Privacy Policy

Last updated: August 12, 2026

This Policy describes what personal data we process when operating Yvivo (yvivo.com and app-live.yvivo.com, the panel and the overlays), for what purposes, who it is shared with and how you can exercise your rights. This Policy is published in several languages for convenience; if the versions ever conflict, the English version controls.

1. Data controller

The data controller is Colina Live LLC, a limited liability company organized in the United States of America, headquartered in San Francisco, California, operator of Yvivo. Contact: the form at yvivo.com («Request your account» section), the WhatsApp published on the page, or by replying to any Yvivo email.

2. What data we process

• Contact requests: name, WhatsApp number, email (optional), message, plan of interest and the IP address the form is sent from (anti-abuse control).
• Accounts and billing: account holder's email, username, password (stored only as an irreversible hash, never in plain text), the purchased plan and Stripe customer and subscription identifiers. Card details are processed exclusively by Stripe and never reach our servers.
• Service operation: the TikTok @usernames of connected creators and the public events of their LIVE streams — Gifts, Likes, comments, follows and shares, including the viewer's public username, nickname and profile photo as TikTok displays them — to feed the account's own counters, overlays and historical reports.
• Technical data: one session cookie strictly necessary to keep your panel session open, and basic technical logs (IP, date) for security purposes. The panel also stores usage preferences locally in your browser; those preferences are not sent to us.

3. How we use it

• To handle your contact or purchase request.
• To create and manage your account, provide the Service and support you.
• To process payments and manage the subscription (through Stripe).
• To send operational emails: credentials, account and payment notices.
• To protect the Service's security (abuse and fraud prevention).

We do not send third-party advertising and we do not sell your data. If we ever send our own commercial communications, you will be able to opt out at any time.

4. Legal basis

We process data to handle your own request and to perform the subscription agreement; technical data, based on our legitimate interest in the Service's security; and, where the law requires it, with your consent (for example, when submitting the contact form).

5. Who we share it with

Only with the providers needed to operate: Stripe, Inc. (payment processing, USA) and Resend (transactional email, USA). We do not sell or hand over your data to third parties for advertising purposes. We may disclose information if a competent authority lawfully requires it.

6. International transfers

Colina Live LLC operates from the United States of America, and our payment and email providers (Stripe and Resend) process data in that country. Our service infrastructure may additionally be located in other countries; wherever data is processed, we apply the security measures described in this Policy. By using the Service, you understand that your data may be transferred and processed as described above.

7. Retention

• Account data and stream history are kept while the account exists; when the account is deleted (or when individual accounts switch creators), the associated history is removed from our systems.
• Contact requests are kept while we handle them and for up to 12 months after the last contact if no purchase results.
• Billing records may be kept for the additional time required by legal or accounting obligations.

8. Security

We apply reasonable technical and organizational measures: TLS-encrypted connections, passwords stored as irreversible hashes, per-account data isolation, secret-token overlay links and restricted access to our systems.

9. Your rights

Depending on the law of your place of residence, you may have rights of access, rectification, deletion and objection over your personal data, as well as the right to withdraw consent you have given. We honor these requests for all our users, regardless of country: write to us through the contact channels stating your request and we will respond within the applicable deadlines. This includes viewers of a stream who do not want their public activity to appear on a creator's overlays. You may also lodge a complaint with the data-protection authority of your jurisdiction.

10. Minors

The Service is intended for people 18 years of age or older and we do not knowingly collect data from minors as customers. Viewer information comes from what TikTok publishes in the stream and is used solely to operate it.

11. Changes to this Policy

We publish the current version on this page with its update date. If a change is substantial, we will communicate it by email or through the panel.

12. Contact

Form at yvivo.com («Request your account» section), the WhatsApp published on the page, or by replying to any Yvivo email.