Privacy Policy

Last updated: August 25, 2026

1. Introduction

LiveInVibe ("we," "us," or "our") operates the website liveinvibe.com ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the data practices described in this Privacy Policy, you should not use our Service.

2. Information We Collect

2.1 Personal Information You Provide

General Account Information: When you register for an account or use our Service, we collect your name, email address, password (stored as encrypted hash), gender, and date of birth. We also automatically collect technical information including your IP address, browser User-Agent information, geographic location data, and cookies for session management and user experience.

Age Verification and Biometric Data. To comply with legal requirements and ensure the security of our service, we are committed to taking reasonable steps to verify that our users have reached the minimum required age. For this purpose, we use a third-party certified age verification service, Yoti.

• Verification Process: During the verification process, the User voluntarily, upon explicit consent, provides a video selfie. This selfie is scanned to determine the User's age.
• Biometric Information: This scanning results in the creation of facial geometry data (also known as "biometric information" or "Verification Data"), which is used exclusively for:
  1. Assessing and confirming the User's age.
  2. Liveness detection to prevent fraud and the use of altered or manipulated images.
• Data Retention: We do not receive or store original images, face snapshots, or biometric templates. We only receive the final verification status ("Successful" or "Unsuccessful") from Yoti to determine access to the Service.

Identity Documents (Right to Appeal). In cases where the automated biometric verification fails, the User has the Right to Appeal and can choose to submit a valid Identity Document (ID) to our Support team for manual verification.

• We only process this document to confirm the User's age.
• The submitted document is reviewed and permanently deleted on the same day it is received, and in all cases, within 24 hours.
• We do not store or retain copies of the Identity Document; we only store the final verification status.

2.2 Payment Information

When you make purchases through our Service, we use tokenized payment processing and do not store your actual payment card information. Payment card data is processed securely through PCI DSS compliant third-party processors, and we may store tokenized references to your payment methods for convenience.

2.3 Information We Do NOT Collect

We limit our use of analytics to what is necessary to operate and improve our Service. We do not use third-party advertising networks or cross-site tracking technologies to follow your activity across other websites. Any analytics tools we use are limited to understanding usage of our own Service and are described in Section 4.1 above.

3. How We Use Your Information

3.1 Service Provision and Account Management

We use your information for user authentication to identify you as a user and provide secure access to your account, profile management to enable you to create, view, and edit your user profile, account balance management to display and manage your virtual currency balance, and session management to maintain your login session and provide seamless user experience.

3.2 Security and Fraud Prevention

We use your information for account security to verify your identity and protect your account from unauthorized access, system security to maintain the security and integrity of our Service, and geographic security to detect unusual access patterns based on location data.

3.3 Essential Communications

We send only essential service-related communications including transactional messages such as payment confirmation notifications, account balance update notifications, and purchase confirmations. We also send account security communications including registration verification emails, password reset notifications, and security alerts. Additionally, we send service updates including important service announcements and Terms of Service or Privacy Policy updates.

3.4 Legal Basis for Processing (GDPR Compliance)

For users in the European Union, we process your personal data based on the following legal grounds:

Contractual Necessity: We process your account information, authentication data, and payment information as necessary to perform our contract with you and provide our Service.

Legitimate Interests: We process technical information such as IP addresses and session data for security purposes, fraud prevention, and service optimization, which constitute our legitimate business interests.

Consent: Where required by law, we obtain your explicit consent for processing activities such as optional marketing communications or non-essential cookies.

Legal Obligation: We process and retain certain transaction and verification data to comply with financial regulations and legal requirements.

