AAiri Stream

Public privacy policy

Privacy Policy

Last updated: March 24, 2026

This policy explains how Airi Stream handles personal data when you access the public website, the protected download flow, the desktop application, and the related API services published under the Airi Stream environment.

1. Scope of the service

Airi Stream is a desktop-oriented service used to centralize live activity from Twitch, YouTube, and Kick in a single operator workflow.

This policy covers the public site available at airistream.nest4cloud.com, the API endpoints exposed from api-airistream.nest4cloud.com, the protected installer delivery flow, and related authentication and payment flows used by the service.

2. Data we process

Account and access data: identifiers used for login, verification, refresh, and access control, including email address, phone number, user ID, and related verification status when these features are used.

Platform connection data: OAuth tokens, refresh tokens, channel identifiers, nicknames, and technical metadata required to connect Twitch, YouTube, and Kick accounts.

Live activity data: chat messages, follows, subscriptions, raids, stream status updates, viewer counts, audience counters, and normalized event history received from connected platforms or webhook sources.

Desktop configuration data: user preferences, animation and overlay rules, OBS connection settings, macro definitions, notification settings, and other operator configuration saved locally on the device and, for some settings, through authenticated application storage.

Payment and subscription data: customer email, order identifiers, checkout session identifiers, subscription identifiers, plan references, payment status, billing period dates, and related transaction metadata needed to provide paid access where applicable.

Technical data: request logs, security headers, callback payloads, and operational metadata needed to secure, troubleshoot, and maintain the service.

Website preference data: the public landing page stores the selected language in your browser local storage.

Local secure storage data: the desktop app may store tokens or session data in secure OS-backed storage such as the system keychain or credential vault, depending on the environment.

3. Why we process this data

To provide the core product, including authentication, platform linking, live event aggregation, protected installer delivery, updates, billing, and subscription management.

To secure the service, prevent abuse, verify webhook signatures, diagnose incidents, and maintain infrastructure integrity.

To communicate service state, validate access rights, and operate the release and update workflow.

4. Legal bases

Processing may be based on performance of the service requested by the user, compliance with legal obligations, and the legitimate interest of operating and securing Airi Stream.

Where third-party platform authorization is required, the user is responsible for ensuring they are authorized to connect the relevant Twitch, YouTube, or Kick account.

5. Data sources

We receive data directly from users, from connected streaming platforms and webhook integrations, from the authentication service used by Airi Stream, from local desktop usage and configuration flows, and from the payment provider or subscription processor used to manage purchases and plans.

6. Sharing

Personal data may be shared with infrastructure and service providers strictly required to operate Airi Stream, including hosting, authentication, payment, and connected platform integrations.

Data is not sold.

7. Retention

Data is retained only for as long as necessary to operate the service, maintain security, comply with legal obligations, resolve disputes, and enforce contractual rights.

Retention periods may differ depending on the category of data, including account records, tokens, event history, desktop configuration, payment records, and security logs.

Certain OAuth state and token handoff records used by the API for connection flows are intentionally short-lived and automatically expire after a brief period.

8. Security

Airi Stream uses access control, short-lived OAuth handoff storage, environment-based secrets, signature verification for supported webhooks, and operational safeguards designed to limit unauthorized access, misuse, or disclosure.

No system can guarantee absolute security. Users remain responsible for protecting their own credentials and connected third-party accounts.

9. Local network features

The desktop application can expose local overlay and event resources for OBS or similar production tooling on the local network or local machine.

Users are responsible for configuring their local network, firewall rules, and broadcasting tools appropriately when enabling these features.

10. International services

Because Airi Stream integrates third-party services such as Twitch, YouTube, Kick, authentication, and payment providers, data may be processed by services operating in multiple jurisdictions.

11. Your rights

Depending on the laws that apply to you, you may have rights of access, correction, deletion, restriction, objection, and portability regarding your personal data.

Requests concerning privacy or data rights should be sent through the public contact channel used for your access to Airi Stream or to the service operator identified in the legal notices published with the service.

12. Children

Airi Stream is not intended for children under the age required by applicable law to use the service independently.

13. Changes

This policy may be updated to reflect changes in the product, legal requirements, or service providers. The version published on this page is the current public version.