Privacy Policy

If You Create an Account

• Email address (for magic-link login and account recovery)
• Account creation and last-login dates
• Optional profile fields you choose to set later (for example display name), when that feature exists

When You Link Platforms

• Your user ID from each linked platform (Twitch, Kick, YouTube, etc.)
• Your username on each platform
• Connection status (linked or disconnected)
• Platform OAuth tokens (encrypted and stored server-side only; never in your browser or sent in plaintext)

From Your Usage

• Login events and IP addresses (for security), as provided by our auth and hosting providers
• Basic server logs needed to operate and diagnose the website

Live Stream Content

• We do not download, cache, or record any video, audio, or chat from streams
• We do not store stream transcripts or VOD data
• We do not monitor what you watch as a content archive; we provide a viewing interface
• Streams are served directly from Twitch, Kick, YouTube — not through our servers as a CDN for stream media

Tokens in Your Browser

• OAuth tokens are never stored in browser localStorage, sessionStorage, or cookies for platform linking
• Tokens are encrypted and stored only on our secure backend
• Your browser never sees the platform token; only our server can decrypt and use it

Personal Files

• We do not access, scan, or store files from your computer
• We do not monitor your system processes or file system
• We do not capture your screen without your explicit consent (screen sharing, if added later, will require an explicit picker)

Sensitive Data

• We do not intentionally collect special-category data such as racial or ethnic origin, political beliefs, religious affiliation, health info, biometric data, or sexual orientation
• We do not track your activity on other websites or apps outside Vesper

Children's Data

• We do not intentionally collect data from children under 13
• See Section 6

Operating the Service

• Authenticate your login (magic link)
• Keep account and linked-platform state available
• Connect to platforms and fetch data you request
• Remember preferences stored with your account when those features exist

Communication

• Send login magic links
• Respond to your support questions at support@vesperdesk.app
• Alert you to material changes to this Policy or the Terms when practical

Improvement & Fixes

• Fix bugs and service issues
• Improve performance and stability of the website and APIs

Security

• Detect and prevent fraud or abuse
• Comply with legal obligations

Vercel

Hosts the Vesper web application (vesperdesk.app) and backend API.

https://vercel.com/legal/privacy-policy

Supabase

Stores your account data, encrypted tokens, and related database records; provides authentication infrastructure.

https://supabase.com/privacy

Linked Platforms

When you link Twitch, Kick, YouTube, or another platform:

• That platform's privacy policy applies to their data
• We exchange authentication through their official OAuth flow
• They control what data they share with us and what they collect on their side

Email Delivery

Magic-link and transactional email may be sent through Supabase Auth and/or a transactional email provider we configure (for example Resend) for production delivery.

How Long We Keep Data

Deleting Your Account

Email support@vesperdesk.app from your account email and ask us to delete the account. We will remove your data from our servers within 30 days.

What Happens When You Delete

• Your account profile is permanently removed
• Linked platform info is deleted
• Encrypted tokens are securely destroyed
• Linked platforms keep their own records (contact them to request deletion there)

Data Portability

You may request a copy of your Vesper account data (account email, linked platforms list, and related profile fields we store) by emailing support@vesperdesk.app.

Your Privacy Rights

Depending on where you live, you may have the right to:

• Access: Request a copy of your data
• Correct: Fix inaccurate information
• Delete: Request deletion of your account and data

How to Exercise Your Rights

Email support@vesperdesk.app with:

• Your name and account email
• What you're requesting (access, deletion, correction, etc.)
• Any supporting details

Response Time: We aim to reply within 30 days.

Operator

Justin Farmer, operating as Vesper Desk (sole proprietor; Kansas)

Marketing Communications

• We do not send promotional emails unless you opt in
• Unsubscribe anytime from any promotional email we send (transactional auth mail is required for login)

Security

We use encryption and industry-standard security measures to protect your data. No internet service is 100% secure. We can't guarantee absolute protection but are committed to keeping your data safe.

International Users

Vesper operates with infrastructure that may process data in the United States and other countries. By using Vesper, you understand your information may be transferred and processed in those locations. We take reasonable steps to protect your information in transit and at rest.

Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or the law. We'll notify you of material changes via email or a notice on the service when practical. Continued use means you accept the changes.