PRIVACY POLICY

Effective Date: March 5, 2026 | Last Updated: March 5, 2026

Prozilli ("Company," "we," "us," or "our") operates the website prozilli.com (the "Corporate Site") and related services. This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you visit our Corporate Site or interact with our services. By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

1. SCOPE AND APPLICABILITY

This Privacy Policy applies to all personal information collected through:

The Corporate Site at prozilli.com
Any subdomains of prozilli.com (including api.prozilli.com, recast.prozilli.com)
Email, text, and other electronic communications sent through or in connection with our services
Interactions with our AI assistant, LISA (Live Interactive System Administrator)
Third-party platforms where we maintain an official presence (Discord, Twitch, Kick, YouTube, Trovo, Facebook, TikTok, X/Twitter, Instagram)

This policy does not apply to information collected by third parties, including third-party websites linked from our services. We encourage you to review the privacy policies of any third-party services you interact with.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account and Profile Information: When you register, authenticate via OAuth, or link platform accounts, we collect usernames, display names, email addresses, profile images, and platform-specific user identifiers.
Communications: Messages, chat content, and other communications you send through our platforms or to us directly, including email correspondence.
Community Participation: Content you post in our Discord server, stream chats, blog comments, and other community spaces.
Support Requests: Information you provide when contacting us for support, including descriptions of issues, screenshots, and diagnostic information.
Survey and Feedback Data: Responses to surveys, polls, or feedback forms we may provide.

2.2 Information Collected Automatically

Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, language preferences, and unique device identifiers.
Usage Data: Pages visited, features used, click patterns, navigation paths, time spent on pages, referring and exit URLs, and interaction timestamps.
Log Data: Server logs that record requests made to our services, including request method, URL, response status, and user agent strings.
Location Data: Approximate geographic location inferred from your IP address. We do not collect precise geolocation data.
Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, local storage, and similar tracking technologies as described in our Cookie Policy.

2.3 Information from Third Parties

OAuth and Platform Data: When you authenticate via Twitch, Discord, Google, Facebook, Kick, Trovo, TikTok, X, or Instagram, we receive your public profile information and the scopes you authorize (e.g., user ID, username, email, profile picture).
Streaming Platform Data: Public stream metadata including stream titles, game names, viewer counts, stream duration, and chat messages sent in public channels during streams.
Analytics Providers: Aggregated and anonymized usage statistics from third-party analytics services.

2.4 AI-Processed Information

LISA, our AI assistant, processes the following types of information:

Public chat messages across all platforms where LISA is active
Contextual conversation data used to generate responses
Community member interaction history for personalization
Stream and platform event data for real-time status awareness

LISA's processing involves transmission to third-party AI providers (currently OpenAI and Groq) for language model inference. Messages sent to LISA in public channels should be treated as public communications.

3. HOW WE USE YOUR INFORMATION

We use collected information for the following purposes:

3.1 Service Operation and Delivery

To provide, maintain, and improve our websites and services
To authenticate users and manage accounts across platforms
To process and fulfill any transactions or service requests
To deliver AI-powered interactions through LISA
To enable multi-platform streaming and restreaming features

3.2 Communication

To send service-related notices, updates, and administrative messages
To respond to your comments, questions, and support requests
To send promotional communications where you have opted in (you may opt out at any time)

3.3 Personalization and Improvement

To personalize your experience and tailor content to your interests
To analyze usage trends and improve our services
To develop new products, features, and functionality
To train and improve LISA's conversational abilities and contextual understanding

3.4 Safety and Security

To detect, prevent, and address fraud, abuse, security incidents, and technical issues
To enforce our Terms of Service and community guidelines
To protect the rights, property, and safety of Prozilli, our users, and the public
To moderate content and maintain community standards

3.5 Legal Compliance

To comply with applicable laws, regulations, and legal processes
To respond to lawful requests from public authorities, including law enforcement
To establish, exercise, or defend legal claims

4. LEGAL BASES FOR PROCESSING (EEA/UK USERS)

If you are located in the European Economic Area (EEA), the United Kingdom, or a jurisdiction that requires a legal basis for processing, we rely on the following:

Contract Performance: Processing necessary to provide our services to you
Legitimate Interests: Processing necessary for our legitimate interests (service improvement, security, analytics) that do not override your fundamental rights
Consent: Where you have provided explicit consent, such as for marketing communications or optional data collection
Legal Obligation: Processing necessary to comply with legal requirements

5. INFORMATION SHARING AND DISCLOSURE

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

AI Processing: OpenAI and Groq (language model inference for LISA)
Image Generation: Leonardo AI (asset and image generation)
Hosting and Infrastructure: Cloudflare (CDN, DNS, DDoS protection, tunnel proxy)
Database: PostgreSQL hosted on our dedicated infrastructure
Analytics: Any analytics providers we may use

All service providers are contractually obligated to use personal information only as necessary to provide services to us and in accordance with this Privacy Policy.

