Privacy Policy
VZ Data (the "Service")
Last Updated: March 2026
Effective Date: November 2025
1. Introduction and Commitment to Privacy
3R Media, LLC ("Company," "we," "us," or "our"), operating as VZ Data, is committed to protecting your privacy and ensuring you have a positive experience on our website and web application, VZ Data (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use the Service. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.
We recognize that your data is one of your most valuable assets. We are committed to handling your information responsibly, transparently, and in compliance with all applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable regulations.
2. Information We Collect
We collect information in various ways, including information you provide directly, information collected automatically through your use of the Service, and information obtained from third-party sources.
2.1 Information You Provide Directly
Account Registration Information: When you create an account, we collect your name, email address, password, company name (if applicable), and other profile information you choose to provide.
OAuth Authorization Data: When you authorize the Service to connect to your streaming platform accounts (Twitch, YouTube, Kick, Facebook, or TikTok), we collect and store OAuth tokens that allow us to access your streaming platform data on your behalf. We do not collect or store your streaming platform passwords.
Payment Information: When you subscribe to a paid plan, we collect billing information including your name, billing address, and payment method details. Payment processing is handled by third-party payment processors, and we do not store your full credit card information.
2.2 Information Collected Automatically
Usage Data: We automatically collect information about how you interact with the Service, including pages or features you access, time and duration of your visits, actions you take within the Service, and content you view or download.
Device Information: We collect information about the devices you use to access the Service, including device type and model, operating system and version, browser type and version, mobile device identifiers, and IP address.
Cookies and Similar Technologies: We use cookies and similar technologies solely to remember your preferences and settings, maintain your authenticated session, understand how you use the Service in order to improve its functionality, and prevent fraud and enhance security. We do not use cookies or tracking technologies for advertising, ad targeting, or any purpose unrelated to providing or improving VZ Data.
2.3 Information from Third Parties
Streaming Platform Data: When you authorize the Service to connect to your streaming platform accounts, we receive and collect the following data from Twitch, YouTube, TikTok, and Instagram solely for the purpose of displaying it to you in your VZ Data dashboard:
- Public profile information (channel name, profile picture, follower/subscriber count)
- Stream information (titles, stream status, live/offline detection)
- Viewer metrics (concurrent viewer counts during live streams, peak viewers)
- Engagement counts (likes, video counts, subscription counts)
All third-party platform data is used exclusively to provide the features and functionality of VZ Data. We do not use this data for advertising, profiling, or any purpose other than displaying your creator analytics within the Service.
3. Google User Data: Use, Access, and Disclosure
VZ Data's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3.1 What Google User Data We Collect
When you connect your YouTube account to VZ Data through Google OAuth, we request access to the following data:
- YouTube Channel Information: Your channel name, profile picture, and subscriber count (via the
youtube.readonlyscope) - YouTube Live Streaming Status: Whether your channel is currently live, concurrent viewer counts, and broadcast titles
- Basic Profile Information: Your Google account name, email address, and profile photo (via the
userinfo.profileanduserinfo.emailscopes)
3.2 How We Use Google User Data
We use Google user data exclusively to provide and improve the user-facing features of VZ Data. Specifically, we use your Google/YouTube data to:
- Display your YouTube channel name, profile picture, and subscriber count on your VZ Data dashboard
- Detect whether your YouTube channel is currently live streaming and display real-time viewer counts
- Record streaming session metrics (peak viewers, stream duration) in your personal stream history
- Display your connected YouTube account status in the account management interface
We do NOT use Google user data for any of the following purposes:
- Training artificial intelligence or machine learning models
- Serving, targeting, or personalizing advertisements of any kind
- Selling or transferring data to third parties, data brokers, or information resellers
- Determining creditworthiness or for lending purposes
- Building user profiles for advertising purposes
- Any purpose other than providing or improving VZ Data's user-facing functionality
3.3 How We Store and Protect Google User Data
Google OAuth access tokens and refresh tokens are stored securely in our Supabase PostgreSQL database with Row-Level Security (RLS) enabled, ensuring that each user can only access their own tokens. All data is transmitted over HTTPS/TLS. We use Google's OAuth 2.0 refresh token mechanism to maintain access and automatically revoke stored tokens when a user disconnects their YouTube account from VZ Data.
3.4 How We Share Google User Data
We do not share, transfer, sell, or disclose Google user data to any third party except as strictly necessary to provide the Service:
- Supabase: Our database provider stores encrypted OAuth tokens and channel metadata. Supabase processes this data solely on our behalf under a data processing agreement.
- Vercel: Our hosting provider processes API requests that include Google data in transit. Vercel does not retain or access this data independently.
We do not transfer Google user data to any other third parties for any reason, including advertising, analytics, or data brokering.
3.5 Google User Data Retention and Deletion
We retain your Google user data only for as long as your YouTube account remains connected to VZ Data. When you disconnect your YouTube account from VZ Data, we immediately delete your stored OAuth tokens and remove your YouTube channel data from our database. You may disconnect your YouTube account at any time from the Connected Streaming Accounts section of your VZ Data dashboard. You may also revoke VZ Data's access directly from your Google Account permissions page.
