1. Controller
The data controller is Pöhinä Group Oy (Business ID 3419352-5), Järjestökuja 2 B 10, 05400 Jokela, Finland. Contact: joni@pohina.group.
2. What VISP is
VISP is a self-hosted SRT/RTMP relay and control plane for remote live streaming. Your broadcast/stream keys stay with you and are not sent to VISP. VISP relays live media and provides account, dashboard, and device features around that relay.
3. Data we process
- Account data from Twitch or Kick sign-in: name, email address, profile image, and linked provider account identifiers.
- Authentication data: OAuth access/refresh tokens (stored securely), sessions, IP address, and user agent.
- Service configuration: relay publishing paths, labels, hashed/encrypted publish secrets, native installation IDs, and setup preferences.
- Operational measurements: connection and latency (RTT) samples associated with your account.
- Dashboard snapshots: one private low-resolution (~640px) still image per publishing path while live, refreshed about once a minute and expired within about one day after updates stop.
- Chat connection metadata needed to connect chat integrations (for example subscription IDs). Chat message content is not retained by VISP as a content archive.
- Security and service logs for reliability, abuse prevention, and debugging.
VISP does not process payment card data. The service is currently free in beta and does not bill users.
4. Purposes and legal bases
- Providing the service (contract / steps prior to contract): account creation, authentication, relay configuration, dashboard, and related features.
- Security and integrity (legitimate interests): session security, fraud/abuse prevention, and service reliability.
- Legal obligations when we must retain or disclose data under applicable law.
- Product analytics (legitimate interests / privacy design): when configured, cookieless Rybbit analytics for understanding site usage — see the Cookie Policy.
- Optional cookies (consent), if and when enabled — see the Cookie Policy.
5. Recipients and processors
We use infrastructure and subprocessors necessary to run VISP (for example hosting, database, object storage for snapshots, and OAuth identity providers Twitch and Kick). When analytics is configured, we also use Rybbit for cookieless product analytics. Data is shared with them only as needed to provide the service. Stream destinations you choose (OBS, platforms) receive the media you publish; VISP does not take ownership of your stream keys.
6. International transfers
Service infrastructure may process data in the EU/EEA or in other countries. Where data is transferred outside the EEA, we use appropriate safeguards required by GDPR (such as standard contractual clauses) where applicable.
7. Retention
- Account and configuration data: kept while your account is active; deleted from active systems when you delete the account.
- Snapshots: replaced while live; expire within about one day after updates stop.
- Encrypted backups: up to 30 days before overwrite after deletion.
- Security and service logs: up to 90 days, unless law requires longer.
Continuous stream recordings and chat content archives are not kept by VISP.
8. Your rights
Under GDPR you may have the right to access, rectify, erase, restrict, or object to processing, and to data portability, as applicable. You may withdraw consent where processing is based on consent. To exercise rights, email joni@pohina.group or use account deletion.
You may lodge a complaint with the Office of the Data Protection Ombudsman or another competent supervisory authority.
9. Cookies
Essential cookies are used for authentication and session security. Optional cookies are used only with your consent. Details: Cookie Policy.
10. Changes
We may update this policy when the service or law changes. The “Last updated” date at the top will change when we do. Material changes may also be communicated in the product or by email when appropriate.
11. Contact
Privacy questions: joni@pohina.group. Full company details: Contact.