Privacy Policy

1. Introduction

This Privacy Policy describes how Nisq Technologies Inc. ("Kloot," "we," "us," or "our"), a corporation registered in Toronto, Ontario, Canada, collects, uses, shares, and protects your personal information when you use the Kloot platform at kloot.gg — including the dashboard, control deck, overlay URLs, and mobile control panel (collectively, the "Service").

This policy applies both to streamers who hold an account and to viewers who interact with a giveaway or overlay. By using the Service, you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.

2. Roles: Who Controls Your Data

For streamer accounts and the operation of the Service, Kloot acts as the data controller. For data that a viewer submits to a specific streamer's giveaway (such as a display name and optional email), the streamer is the independent controller of that data once it is made available to them, and Kloot acts as a processor that stores and delivers it on the streamer's behalf. Streamers are responsible for their own use of participant data, including their own privacy disclosures and compliance.

3. Information We Collect

3.1 Streamer Accounts

When you create an account via Google or Twitch OAuth, we collect:

• Name and display name
• Email address
• Profile picture / avatar
• Authentication provider identifier

3.2 Content and Assets You Provide

When you use the Service, we store the content and configurations you create, including:

• Overlay and effect configurations, deck layouts, profiles, and settings
• Text you enter (poll questions, lower-third names/titles, ticker text, sponsor details)
• Custom uploaded assets such as border PNGs, screen backgrounds, profile images, and custom emojis (stored on our cloud storage)
• Giveaway prize codes and prize details you add for automated delivery

3.3 Giveaway Participants (Viewers)

When you join a giveaway as a viewer, we collect:

• Display name (required, max 20 characters)
• Email address (optional, provided for prize delivery)
• Entry and outcome records (e.g., whether you won, and prize-delivery status such as pending, claimed, or expired)

Giveaway entries and outcome records are stored so streamers can run the giveaway, deliver prizes, and access giveaway history and audit information.

3.4 Billing Information

When you subscribe or buy an Event Pass, payments are processed by Stripe. We do not store full card numbers; Stripe handles card data directly. We retain billing metadata such as your plan, subscription status, billing history, and a Stripe customer identifier.

3.5 Automatically Collected Information

When you use the Service, we and our third-party analytics and error-monitoring providers automatically collect certain technical and usage information, including:

• Device type, browser type, and operating system
• IP address and approximate geographic location (also used for security and abuse prevention)
• Pages visited, features and tools used, actions taken, and session duration
• Referral source, campaign parameters, and interaction patterns
• Diagnostic data such as error and crash reports, stack traces, and performance metrics

We use this information for product analytics (understanding how features are used), website and traffic analytics (understanding how people find and move through the Service), and reliability monitoring (detecting, diagnosing, and fixing errors and performance issues). On a limited basis we may also capture session replays — a technical reconstruction of your interactions with the interface — to diagnose problems and improve usability; where we do, we configure these tools to mask sensitive inputs such as text typed into forms, and we do not enable this recording on the streamer's public overlay view.

These services may use cookies, local storage, and similar technologies. You can manage cookie preferences through your browser settings, and — where required by law — we ask for your consent before setting non-essential (such as analytics) cookies.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Kloot platform and its overlays and effects
• Authenticate streamers and manage their accounts and overlay tokens
• Facilitate live giveaways, render overlays, and deliver prizes (including automated prize-delivery emails)
• Store and serve your uploaded assets and configurations
• Process payments and manage subscriptions and Event Passes via Stripe
• Analyze usage patterns to improve the Service
• Monitor, diagnose, and fix errors, crashes, and performance issues to keep the Service reliable and secure
• Send service-related communications (e.g., account updates, billing notices, security notices)
• Detect and prevent abuse, fraud, or violations of our Terms
• Enforce content moderation (e.g., profanity filtering on names and text)
• Comply with legal obligations and enforce our agreements

