Legal
Privacy Policy
What personal data GUSlive collects, why we use it, and your rights under Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
Last updated: 18 October 2026
1. Who is responsible
The data controller is the operator of GUSlive named in the company details at the bottom of this page (“we”, “us”). For any privacy question or request, email admin@ideal8.co.th.
2. Data we collect
- Google account details when you sign in: your name, email address and profile picture.
- Stream settings you enter: stream keys and destination settings.
- YouTube or Facebook account details, only if you choose to connect one. See section 4.
- Stream metadata: for example bitrate, connection IP addresses and timestamps. We use these to run the service and keep security logs.
- Recordings you choose to make. Nothing is recorded unless you start it. Recordings are kept for 3 days (72 hours), then deleted automatically.
- Payment records: order details, amount and receipt number.
- Messages you send us by chat or email, so we can help you.
3. What we do not collect
- We do not see or store your card or bank details. Payments are handled by Opn Payments.
- We do not sell your personal data.
- We do not use advertising trackers.
4. Connected YouTube and Facebook accounts
Connecting an account is optional. You can always paste a stream key instead. If you choose Connect YouTube or Connect Facebook, you sign in on Google’s or Meta’s own page and allow GUSlive to create live videos for you.
What we receive and keep
- YouTube (Google): an access token and a refresh token for the permission “Manage your YouTube account” (
youtube.force-ssl); your channel’s ID, name, handle and picture; and the IDs of the live streams and live broadcasts that GUSlive creates on your channel. - Facebook (Meta): a user access token, and Page access tokens for the Pages you allow; your Facebook user ID, name and picture; the ID, name, picture and follower count of those Pages; and the IDs of the live videos that GUSlive creates.
- The title, description, privacy and start/end settings you choose for these live videos.
What we use it for. Only to create, start, check and end the live videos you switch on in GUSlive, to send your stream to them, and to show which channel or Page a destination uses. We do not read, upload, change or delete your other videos, posts, comments, messages or audience data. We do not use this data for advertising, we do not sell it, we do not use it to train AI models, and we do not share it with anyone else. GUSlive staff do not read your tokens; the server uses them only for the actions above.
How we protect it. Tokens are encrypted (AES-256-GCM) on our server in Thailand, and the encryption key is kept apart from the data. Stream keys that GUSlive gets this way stay on the server and are never shown in your browser.
Google API Services. GUSlive’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. GUSlive uses YouTube API Services: by connecting YouTube you also agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.
Disconnecting and deleting.
- Disconnect at any time in GUSlive, from the account on a destination. We delete the tokens and account details at once and ask Google or Meta to revoke our access. Destinations that used the account are switched off.
- You can also remove GUSlive’s access yourself: in your Google Account under Third-party connections (or security.google.com/settings/security/permissions), or on Facebook under Settings & privacy → Settings → Business integrations (or Apps and websites). When you remove GUSlive on Facebook, Meta tells us and we delete your Facebook data automatically. See Facebook data deletion.
- Closing your GUSlive account deletes every connected account as well.
- Live videos already published stay on YouTube or Facebook. Delete them there if you want them gone.
5. Why we use your data
We use your personal data only to:
- provide the service you sign up and pay for, such as receiving and restreaming your signal, the preview and recordings;
- handle billing, send receipts and keep accounting records;
- send service emails, such as receipts, recording deletion warnings, unread chat messages and inactive-account warnings;
- keep GUSlive secure and prevent fraud and abuse;
- give support when you contact us.
Under the PDPA, we rely on these legal bases: performing our contract with you, meeting our legal obligations (for example accounting rules), our legitimate interest in keeping the service secure, and your consent where we ask for it.
6. Who we share it with
We share personal data only with service providers that help us run GUSlive, and only as much as they need:
- Opn Payments, for payments;
- Google, for sign-in;
- Google (YouTube Data API) and Meta (Facebook Graph API), only if you connect an account: we send them the live video details you set, and they send back the stream address;
- our VPS hosting provider in Thailand, where the GUSlive server runs;
- email delivery (SMTP via Google), for service emails.
When you add a destination, your video is sent to that platform (for example Facebook, YouTube or TikTok) using the stream key you entered. That platform’s own privacy policy then applies. We may also disclose data when Thai law requires it.
7. How long we keep it
- Account data: while your account exists.
- Connected YouTube and Facebook accounts: until you disconnect, remove GUSlive’s access on Google or Facebook, or close your GUSlive account.
- Recordings: 3 days (72 hours), then deleted automatically.
- Payment records: as long as Thai law requires.
- Security logs: for a limited time only.
- Inactive accounts: after 12 months with no activity we send a warning email, and saved projects are removed 30 days later.
8. Your rights
Under the PDPA you have the right to:
- access your personal data and get a copy of it;
- correct data that is wrong or incomplete;
- delete your data;
- object to how we use your data;
- withdraw consent where we rely on your consent;
- complain to the Personal Data Protection Committee (PDPC) of Thailand.
To use any of these rights, email admin@ideal8.co.th from the email address of your account. We may need to check who you are before we act. Some data, such as payment records, we must keep for as long as Thai law requires, even if you ask us to delete it.
9. Cookies
We use only one cookie: a session cookie that is needed to keep you signed in. We do not use advertising cookies or advertising trackers.
10. Security
We take reasonable steps to protect your data, including encrypted connections (HTTPS) and limiting who can access it. No online service can be completely secure, so please keep your Google account and your stream keys safe too.
11. Changes and contact
If we change this policy, we will post the new version on this page and update the “Last updated” date. Questions? Email admin@ideal8.co.th or see our contact page.