Privacy Policy

1. Overview

This policy explains what Liranzo collects, why, how long we keep it, and the choices you have. It applies to liranzo.tv and the apps and services we operate.

2. What we collect

We collect the following categories of information:

• Account data: email address, display name, channel handle, password hash (never the password itself), birth date for the age gate, and role/permission data.
• Sign-in data: if you use Google sign-in, Firebase Authentication provides your email address, verified status, display name and profile photo URL. We never receive your Google password.
• Content: videos, live streams, thumbnails, titles, descriptions, hashtags, comments, likes, follows, playlists, reports and messages you send to us.
• Usage data: pages viewed, videos watched (including watch time and completion), search queries, device and browser type, approximate location derived from IP, and server logs.
• Safety data: automated moderation decisions, reports, appeals and enforcement history.
• Commerce data (when monetisation launches): orders, payments and payout details. Card data is handled by our payment processor, not stored by us.

3. Why we use it

We use information to:

• create and secure your account and sign you in;
• host, transcode and deliver your content, and power recommendations;
• screen uploads, comments and live content for safety and enforce our Terms;
• respond to reports, copyright claims and support requests;
• measure and improve the service, and prevent abuse, fraud and attacks;
• comply with legal obligations and enforce our agreements.

4. Automated safety screening and AI providers

To keep the platform safe, we send content to NVIDIA's hosted AI models for automated classification. That includes titles, descriptions, comments and a small number of still frames sampled from uploaded videos. We do not send entire video files for this purpose.

Results are stored as moderation records tied to the content and the uploader's account. Automated results may hide content for human review or, for severe categories, suspend an account. You can contact us to appeal.

5. Legal bases

Where data-protection law requires a legal basis, we rely on: performance of a contract (providing the service), legitimate interests (security, safety, product improvement), consent (where we ask for it, such as optional communications), and legal obligation (tax, law-enforcement requests, copyright).

6. Sharing

We share data only as needed with:

• service providers that host our infrastructure, databases, queues and media delivery;
• Firebase Authentication (Google) for sign-in;
• NVIDIA for automated content-safety classification;
• payment and payout providers once commerce launches;
• law enforcement or rights holders where required by law or a valid legal process;
• a successor entity in a merger, acquisition or asset sale, under the same protections.

7. Cookies and sessions

We use a strictly necessary session cookie (httpOnly, SameSite=Lax, Secure in production) to keep you signed in. We do not use advertising cookies.

Analytics is first-party and cookieless. Your browser sends the page path and an external referrer; a random per-tab identifier is hashed together with the UTC day and a server secret to count unique visitors. We do not store IP addresses, cross-site identifiers or advertising IDs for analytics, and Do Not Track is honored. Page-view records are kept for 180 days.

8. Retention

We keep account and content data while your account exists. After deletion, backups and legal records may persist for a limited period. Moderation records and abuse evidence may be kept longer where necessary to protect users or comply with law. Server logs are kept for a short operational window.

9. Security

Passwords are hashed with scrypt. Sessions are opaque random tokens stored only as hashes, sent in httpOnly cookies. Access to production data is restricted. No system is perfectly secure, so use a strong unique password and tell us about suspected compromise.

10. Children

Liranzo is not for children under 13, and we do not knowingly collect their data. If we learn that an account belongs to a child under 13, we will delete it. Parents and guardians can contact us to request removal.

11. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict certain processing, and to withdraw consent. You can edit most information in Settings, or contact us. You may also complain to your local data-protection authority.

12. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses.

13. Changes and contact

We may update this policy; material changes will be announced in-product or by email. Questions or requests: [email protected].