Privacy policy

1. Who we are

Crivo (crivo.live) is the controller of personal data processed on this platform, to the extent we decide the purposes and means described here.

We are a connection platform for streamers, operations (desks), and betting houses/sponsors — not a casino and not a betting processor.

2. Data we collect

Account: name or display name, email, password (stored securely by the auth provider), profile type (streamer, desk, house), and data you enter at signup.

Channel and usage: identifiers and metadata for connected channels (Kick, Twitch, YouTube), platform activity, preferences, and technical access logs.

IP and locale: IP address and approximate country to set locale (pt/en/es/ru) and for security; locale cookie and essential preferences.

Essential cookies: session auth, language/country, and basic UI preferences. Third-party advertising cookies are not core to the product.

3. Purposes and legal bases (LGPD)

Contract performance: create and maintain your account, deliver the subscribed service, connect channels, and enable discovery/visibility.

Legitimate interest: security, abuse prevention, product improvement, aggregated metrics, and operational service messages.

Consent: where required (for example optional platform connections or marketing messages, if any).

Legal obligation: complying with law or competent authority orders.

4. Sharing with providers

We use providers that process data on our behalf under contract:

• Supabase — authentication and database • Vercel — hosting and web infrastructure • Resend — transactional email • Kick, Twitch, and YouTube — when you authorize channel connection

We do not sell your personal data. We may disclose information if required by law or to protect rights, users, or the integrity of the service.

5. Cookies and language

Essential cookies and local storage keep session, locale (crivo-locale), and preferences such as theme/country when applicable.

UI language may follow a chosen cookie, country inferred from IP (hosting provider headers), or Accept-Language. You can change language via site controls when available.

6. Retention

We keep data while the account is active and as long as needed to provide the service, meet legal duties, resolve disputes, and prevent fraud.

After account deletion or an erasure request, we delete or anonymize personal data within a reasonable time, except mandatory legal retention or limited-cycle backups.

7. Your rights

Under the LGPD (and similar laws where applicable), you may request: access, correction, anonymization or deletion, portability, information about sharing, withdrawal of consent, and objection to processing based on legitimate interest when applicable.

To exercise rights, email privacy@crivo.live or support@crivo.live. We may ask you to confirm identity first.

8. Security

We apply reasonable technical and organizational measures (access control, HTTPS, auth/database provider practices). No system is fully risk-free.

Tell us right away if you suspect unauthorized access to your account.

9. International transfers

Providers such as Supabase, Vercel, and Resend may process data on servers outside Brazil. In those cases we seek appropriate safeguards (contractual clauses, vendor standards, and complementary measures when needed), aligned with the LGPD.

10. Privacy / DPO contact

Privacy channel: privacy@crivo.live General support: support@crivo.live Crivo team: crivo.live

If a data protection officer (DPO) is formally appointed, their contact details will appear on this page or the site.

11. Changes

We may update this Policy to reflect changes in processing, law, or providers. The current version date appears at the top of this page.

Material changes will be communicated reasonably. Please review this page from time to time.