5. Legal Bases for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contract — to provide the Service you sign up for and process payments
• Legitimate interests — to secure, maintain, analyze, and improve the Service, and prevent abuse
• Consent — for optional analytics/marketing cookies and, for viewers, providing an email for prize delivery; you may withdraw consent at any time
• Legal obligation — to comply with applicable law and respond to lawful requests

6. We Do Not Sell Your Personal Information

7. Streamer Access to Participant Data

When you participate in a giveaway and provide your email address, the streamer who created that giveaway will have access to your display name and email. Streamers may use participant emails to:

• Communicate prize-delivery details to winners
• Send information about future promotions or giveaways
• Notify participants about upcoming streams or events

Once a streamer exports or accesses participant data, their use of that data is governed by their own privacy practices, not this policy. We require streamers to handle participant data responsibly and in compliance with applicable laws, but we do not control how they do so. By providing your email when joining a giveaway, you acknowledge that the streamer hosting it may contact you directly. To have your data removed by a specific streamer, contact that streamer; you may also contact us and we will assist where we are able.

8. Third-Party Services

We rely on the following service providers to operate the Service:

• Amazon Web Services (AWS) — Cloud hosting, database storage, and asset storage
• AWS Cognito — Authentication and identity management
• Google OAuth & Twitch OAuth — Social sign-in for streamer accounts
• Stripe — Payment processing for subscriptions and Event Passes
• Email delivery provider — Sending transactional and prize-delivery emails
• Product & website analytics providers — Measuring how the Service is found and used so we can improve it
• Error-monitoring & performance provider — Detecting, diagnosing, and fixing crashes, errors, and performance issues

These providers process data only as needed to perform services for us and are bound by their own privacy and security obligations. We encourage you to review their respective policies.

9. International Data Transfers

Kloot is based in Canada and uses service providers that may process data in Canada, the United States, and other countries. Where we transfer personal data out of the EEA, the UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as Standard Contractual Clauses or transfers to jurisdictions recognized as providing adequate protection. By using the Service, you understand that your information may be processed in countries other than where you live.

10. Cookies and Tracking Technologies

We and our analytics and error-monitoring partners use cookies, local storage, pixels, and similar technologies to:

• Maintain your authentication session
• Remember your preferences
• Understand how you use the Service
• Measure the effectiveness of our platform
• Diagnose errors and monitor performance and reliability

You may disable cookies through your browser settings, but some features of the Service may not function properly without them. Where required by law, we ask for your consent before setting non-essential cookies.

11. Data Retention

We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes, then delete or anonymize it. In general:

• Streamer account data is retained while your account is active and for a reasonable period afterward, unless you request earlier deletion.
• Giveaway entries, outcomes, and history are retained so streamers can deliver prizes and review past giveaways, until the streamer deletes them or closes their account.
• Uploaded assets are retained until you delete them or close your account.
• Billing records are retained as required for tax, accounting, and legal purposes.

You may request deletion of your account and associated data at any time (see "Your Rights" below).

12. Data Security

We implement industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure authentication via AWS Cognito, rotatable overlay tokens, and restricted access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

13. Your Rights

13.1 Canada (PIPEDA)

You have the right to access the personal information we hold about you, request correction, request deletion, withdraw consent, and file a complaint with the Office of the Privacy Commissioner of Canada.

13.2 EEA / UK (GDPR)

You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing, as well as the right to withdraw consent and to lodge a complaint with your local supervisory authority.

13.3 California (CCPA/CPRA)

You have the right to know what personal information we collect and how it is used, to request access and deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising your rights.

To exercise any of these rights, contact us at support@kloot.gg. We will verify your request and respond within the timeframe required by applicable law. You may also authorize an agent to make a request on your behalf where the law permits.

14. Children's Privacy

The Service is not directed to children. We do not knowingly collect personal information from anyone under the age of 13 (or under the minimum age of digital consent in their jurisdiction, which is up to 16 in parts of the EEA). If you believe a child has provided us personal information, contact us and we will take steps to delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, make reasonable efforts to notify you. We encourage you to review this policy periodically. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact: