Privacy Policy
GDPR by design: how we handle your data.
Last updated : 30 October 2026
1. Data controller
The controller of the processing carried out through this website and through the LibertyTalk platform (the "Service") is TechLiberty (the "Publisher"), a French sole proprietorship (entreprise individuelle), SIREN 908 594 567, 11 allée du Professeur Camille Soula, 31400 Toulouse, France. Contact and data protection officer: valentin.noel@tech-liberty.com.
For the data of members of communities hosted on LibertyTalk, the Publisher acts as a processor on behalf of the client organization that runs the community; that organization is the controller of its own community.
2. Data we collect
On this website: the information you enter in the contact form (name, email, subject, message) or in the sign-up form (name, email, password, chosen subdomain, language, plan), and, if you accept it, audience measurement data (section 11).
On the Service: account data (name, email, hashed password, language); data from the networks you connect, through their official authorization (identifiers, profile, encrypted access tokens, and the events and content needed to run the features you enable); the data of your communities' members (nickname, avatar, network identifiers, statistics); usage and technical data (logs, workflow executions); and billing data, processed by our payment provider Stripe. We never store your card numbers.
The data obtained through YouTube API Services is detailed in section 10. We only collect the data needed to provide the Service and the features you activate.
3. Purposes of processing
Your data is processed to: answer your contact requests; create your account after verifying your email address; provide and operate the Service; run the workflows, publishing, engagement and moderation features you configure; manage your account, plan and billing; ensure the security of the Service and prevent abuse; and, if you accept it, measure the audience of this website.
4. Legal bases
Processing relies, depending on the case, on the performance of the contract (account creation, providing the Service, billing), your consent (connecting a given network, audience measurement on this website), the Publisher's legitimate interest (answering contact requests, security, abuse prevention, improving the Service) and compliance with legal obligations (accounting, retention). You can withdraw your consent at any time, for example by disconnecting the network concerned.
5. Third parties and processors
We do not sell your data. To operate the Service and this website, we use the following processors: Amazon Web Services (hosting, transactional email through SES, DNS, monitoring); Brevo (transactional email and contact form messages); Stripe (payments, subscriptions and marketplace payouts); Cloudflare Turnstile (anti-bot protection); Slack (internal operational notifications); Papertrail (log aggregation, optional); PostHog, hosted in the European Union (commercial usage analytics of the Service, when enabled); Google (Google Tag Manager and Google Analytics 4, only if you accept audience measurement on this website).
The third-party networks you connect (Discord, Twitch, YouTube and Google, Meta, LinkedIn, X, Flickr) receive the data needed for the actions you request. AI features rely on the AI provider whose API key you configure. Each processor acts on our instructions or under its own terms for the parts that concern it.
6. Data retention
Account name and email: for the lifetime of the account, then up to 36 months. Inactive accounts: anonymized after 36 months without login, preceded by a 30-day grace period. Unfinished sign-ups: deleted after 30 days. Network access tokens: kept while the connection exists, deleted when the network is disconnected or revoked.
Workflow executions: deleted after 7 days. Raw events received from networks (webhooks): deleted after 30 days. System logs: deleted after 90 days. Expired member data: purged automatically. Billing data: kept for the period required by legal and accounting obligations. Contact form messages: kept in our mailbox for as long as needed to handle your request.
The data obtained through YouTube API Services follows the specific periods described in section 10. When a workspace is deleted, its data is erased after a grace period.
7. Data sharing and transfers
Data is hosted mainly in Europe (Amazon Web Services, Paris region). Some processors are established in the United States or process data there, notably Google and YouTube, Meta, X, Stripe, Slack, and AWS for sending email through SES (us-east-1 region). These transfers are governed by the European Commission's Standard Contractual Clauses or by the EU-US Data Privacy Framework where the provider is certified. You may obtain a copy of these safeguards by contacting us.
8. Security
We implement technical and organizational measures suited to the risk: a dedicated database per workspace with no mixing between communities, encryption at rest of network access tokens (AES-256), hashed passwords, signature checks on inbound webhooks, access controls and monitoring. No system is perfectly secure, but we work to protect your data and to react to incidents.
9. Your rights
In accordance with the GDPR, you have the right to access, rectify, erase and port your data, the right to object to and to restrict certain processing, and the right to withdraw your consent at any time. You can exercise these rights by writing to valentin.noel@tech-liberty.com; we respond within one month, extendable by two months for complex requests.
