while your account is active
• YouTube OAuth Tokens: Retained until you disconnect your channel or revoke access
• Chat Logs: Stored for up to 90 days for analytics purposes, then automatically deleted
• Bot Configuration: Retained until you delete the configuration or close your account
• Audit Logs: Security-related logs retained for up to 1 year for compliance purposes

Upon account deletion, all personal data will be permanently removed within 30 days, except where retention is required by law.

7. Your Data Rights

7.1 Right to Access

You can view and download your data through your Daybot dashboard at any time. This includes your account information, bot configuration, and analytics data.

7.2 Right to Correction

You can update your account information, email address, and bot configuration at any time through your dashboard settings.

7.3 Right to Deletion

You have the right to delete your data at any time:

• Disconnect YouTube Channel: You can disconnect your YouTube channel from Daybot through your dashboard, which stops all data collection
• Delete Account: Contact us at support@daybot.tv to request full account deletion
• Revoke API Access: Visit your Google Account Permissions page and remove Daybot's access to your YouTube data

Upon account deletion, we will permanently remove your personal information and YouTube data within 30 days.

7.4 Right to Data Portability

You can export your bot configuration and analytics data in JSON format through your dashboard.

7.5 Right to Withdraw Consent

You can withdraw consent for data processing at any time by disconnecting your YouTube channel or deleting your account. This will immediately stop all data collection and processing.

8. YouTube API Services

Daybot uses YouTube API Services to provide its core functionality. Your use of our service is subject to:

• YouTube Terms of Service
• Google Privacy Policy
• Google API Services User Data Policy

By using Daybot, you acknowledge that YouTube data accessed through Daybot is governed by these policies in addition to this Privacy Policy.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing: We process your data based on your consent (when you authorize YouTube API access) and our legitimate interest in providing the Daybot service.

11. Children's Privacy

Our service is not intended for children under 13 years of age (or the minimum age required in your country). We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at support@daybot.tv.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on your dashboard

Your continued use of Daybot after policy changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.