Privacy Policy
Last updated: 2026-10-26 · Operated by Loop24 (loop24live.com)
1. Overview
Loop24 ("the Service") helps you automatically create, stream and manage live broadcasts on YouTube channels you are authorised to manage. This policy explains what personal data we collect and how we handle it.
2. Data we collect
(1) Account data: email, name and profile image received from Google sign-in; for email sign-up, your email and password (stored encrypted). (2) YouTube credentials: OAuth access/refresh tokens for channels you approve, plus channel ID and name. (3) Service data: uploaded media files, broadcast titles and settings, streaming history (start, stop and recovery times). (4) Billing data: plan, payment dates, amounts and status. We do not store card numbers ourselves; they are processed by our payment processor (Toss Payments). We store only the encrypted payment token issued by the processor, the card issuer and the last few digits of the card number. (5) Automatically collected: IP address, browser information and language preference (cookie).
3. How we use it
Only to (1) automate creating, starting, stopping and recovering YouTube broadcasts, (2) re-stream according to your schedule, (3) enforce plan limits and process payments, (4) answer support requests and send service notices, and (5) prevent abuse.
4. Sharing and processors
We do not sell personal data. The minimum necessary data is shared with these providers to deliver the Service: Google/YouTube (broadcast APIs), Toss Payments (payment processing), PayPal (overseas payments, planned), Cloudflare (file storage) and OVH (server hosting). Our servers are located in Canada, so your data may be processed outside your country. To handle support inquiries and notify operators, we transfer personal data abroad as follows: (1) Google LLC (Gemini API) — purpose: analysing inquiries and drafting replies; country: United States; when/how: sent over the network when an inquiry is received; data: inquiry text, account email and usage information; retention: deleted without delay once the purpose is fulfilled (subject to the provider's policy). (2) Telegram Messenger Inc. (Telegram) — purpose: operator notifications; countries: United Kingdom, United Arab Emirates and others; when/how: sent over the network when an inquiry is received; data: inquiry summary and email; retention: kept in the operator channel after the notification is sent. If you do not want your data transferred abroad, you can ask our support team; in that case some features such as AI automatic replies may be limited.
5. Google user data
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only for the features described above, never for advertising, and is not read by humans.
6. Retention and deletion
Tokens and channel data are kept while the channel is connected and deleted immediately on disconnection. Media files and broadcast settings are deleted when you delete your account. If streaming is stopped because payment was not made, media files are deleted 7 days after the stop. Payment records are retained for 5 years as required by law. You can revoke our access at any time under Google Account → Security → Third-party apps.
7. Your rights
You may request access, correction, deletion or restriction of your personal data by emailing us; we act without undue delay. Users in the EU/EEA and UK have the additional rights provided by the GDPR/UK GDPR, including data portability, objection and lodging a complaint with a supervisory authority.
8. Cookies
The Service uses essential cookies to keep you signed in and remember your language, and first-party analytics cookies to measure how visitors arrive and progress through the Service. Analytics cookies store only a random identifier and contain no information that identifies you personally. We use no advertising cookies and no third-party tracking tools.
9. Security
Credentials and personal data are held on a dedicated server with restricted access, reachable only by the minimum personnel required to operate the Service. All traffic is encrypted over HTTPS, and database backups are transferred over an encrypted channel to access-restricted storage. Encryption of authentication tokens at rest is being rolled out progressively. In the event of a data breach we will notify affected users without undue delay as required by law.
10. YouTube API Services and Google data
This Service uses YouTube API Services to collect and store your YouTube channel information (channel ID and name) and the access tokens needed to create and manage live broadcasts. This information is used only to stream your broadcasts and is not provided to third parties. You can (1) delete the access token by disconnecting the channel in the dashboard, and all stored YouTube data by deleting your account, and (2) revoke this Service's access directly on the Google security settings page (https://myaccount.google.com/connections?filters=3,4). When you disconnect a channel, its access token is deleted immediately and Google access is revoked; channel identification information (channel ID and name) is deleted when you delete your account. Access tokens are refreshed only if they have expired at the time of an API call, and no additional lookups are made otherwise. This Service's use of Google data is subject to the Google Privacy Policy (http://www.google.com/policies/privacy).
11. Changes and contact
Changes to this policy are posted on the website; material changes are announced in advance. Data protection contact: 나다현 · loop24live@gmail.com · 010-2188-9930