Privacy Policy

1. Introduction

Soulstack ("us", "we", "our", or "Platform") operates the soulstack.gg website (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

• Personal Data: While using our Service, we may ask you to provide us with certain personally identifiable information, such as your email address, display name, and linked third-party account information (e.g. Twitch user ID).
• Usage Data: We may also collect information on how the Service is accessed and used ("Usage Data"). This may include IP address, browser type, pages visited, time spent on pages, referring website, and device information. When you consent to analytics cookies, this data is collected through Google Analytics to help us understand and improve the Service.
• Service Configuration Data: We collect configuration settings you provide for services such as Stream Studio, Chat Bot, Quest, and related creator tools.
• Service Generated Data: Soulstack services may generate data related to user interactions, such as gameplay, activity, or workspace usage statistics.
• Public Index Data: By default, player statistics and public collections from Quest may be included in our public player index, which allows anyone to search for and view player data. This includes player usernames, lifetime statistics, current goose collections, and associated Twitch channel names. You can opt out of this public visibility at any time through your Quest privacy settings or by contacting us via the Support page. When you opt out, your data will be removed from public search results within 30 days.

Cookies and Similar Technologies

Our Service uses cookies to function correctly and improve your experience. Cookies are small files stored on your device. We use two types of cookies:

• Essential Cookies: Required for the Service to function, including maintaining your session when you log in and ensuring the security and stability of our website.
• Analytics Cookies: We use Google Analytics to understand how visitors use our Service, which pages are most popular, and how we can improve. These cookies collect anonymous information such as pages visited, time spent on pages, and browser type. You can opt out of analytics cookies through our cookie banner.

By clicking "Accept All" on our cookie banner, you consent to both essential and analytics cookies. By clicking "Essential Only," only essential cookies will be used.

3. Use of Data

Soulstack uses the collected data for various purposes:

• To provide and maintain our Service
• To manage your account and provide customer support
• To provide analysis or valuable information so that we can improve the Service
• To monitor the usage of the Service
• To detect, prevent and address technical issues

4. Data Storage and Security

We store your data using secure cloud infrastructure (Amazon Web Services). We take reasonable steps to protect your Personal Data but remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

4a. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity - To provide and maintain the services you request, including features linked to Twitch, Discord, and user-defined configurations for services such as Stream Studio, Chat Bot, or Quest.
• Legitimate interests - To operate, secure, and improve our services, detect misuse, and analyse anonymised usage trends.
• Consent - When you explicitly provide data (e.g. submitting a form), we rely on your consent for processing.

We do not use your data for marketing or advertising purposes. We collect only the minimum data required to deliver and operate the Service.

4b. Data Retention

We retain personal data only as long as necessary to provide the Service and comply with applicable laws. This includes:

• Account-related data (e.g. display name, email, service configurations) is retained for the duration of your use of the Service.
• Generated data (e.g. game stats, interaction logs) is retained while your account is active or until it is reset or deleted by you.
• Support form submissions are retained indefinitely to maintain a record of user enquiries and support history.

If you delete your account via the account settings, all associated data will be automatically deleted via our batch processing systems within six hours of account deletion.

You may also request deletion of your data at any time by contacting us via the Support page. We will respond to such requests within a reasonable timeframe, in accordance with applicable law.

5. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where data protection laws may differ. When we transfer data outside the EEA, we ensure that appropriate safeguards are in place to protect your data, including through the use of Standard Contractual Clauses (SCCs) or other legally approved mechanisms.

6. Service Providers

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), provide the Service on our behalf, or assist us in analysing how our Service is used. These include:

• Amazon Web Services: For hosting and infrastructure services.
• Google Analytics: For website analytics (when you consent to analytics cookies). Google Analytics collects anonymous usage data to help us understand how visitors interact with our Service.
• Google Calendar API: We use the Google Calendar API to provide read-only calendar sync, allowing you to view your Google Calendar events within our Service. We request only the calendar.readonly scope and do not create, modify, or delete any events in your Google Calendar.

You can learn more about how Google uses data at Google's Privacy Policy .

These third parties have access to data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

6a. Google User Data

Our Service accesses certain Google User Data via the Google Calendar API when you choose to connect your Google Calendar. This section details how we access, use, store, and share this data:

• Access: We access your Google Calendar event data in read-only mode (event titles, times, descriptions, and calendar metadata). We do not modify, create, or delete any events in your Google Calendar.
• Use: This data is used solely to display your Google Calendar events within our dashboard calendar view. We do not use this data for advertising or surveillance.
• Storage: OAuth tokens are stored securely in our database. Calendar event data is synced and cached for display purposes; the primary source remains Google Calendar.
• Sharing: We do not share your Google User Data with any third parties, except as required by law.

You can revoke our access to your data at any time via the Google Security Settings page or by disconnecting Google Calendar from within the Service.

7. Your Data Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data under applicable data protection laws, including GDPR. These rights include:

• Right to Access - You can request access to the personal data we hold about you.
• Right to Rectification - You can request corrections to any inaccurate or incomplete data we hold about you.
• Right to Erasure (Right to be Forgotten) - You can request the deletion of your personal data under certain circumstances.
• Right to Restrict Processing - You can request the restriction of processing of your personal data in certain situations.
• Right to Data Portability - You can request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object - You can object to the processing of your personal data under certain circumstances.
• Right to Withdraw Consent - If we are processing your data based on your consent, you can withdraw your consent at any time.

Analytics Opt-Out

You can opt out of analytics cookies at any time by clearing your browser cookies and selecting "Essential Only" when the cookie banner appears again. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on .

How to Contact Us About Your Data

To exercise any of the above rights or if you have questions about your personal data, please contact us via the Support page. We aim to respond to all requests within 30 days, as required by UK law.

For public index opt-out requests: You can opt out immediately through your Quest privacy settings, or contact us and we'll process your request within 24 hours.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. If we make any material changes, we will notify you by posting the updated Privacy Policy on this page and indicating the date of the latest update. You are advised to review this Privacy Policy periodically for any changes. By continuing to use our Service after any changes to the Privacy Policy, you accept and agree to the updated terms.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us via the Support page.

10. Related Documents

Your use of the Service is also governed by our Terms of Service . Please review them carefully.