4. How We Use Your Information (General)
We use the information we collect only to provide and improve VZ Data's user-facing functionality. We do not use your information for advertising, marketing to third parties, building advertising profiles, or any purpose unrelated to the Service. Specifically:
4.1 Providing the Service
- Creating and maintaining your VZ Data account
- Displaying your streaming analytics dashboard with data from your connected platforms
- Detecting live stream status on Twitch and YouTube and displaying real-time viewer counts
- Syncing follower counts and profile statistics from TikTok and Instagram
- Recording streaming session history (peak viewers, duration, platform)
- Processing subscription payments through Stripe
- Responding to your support requests and inquiries
4.2 Improving the Service
- Fixing bugs and improving the reliability of VZ Data's features
- Improving the user interface and user experience based on how features are used
4.3 Security and Fraud Prevention
- Detecting, investigating, and preventing fraudulent transactions and abuse
- Protecting against malicious, deceptive, or illegal activity
- Enforcing our Terms of Service and other agreements
4.4 Prohibited Uses
We do not use any user information, including information obtained from Google APIs, for any of the following:
- Training artificial intelligence or machine learning models
- Creating databases for third-party use
- Targeted, interest-based, retargeted, or personalized advertising
- Selling to data brokers or information resellers
- Determining creditworthiness or for lending purposes
- Any purpose other than providing or improving VZ Data's user-facing features
5. Data Sharing and Disclosure
We do not sell, trade, rent, or share your personal information with third parties for advertising, marketing, or any purpose unrelated to providing VZ Data's functionality. We only share information in the following limited circumstances:
Service Providers (Data Processors): We share information with the specific third-party service providers listed in Section 11, solely to operate VZ Data. These providers (Supabase for database hosting, Vercel for application hosting, and Stripe for payment processing) process data only on our behalf and under contractual obligations to protect your data. We do not share data with advertising networks, analytics services, data brokers, or information resellers.
Streaming Platforms: We exchange OAuth tokens and API requests with Twitch, YouTube, TikTok, and Instagram solely to authenticate your account and retrieve your streaming data for display in your VZ Data dashboard. We do not send your data from one platform to another.
Legal Requirements: We may disclose your information only when required by law, such as in response to a valid court order, subpoena, or warrant, as described in Section 10.
6. Data Security
We implement comprehensive security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Sensitive data stored on our servers is encrypted using AES-256 encryption.
- Access Controls: We restrict access to personal information to employees, contractors, and service providers who need to know that information to perform their job functions.
- Firewalls and Intrusion Detection: We use firewalls, intrusion detection systems, and other network security measures to protect against unauthorized access.
- Regular Security Audits: We conduct regular security audits and penetration testing to identify and address vulnerabilities.
7. Your Privacy Rights
7.1 GDPR Rights (European Union Users)
If you are located in the European Union, you have the following rights:
- Right of Access: Request a copy of the personal information we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete information
- Right to Erasure: Request deletion of your personal information
- Right to Restrict Processing: Request that we limit how we use your information
- Right to Data Portability: Request your information in a portable format
- Right to Object: Object to processing of your information for certain purposes
7.2 CCPA Rights (California Users)
If you are a California resident, you have the following rights:
- Right to Know: Request what personal information we collect, use, share, and sell
- Right to Delete: Request deletion of personal information we have collected
- Right to Opt-Out: Opt-out of the sale or sharing of personal information
- Right to Correct: Request correction of inaccurate information
- Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights
8. Children's Privacy
The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take reasonable steps to delete such information and terminate the child's account immediately.
9. International Data Transfers
The Service is operated from the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from your home country.
10. Government and Law Enforcement Data Requests
3R Media, LLC is committed to protecting the privacy and security of our users. We have established the following policies and procedures regarding requests from public authorities (including government agencies and law enforcement) for personal data or personal information of our users:
- Evaluation of Requests: We have a documented process to carefully evaluate each government or law enforcement request for user data. Every request is reviewed to ensure it is legally valid, properly scoped, and issued by an authorized authority with appropriate jurisdiction.
- Challenging Overbroad Requests: We will challenge or reject requests that are overly broad, vague, or do not follow proper legal process. We do not voluntarily provide user data to government agencies without valid legal compulsion, such as a court order, subpoena, or warrant.
- User Notification: We will notify affected users about requests for their data unless we are legally prohibited from doing so (e.g., by a court-issued gag order or applicable law). Where notification is delayed due to legal restrictions, we will notify users as soon as the restriction is lifted.
- Minimum Disclosure: When compelled to disclose data, we limit the information provided to only what is specifically required by the legal request. We do not provide bulk or indiscriminate access to user data.
- Record Keeping: We maintain records of all government and law enforcement data requests received, including the requesting authority, the legal basis cited, the data requested, and the outcome of our review.
- Third-Party Platform Data: For data obtained through third-party platforms (including Meta, TikTok, YouTube, and Twitch), we comply with each platform's terms of service and data policies regarding government requests. We will not disclose platform data in a manner that violates our agreements with these platforms.
11. Data Processors and Service Providers
We use the following third-party service providers (data processors) to operate VZ Data. These providers may have access to personal data obtained from third-party platforms, including Meta:
- Supabase: Database hosting and authentication services. Processes and stores user profile data, connected account information, and access tokens. Data is hosted in the United States.
- Vercel: Application hosting and serverless compute. Processes API requests including OAuth flows and analytics data. Primary processing in the United States.
- Stripe: Payment processing for subscription management. Processes user billing information. Data is processed in the United States.
All data processors are contractually bound to process personal data only in accordance with our instructions and applicable data protection laws. Each provider maintains appropriate technical and organizational security measures to protect personal data.
12. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our privacy practices, please contact us:
3R Media, LLC (operating as VZ Data)
Privacy Team
Email: info@vzdata.co
Address: 23200 W. Vail Drive, West Hills, CA
Phone: 571-268-2297
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our website and updating the "Last Updated" date.
By using VZ Data, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.