Privacy Policy

1. Who is who

• Hosts are people or organizations who create events and broadcast on the Service.
• Guests are people invited by a host to watch.

For guest list data a host uploads, the host decides why and how that data is used, and we process it strictly on the host's behalf. For account, security, and Service operations data, we decide how it is used.

2. Information we collect

From hosts: name, email address, password or login credentials, organization name, event details, team member invitations and roles, and uploaded guest lists. We do not store payment card numbers on our servers. When paid plans launch after our beta, billing will be handled by a certified payment processor.

From guests: email address (as provided by the host or entered by you for one-time verification), display name, one-time access codes, terms of service acceptance records, and content you submit, such as chat messages and reactions.

Collected automatically: a browser and hardware fingerprint hash (derived from system and canvas attributes to bind authenticated sessions to authorized attendee devices and enforce concurrency limits), session activity (such as join and leave times), and diagnostic and performance data (such as playback quality, buffer rates, and errors). If you enable stream reminders, we also collect a web push device registration token.

Broadcast content: the live video and audio a host streams, and the secure cloud recordings made of broadcasts.

We do not knowingly collect sensitive personal information, and hosts should not upload sensitive personal data in guest lists.

3. How we use information

• To provide the Service: verify guests, deliver streams, enable private chat, and generate recordings.
• To enforce access rules, including device binding, device concurrency limits, and host-initiated bans.
• To show hosts who is in the room and who attended.
• To secure the Service and prevent fraud, piracy, and unauthorized stream link sharing.
• To send transactional messages such as access codes, event reminders, and account security notices.
• To maintain, troubleshoot, and improve the Service.
• To comply with law and enforce our Terms.

4. What hosts and other guests can see

Hosts can see guest list emails, who is currently in the room, attendance records, and chat messages.

Other guests see your chat messages and reactions, along with a masked version of your email address (for example, da***@gmail.com). Please do not place sensitive personal details in chat if you do not want other attendees to see them.

5. Sharing

We share information only as follows:

• Service providers: trusted infrastructure partners who help us operate the Service (cloud hosting, transcoding compute, video storage, and transactional email delivery) under confidentiality and data-protection obligations.
• Hosts: as described above in section 4.
• Legal and safety: when required by law or to protect rights, safety, and platform security.
• Business transfers: such as a merger, acquisition, or sale of assets, with advance notice where required.
• With your explicit direction or consent.

6. Recordings and retention

• Recordings are stored in secure cloud storage and available only to invited guests for up to 7 days, depending on the host's plan, and are then automatically deleted.
• Device-binding tokens last up to 30 days.
• One-time access codes expire shortly after issuance.
• Account and guest list data is kept while the account is active, and deleted or anonymized within 30 days of account closure or upon request, except where retention is required for legal, security, or regulatory reasons.
• Security and access logs are kept for a reasonable operational period to detect abuse and troubleshoot.

7. Security

Every stream is protected with encrypted connections, authenticated access controls, email-verified entry, and cryptographic device binding. While no platform can guarantee absolute security, we design each layer to keep unauthorized viewers out. Please keep your credentials and stream keys private.

8. Cookies and similar technologies

We only use cookies, local storage tokens, and browser hardware fingerprint hashes strictly necessary for authentication, device binding, and keeping you securely connected to a live stream. We do not use third-party tracking, retargeting, or advertising cookies. You can configure your browser to block cookies, but security and playback features may not function properly without them.

9. Your rights and choices

Depending on where you live (including the EEA, UK, and California), you may have the right to access, correct, delete, or export your personal information, object to or restrict certain processing, and withdraw consent.

Where the GDPR or UK GDPR applies, our legal bases for processing include contractual necessity (delivering streams and providing account functionality), legitimate interests (securing broadcasts against piracy and enforcing access rules), consent (web push notifications), and compliance with legal obligations. You also have the right to lodge a complaint with your local Data Protection Authority (such as the UK ICO or your national European supervisory authority).

To make a privacy request, email support@gated.live. If you are an invited guest, we may direct your request to the host who invited you, since they control the guest list. We will not discriminate against you for exercising your legal rights.

10. International transfers

We may process information in countries other than your own, including the United States. Where required, we employ appropriate legal safeguards, such as Standard Contractual Clauses, for international transfers.

11. Children

Service is not directed to children under 18 (or the minimum legal age in your country), and we do not knowingly collect has provided information, and we will promptly delete it.

12. Changes

We may update this policy. If changes are material, we will notify you by email or within the Service before they take effect. The effective date above indicates when this policy was last revised.

13. Contact