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share your information only with essential service providers necessary to maintain the security, functionality, and legal compliance of our Service:

• Infrastructure and Storage: Google Cloud Platform for global hosting infrastructure, Firebase Firestore for database services and secure data storage, and Firebase Authentication for secure user authentication and session management.
• Security and Performance: Cloudflare for DDoS protection and Web Application Firewall (WAF) services.
• Payment Processing: PCI DSS compliant payment processors for secure transaction handling.
• Age Verification and Biometric Processing: Yoti Ltd. (United Kingdom). For the purpose of age assessment and liveness detection, we transfer the video selfie provided by the User to Yoti. Yoti processes the User's facial geometry data (biometric information) on its servers to estimate age and prevent fraud. As a core security measure, Yoti immediately deletes the original selfie image and all generated biometric data once the verification is complete. The legal basis for this data transfer is the User's Explicit Consent. For more details, please refer to the Yoti Age Verification Privacy Notice .
• Video Streaming Infrastructure: We use a third-party video streaming technology provider to enable delivery and playback of live video content on our Service. This provider may process technical information such as your IP address, device and browser information, network quality metrics, and session/connection data to ensure stream quality and reliability.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.

5. Data Security

We implement comprehensive security measures to protect your personal information through encryption and technical security, access controls and administrative security, infrastructure security, and payment security.

5.1 Encryption and Technical Security

All communications are secured using HTTPS/TLS 1.3 encryption, all stored data is encrypted using AES-256 encryption, we implement rate limiting on API endpoints to prevent abuse and ensure system stability, and we provide network protection through Web Application Firewall through Cloudflare for comprehensive security protection.

5.2 Access Controls and Administrative Security

We require two-factor authentication for all administrative access, implement strict role-based access controls limiting who can access personal information, and conduct comprehensive security assessments and audits regularly.

5.3 Infrastructure Security

We utilize Google Cloud Platform enterprise-grade security with global distribution across secure data centers, Firebase Security with built-in security features, access controls, and automatic security updates, and geographic distribution where data is distributed globally across Google Cloud Platform data centers for redundancy and security.

5.4 Payment Security

All payment processing meets Payment Card Industry Data Security Standards, card data is tokenized by certified payment processors, and all payment data transmission uses dedicated secure channels.

6. Data Retention and Deletion

6.1 User Account Data

Active Account Information: User account data including profile information, preferences, and account settings are retained while your account remains active and for the provision of our Service.

Account Deletion: When you choose to delete your account, we will remove your personal information from our active systems within 30 days, including deletion of profile information, removal of account credentials, clearing of session data, and removal from active user databases.

Limitations to the Right of Deletion. Please note that the right to erasure is not absolute. We may retain certain information where it is necessary for our legitimate interests or to comply with legal obligations. This includes, but is not limited to:

• Fraud Prevention and Security: We may retain technical identifiers (such as Device IDs or hashed email addresses) to prevent re-registration by users who were previously banned for violating our Terms of Service.
• Age Verification Compliance: We may retain the final status of an Age Verification (AV) check to ensure that users who failed the verification cannot circumvent our safety requirements.
• Legal and Regulatory Requirements: Retention of transaction records or data necessary for tax, audit, or exercise/defense of legal claims.

Information retained for these purposes will be isolated from active processing and kept only as long as necessary to fulfill the specific purpose.

Grace Period: Deleted accounts may be recoverable for a period of 30 days after deletion request, after which all data is permanently removed.

6.2 Technical and Security Data

Security Logs: IP addresses, login attempts, and security-related logs are retained for 12 months for security monitoring and fraud prevention purposes.

Session Data: Authentication sessions and cookies expire according to their specified durations or when you log out.

Geographic Data: Location information used for security purposes is retained for 6 months.

6.3 Regulatory Compliance Data

Financial Transaction Records: Payment verification and transaction data are retained for 5 years in compliance with financial regulations and anti-money laundering requirements, after which they are automatically deleted.

Legal Compliance: Some data may be retained longer if required by applicable laws, legal proceedings, or regulatory investigations.

6.4 Backup and Recovery Data

Automated Backups: Data backups are created automatically by Google Cloud Platform services as part of our infrastructure and follow the same retention schedules as primary data.

Backup Security: All backup data is encrypted using AES-256 encryption and distributed across Google Cloud Platform data centers worldwide for redundancy.

Backup Deletion: Backup data is purged according to the same timelines as active data deletion schedules.

