Konduit is made by Refec Publishing LLC ("we," "us"). This policy explains what data Konduit touches, where it lives, and what we do and don't do with it. The short version: your streaming credentials stay on your machine, we don't sell data, and we collect the minimum needed to run a paid product.
Konduit is a desktop application for macOS and Windows that unifies livestream chat, alerts, and tools across Twitch, YouTube, Kick, and Rumble, plus the konduit.gg website.
What we collect
Account information. When you create a Konduit account we collect your email address, a display name, and a password. This is stored with our authentication and database provider, Supabase.
Billing information. Subscriptions are processed by Stripe. Your card number never touches our servers — Stripe handles payment directly. We store your subscription status (trial, active, cancelled) and a Stripe customer reference so the app knows what features to unlock.
Crash and error reports. If Konduit or konduit.gg encounters an error, a diagnostic report may be sent to Sentry, our error-monitoring provider. These reports are automatically scrubbed before sending: email addresses, access tokens, payment identifiers, and file paths containing your username are redacted. Your account is represented by an anonymous hash, never your email.
Website analytics. konduit.gg uses Vercel Analytics to measure page visits in aggregate. No advertising trackers, no cross-site tracking.
What stays on your device
The following never leaves your computer and is never stored on our servers:
- Platform sign-in tokens for Twitch, YouTube, Kick, Rumble, and Streamlabs. These are encrypted at rest on your machine using your operating system's secure storage (Keychain on macOS, DPAPI on Windows).
- Your chat messages and stream activity. Konduit processes chat, alerts, and donation events locally in the app. We do not store, log, or transmit your chat history to our servers.
- Your settings — alert sounds, colors, commands, and configuration.
When you sign in to a streaming platform through Konduit's sign-in flow, tokens pass through our authorization server momentarily to complete the handshake, using single-use codes that expire within 60 seconds. They are delivered to your device and are not retained server-side.
YouTube API Services
Konduit uses YouTube API Services. By using Konduit's YouTube features, you also agree to the YouTube Terms of Service.
Google's handling of your data is described in the Google Privacy Policy.
When you connect YouTube by signing in with Google, Konduit requests permission to manage your YouTube live chat (the youtube.force-ssl scope). Konduit uses this access solely to:
- Identify your channel and find your active live broadcast
- Send chat messages you compose to your own live chat
- Perform moderation actions you initiate in your own live chat
This access is used only to provide these user-facing features. Konduit does not use YouTube data for advertising, does not sell it, does not transfer it to third parties except as necessary to provide the feature or comply with law, and does not allow humans to read this data except with your consent, for security purposes, or to comply with law. Google user data obtained through this permission is processed on your device and is not stored on Konduit's servers beyond the momentary sign-in handshake described above.
You can revoke Konduit's access to your Google account at any time via Google's security settings page. You can also disconnect YouTube inside Konduit, which deletes the stored tokens from your device.
Other platform connections
Connecting Twitch, Kick, Rumble, or Streamlabs works the same way: you grant access through that platform's own sign-in, tokens are stored encrypted on your device, and each platform's own privacy policy governs their side. Disconnecting a platform inside Konduit deletes its credentials from your device.
How we use your data
- To provide the product: authentication, subscription management, feature unlocks
- To fix problems: crash reports and diagnostics
- To communicate with you: account and billing emails (verification codes, receipts)
What we don't do
- We don't sell your data. Ever.
- We don't show ads or share data with advertisers.
- We don't read, store, or mine your chat or stream content.
- We don't send marketing email without consent.
Third-party processors
| Provider | Purpose |
|---|---|
| Supabase | Account authentication and database |
| Stripe | Payment processing and subscription billing |
| Sentry | Crash and error monitoring (PII-redacted) |
| Railway | Hosting for our authorization server |
| Vercel | Website hosting and aggregate analytics |
| Cloudflare | Domain, email routing, and static pages |
| Google / YouTube API Services | YouTube sign-in and live chat features |
Data retention and deletion
Account and subscription records are kept while your account is active. To delete your account and associated data, email us at support@konduit.gg and we'll remove your records from our systems, subject to records we're legally required to keep (e.g., billing history for tax purposes). Deleting the Konduit app from your computer removes all locally stored credentials and settings.
Security
Credentials on your device are encrypted using OS-level secure storage. Connections to our servers use HTTPS/TLS. Payment data is handled entirely by Stripe, a PCI-DSS certified processor.
Children
Konduit is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes materially, we'll post the update here with a new effective date.
Contact
Refec Publishing LLC