5.2 Platform Partners

When you connect third-party platform accounts (Twitch, Discord, Google, etc.) via OAuth, those platforms may receive information about your connection to our services as part of the authentication flow. We do not control how those platforms process such information.

5.3 Legal Requirements

We may disclose information if required to do so by law or in good faith belief that such action is necessary to:

Comply with applicable law, regulation, legal process, or governmental request
Enforce our Terms of Service or other agreements
Protect and defend the rights, property, or safety of Prozilli, our users, or others
Detect, prevent, or address fraud, security, or technical issues

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

5.5 With Your Consent

We may share information for other purposes when you provide explicit consent.

6. DATA RETENTION

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

Account Data: Retained for the duration of your account or until deletion is requested
Chat and Conversation Data: LISA conversation turns are retained indefinitely for context and service improvement unless deletion is requested
Stream Session Data: Retained indefinitely for historical analytics and community records
Webhook Event Logs: Retained for a minimum of 30 days for debugging and replay purposes
Server Logs: Retained for up to 90 days
Analytics Data: Retained in aggregated form indefinitely

After the applicable retention period, personal information is either deleted or anonymized. We may retain certain information longer if required by law or for legitimate business purposes such as resolving disputes or enforcing agreements.

7. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal information, including:

Encryption of data in transit using TLS/SSL (enforced via Cloudflare)
Secure database connections with credential isolation
OAuth token encryption and secure storage
Access controls and authentication for administrative functions
Regular security assessments and monitoring
DDoS protection and WAF (Web Application Firewall) via Cloudflare
Webhook signature verification for all inbound platform events

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of any credentials you use to access our services.

8. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have different data protection laws than your jurisdiction.

When we transfer personal information internationally, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on the recipient's participation in recognized data protection frameworks.

9. YOUR RIGHTS AND CHOICES

9.1 General Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information, subject to legal obligations
Portability: Request a machine-readable copy of your data
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing based on legitimate interests
Withdraw Consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing

9.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by us and our service providers
Right to opt out of the sale or sharing of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights
Right to correct inaccurate personal information
Right to limit the use and disclosure of sensitive personal information

In the preceding 12 months, we have collected the categories of personal information described in Section 2 above. We do not sell personal information as defined by the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA/CPRA.

9.3 EEA/UK Residents (GDPR/UK GDPR)

If you are in the EEA or UK, you have additional rights under the General Data Protection Regulation:

Right to lodge a complaint with your local data protection authority (supervisory authority)
Right to data portability in a structured, commonly used, machine-readable format
Right to object to automated decision-making, including profiling

9.4 Other Jurisdictions

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, and other U.S. states with comprehensive privacy laws may have additional rights. Residents of Canada, Australia, Brazil (LGPD), Japan (APPI), South Korea (PIPA), and other jurisdictions may also have specific rights under local data protection laws. Contact us to exercise any applicable rights.

9.5 Exercising Your Rights

To exercise any of the rights described above, contact us at [email protected]. We will verify your identity before processing any request. We aim to respond to all requests within 30 days (or shorter periods required by applicable law). If we need additional time, we will inform you of the reason and extension period.

10. CHILDREN'S PRIVACY

Our services are not directed at children under the age of 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children under these ages. If we learn that we have collected personal information from a child below the applicable age, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at [email protected].

11. DO NOT TRACK SIGNALS

Some browsers transmit "Do Not Track" (DNT) signals. Our services do not currently respond to DNT signals. However, you may manage your cookie preferences as described in our Cookie Policy.

12. AUTOMATED DECISION-MAKING

LISA, our AI assistant, makes automated decisions regarding chat responses and content moderation. These automated processes:

Do not produce legal or similarly significant effects on individuals
Are limited to conversational interaction and content moderation
Can be overridden by human moderators at any time
Do not involve profiling for marketing or advertising purposes

13. THIRD-PARTY LINKS AND SERVICES

Our services may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party services. We recommend reviewing the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party services.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last Updated" date at the top of this page
Post a notice on our website
Where required by law, seek your consent to material changes

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

15. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us:

Email: [email protected]
General Inquiries: [email protected]

If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.