7. Your Rights and Choices

7.1 Account Access and Control

You have the following rights regarding your personal information:

Right of Access: View the personal information we hold about you through your account dashboard or by requesting a copy of your data.

Right to Rectification: Update or correct your personal information through your profile settings or by contacting our support team.

Right to Erasure (Right to be Forgotten): Delete your account and associated personal information, subject to legal retention requirements.

Right to Data Portability: Request a copy of your personal information in a structured, commonly used, and machine-readable format.

Right to Restrict Processing: Request limitation of processing of your personal data in certain circumstances.

Right to Object: Object to processing of your personal data based on legitimate interests, including automated decision-making.

Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe your privacy rights have been violated.

7.2 Communication Preferences

Some communications such as transaction confirmations and security notifications cannot be disabled as they are necessary for service operation and account security. You can opt out of non-essential communications while maintaining your account.

7.3 Cookie and Session Management

You can manage your session and cookie preferences through your browser settings. However, disabling essential cookies may limit the functionality of our Service, particularly your ability to maintain login sessions.

8. International Data Transfers and Geographic Scope

Our Service utilizes Google Cloud Platform infrastructure, which operates globally across multiple data centers worldwide. Your information may be transferred to and processed in countries other than your country of residence. Our Service is available worldwide, except in jurisdictions where access is restricted by local regulations. We ensure that international data transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

9. Age Restrictions and Children's Privacy

Our Service is intended solely for individuals who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If you become aware that someone under 18 has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

10. Third-Party Links and External Services

Our Service may contain links to our social media profiles on platforms such as Facebook, Instagram, and X (formerly Twitter). These links direct you to external platforms that have their own privacy policies. We are not responsible for the privacy practices of external websites or services. We encourage you to read the privacy policies of any third-party services you visit through links from our platform.

11. Contact Information and Data Protection Inquiries

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at [email protected]

GDPR-Specific Requests: For European Union users, you can direct specific GDPR-related inquiries to our data protection contact at the same email address with "GDPR Request" in the subject line.

We will respond to your privacy-related inquiries within a reasonable timeframe (within 30 days for GDPR requests) and assist you with any concerns about how we handle your personal information. For complex requests, we may extend this period by an additional 60 days, and we will inform you of any extension and the reasons for it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of any material changes by posting the updated policy on our website with a new "last updated" date, providing notice through our Service if changes are significant, and sending email notification for material changes that affect your rights. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Legal Compliance and Regulatory Framework

This Privacy Policy is designed to comply with applicable data protection regulations, including General Data Protection Regulation (GDPR) for European Union users, California Consumer Privacy Act (CCPA) for California residents, and other relevant privacy laws in jurisdictions where our Service is available. We are committed to maintaining compliance with evolving privacy regulations and updating our practices as necessary to protect your privacy rights.

14. Automated Decision-Making and Profiling

14.1 Limited Automated Processing

Our Service uses minimal automated processing for essential security and operational purposes:

Security Monitoring: We use automated systems to detect unusual login patterns, potential security threats, and suspicious account activity based on factors such as IP address, geographic location, and access patterns.

Account Protection: Automated systems may temporarily restrict account access if unusual activity is detected, requiring additional verification steps to protect your account.

14.2 No Profiling for Marketing

We do not engage in automated decision-making or profiling for marketing, advertising, or commercial purposes. All automated processing is limited to essential security and service functionality.

14.3 Your Rights Regarding Automated Decisions

If you are subject to a decision based solely on automated processing that significantly affects you, you have the right to request human intervention, express your point of view, and contest the decision. You can contact us using the information provided in this Privacy Policy to exercise these rights.

15. Contact Information

If you have any questions, concerns, or complaints regarding this Policy or our Services, please contact us at:

Company:
Registration number: ΗΕ 427607
Registered office: Nikis 1, Anthoupoli, 2350, Nicosia, Cyprus

Email: [email protected]

We will review and respond to your inquiry in a timely manner, in accordance with applicable laws and regulations.