You also have the right to lodge a complaint with your supervisory authority; in France, the Commission nationale de l'informatique et des libertés (https://www.cnil.fr).
10. YouTube and YouTube API Services
LibertyTalk uses YouTube API Services provided by Google. When you connect a YouTube channel, you authorize LibertyTalk, through Google's authorization screen, to access the data described below. This data is also subject to the Google Privacy Policy. Using LibertyTalk's YouTube features means you agree to the YouTube Terms of Service.
Data accessed and how it is used: your channel's identifier, title and avatar, to identify the connection or to sign you in with YouTube (LibertyTalk does not store the email address of your Google account); the channel's description and country, and its subscriber, view and video counts, recorded as a history for your community statistics; your playlists, to choose the one a video is added to; the publication of your new videos and the state of your live broadcasts (title, thumbnail, category, concurrent viewers), to trigger your workflows and show the Live page; the live chat, Super Chats, new members and comments of your channel, to run the automations you configure, count messages per member and feed the activity feed; for people who interact with your channel (authors of messages, comments or Super Chats, channel members, subscribers whose subscriptions are public), their channel identifier, public name, avatar and, for subscribers, the subscription date, to link them to a member of your community; and the videos, thumbnails, captions and related information you choose to publish, which are sent to YouTube.
Each live chat message is listed in the activity feed, which the administrators of the organization that connected the channel can see: the author's display name, their channel identifier, the message text and the date. These messages are deleted after 29 days. Each viewer's first message also appears in the activity feed ("first message") and in the community's latest events. A command typed in the chat (for example "!discord") triggers the workflows you have configured for that command. The text of a message can also appear in a workflow's execution log, which is deleted after 7 days. The message attached to a Super Chat is kept with that Super Chat in the activity feed, for the periods set out below. LibertyTalk acts on your channel (a chat message, a video upload, a playlist creation) only for the publications, workflows and widgets you have configured or turned on, where the action is shown as a YouTube action. LibertyTalk does not sell YouTube data and does not use it for advertising. The histories, viewer peaks, message counts, XP and other indicators calculated by LibertyTalk are not data provided by YouTube. Only taking part in a YouTube live chat can earn XP. YouTube comments, likes, subscriptions, Super Chats and memberships earn no XP and no badge progress.
Sharing: YouTube data is available to the administrators of the organization that connected the channel and is not shared with other client organizations. It is hosted and processed by our technical processors (section 5). If you configure a workflow that sends this data elsewhere (another network, a webhook, the AI provider whose key you supplied), it is sent to the destination you chose.
Retention: YouTube access tokens are encrypted and kept while the channel is connected. Your channel statistics are kept as a history while the channel is connected, including, without identity or content, the type and date of YouTube events, the amount of Super Chats and memberships, and message counts; LibertyTalk checks at least every 30 days that its access is still authorized. Live chat messages from your broadcasts (author's display name and channel identifier, text, date) are deleted every day once they are 29 days old, so they are never kept for more than 30 days. Other YouTube data, including data about other YouTube users, is kept for 30 days at most unless it is refreshed from YouTube within that period. When you disconnect YouTube in LibertyTalk, the token is revoked with Google at the time of disconnection (unless the channel is still connected elsewhere in LibertyTalk) and the related YouTube data is deleted within 7 days. If you remove access from your Google account, this data is deleted within 30 days. On a written request to valentin.noel@tech-liberty.com, the YouTube data about you is deleted within 7 days.
Revoking access: in the LibertyTalk dashboard, Networks menu, open the YouTube channel, then the "…" menu > "Disconnect network" (if the channel is connected to several communities, disconnect it from each of them so that access is revoked with Google); or from your Google account permissions page, https://security.google.com/settings/security/permissions.
Cookies and your device: connecting a channel and running YouTube automations do not set any cookie and do not write anything to your device; tokens stay on our servers. When content published on LibertyTalk embeds a YouTube video, the player, loaded from youtube.com, may set or read Google cookies.
LibertyTalk's use of information received from Google APIs, and its transfer to any other app, adheres to the Google API Services User Data Policy, including the Limited Use requirements. For any question about YouTube data: valentin.noel@tech-liberty.com.
12. Contact
For any question about this policy or to exercise your rights, you can contact us at the address indicated below.
Any question about this document can be sent to valentin.noel@tech-liberty.com. — Terms of Service