Privacy Policy

Viba (“we”, “our”, or “us”) operates the Viba mobile application and website (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using Viba, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

Account Information

When you create a Viba account, we collect your email address, display name, and profile photo (if provided).

Platform OAuth Tokens

When you connect a third-party platform (TikTok, Instagram, Facebook, YouTube, Twitch), we receive and securely store OAuth access tokens granted by those platforms. These tokens allow Viba to initiate live streams and read comment data on your behalf. We do not store your passwords for any third-party platform.

Streaming & Activity Data

• Stream sessions (start time, duration, platforms streamed to)
• Viewer counts and engagement metrics provided by each platform
• Comments read from connected platforms during live sessions
• Gift and monetization events (roses, stars, bits) received during streams
• Replies sent through Viba to each platform

Device & Technical Information

• Device type, operating system, and OS version
• App version
• IP address (used for fraud prevention and not stored long-term)
• Crash reports and diagnostic logs

Analytics

We collect anonymized usage analytics to understand how features are used and improve the product. This includes screen views, feature interaction events, and session duration. We do not sell this data.

• To provide and operate the Service — initiating simultaneous live streams, aggregating comment feeds, displaying gift notifications
• To authenticate your identity and maintain your account
• To communicate with you about your account, security, or significant service updates
• To improve, debug, and develop new features based on aggregated usage patterns
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To comply with applicable law and legal process

We do not use your data for advertising, nor do we sell it to third parties.

Viba integrates with the following platforms via their official APIs. When you connect a platform, data flows are governed by both this policy and each platform's own privacy policy:

• TikTok — governed by TikTok's Privacy Policy. We access live stream management and comment read scopes only.
• Meta (Instagram & Facebook) — governed by Meta's Privacy Policy. We access live video creation and comment read permissions only.
• Google (YouTube) — governed by Google's Privacy Policy. We use YouTube Data API v3 with live streaming and chat scopes.
• Twitch — governed by Twitch's Privacy Policy. We access stream management and chat read/write scopes.

You can revoke Viba's access to any platform at any time through that platform's app settings, or through Viba's connected accounts settings.

We retain your account and activity data for as long as your account is active. Streaming session data and comment history are retained for up to 12 months after each session.

Analytics data is aggregated and anonymized after 90 days.

When you delete your account or submit a data deletion request, we permanently delete your personal data within 30 days, except where retention is required by applicable law.

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data and account
• Portability — Request your data in a structured, machine-readable format
• Restriction — Request that we limit how we use your data in certain circumstances
• Objection — Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@viba.app or use our data deletion request page.

We use industry-standard encryption (TLS in transit, AES-256 at rest) to protect your data. OAuth tokens are stored encrypted and scoped to the minimum permissions required to operate the Service.

No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your Viba account and to review connected platform permissions regularly.

Viba is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy and updating the effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

For questions, concerns, or data requests related to this Privacy Policy, contact us at:

privacy@viba.app