Privacy Policy
Living Water Productions LLC (“we,” “us,” or “our”) operates the RTMP Control Panel, a live streaming management application hosted at live.livingwaterproductions.com. The panel lets an operator send one video stream to the server and relay it to YouTube, Facebook, and Instagram at the same time.
This policy explains what information the application collects, how it is used, and how it is protected.
Who this applies to
The RTMP Control Panel is a private, invitation-only tool. Accounts are created by an administrator for staff, volunteers, and ministry partners who operate live broadcasts. The application is not open to public registration, and it does not serve content to the general public.
Information we collect
Account information
When an administrator creates an account for you, we store a username, a securely hashed password, and a role (administrator or viewer). Passwords are never stored in readable form.
Broadcast configuration
We store the stream settings you configure: stream keys, ingest addresses, broadcast titles, descriptions, thumbnails, and scheduling details for your assigned group.
Google account data
If you choose to connect a YouTube channel, we receive and store an access token and a refresh token issued by Google. These are held on our own server and associated only with your broadcast group.
We do not collect analytics, advertising identifiers, or browsing history, and we do not use cookies for tracking. A single session cookie keeps you signed in and is discarded when you sign out.
How we use Google user data
The application requests the https://www.googleapis.com/auth/youtube scope. This access is used for one purpose: to manage live broadcasts on the YouTube channel you connect. Specifically, we use it to:
- Create and schedule live broadcast events on your channel
- Set the title, description, thumbnail, and privacy status of those broadcasts
- Bind a broadcast to a stream and start or stop it
- Read the status of broadcasts the application created, so the panel can show whether you are on air
We do not use Google user data for any other purpose. We do not read, modify, or delete videos, playlists, comments, or subscriber information beyond what is required to manage the broadcasts described above.
How Google user data is stored and shared
Access and refresh tokens are stored server-side on infrastructure we control. They are never exposed to the browser, never included in page output, and never sent to any third party.
We do not sell Google user data. We do not transfer it to others except as needed to operate the service on your behalf (that is, to Google’s own APIs), to comply with applicable law, or as part of a merger or acquisition for which we would give advance notice.
We do not use Google user data to serve advertising, and we do not allow humans to read it except with your explicit consent for a specific support request, where necessary for security purposes, or where required by law.
Limited Use disclosure. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
YouTube API Services
This application uses YouTube API Services. By connecting a YouTube channel, you agree to the YouTube Terms of Service. Google’s handling of your information is described in the Google Privacy Policy.
You may revoke this application’s access to your Google account at any time from the Google account permissions page.
Data retention
Account details and broadcast configuration are retained for as long as your account is active. When an administrator removes your account or your group, the associated configuration, stream keys, and stored tokens are deleted from the server.
If you revoke access through your Google account, the stored tokens stop working immediately and are removed at the next reconnection.
Security
The application is served over HTTPS. Passwords are stored as one-way hashes. Stream keys and OAuth tokens are held in server-side configuration that is not readable by the browser or by unauthenticated requests. Access to the underlying server is limited to administrators.
No system is perfectly secure and we cannot guarantee absolute security, but we take measures appropriate to the sensitivity of the data involved.
Children’s privacy
The panel is a workplace and ministry tool intended for adults. We do not knowingly collect information from children under 13.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the date at the top of this page.
Contact
For questions about this policy or about data handling in the RTMP Control Panel: