Privacy Policy

Last Updated: May 5, 2026

1. Data Collection Categories

We process the following types of information when you interact with our Platform:

• Account Credentials: Username, email address, and encrypted password hashes.
• Profile Data: Avatar images, bios, and content you voluntarily publish.
• Technical Metrics: Internet Protocol (IP) addresses, device identifiers, operating system metrics, browser profiles, and telemetry usage data.
• Financial Data: Transactions are processed securely via PCI-DSS compliant engines (e.g., Stripe, PayPal, PayChute). We do not store raw credit card numbers or banking passwords on our internal servers.

2. Legal Basis and Purpose of Processing

We utilize personal data under the following legal frameworks:

• Contractual Necessity: To instantiate your account, run video streaming infrastructure, and execute financial payouts.
• Legitimate Interests: To prevent bot deployments, mitigate fraud, analyze traffic vectors, and optimize system safety.
• Legal Compliance: To fulfill bookkeeping, tax enforcement, and valid judicial warrants.

3. Data Dissemination and Third Parties

We do not sell user data. We share anonymized or targeted data sets exclusively with third-party infrastructure providers vital to operational maintenance:

• Cloud Infrastructure: Hosting engines and Content Delivery Networks (CDNs).
• Payment Gateways: Processor networks managing payment security.
• Regulatory Enforcement: Law enforcement bodies only when compelled by valid legal subpoenas or court orders.

4. Cookies and Local Storage

• Essential Tokens: We drop essential cookies to track authentication states, session tokens, and cryptographic cross-site verification security.
• Analytics Vectors: With user consent, we deploy analytics cookies to evaluate traffic performance and engagement metrics. Users can toggle non-essential cookies via browser controls or privacy portals.
• Third-Party Ads:This platform displays third-party advertisements. These ad providers may use cookies or tracking technologies to collect information about your visits to show you personalized ads.

5. International Data Rights (GDPR / UK GDPR / CCPA)

Depending on your geographical location, you possess distinct data privacy rights:

• Right of Erasure ("Right to be Forgotten"): Request permanent account purging. Personal identifiers are systematically deleted within thirty (30) days of verified request validation, excluding financial audit data kept for regulatory preservation.
• Access and Portability: Request machine-readable extracts of your data layout.
• Rectification: Amend erroneous personal parameters.

To invoke these rights, connect with our Data Protection Officer at privacy@sotkit.com. EU citizens retain the legal right to lodge complaints directly with local Data Protection Authorities (DPAs).

6. Data Retention Protocols

Active operational data is preserved for the life cycle of your account. If an account is deleted, personal data arrays are expunged within 30 days. Residual cold storage backups may take up to ninety (90) days to clear system rotations. Transaction ledger artifacts are held for seven (7) years to satisfy standard accounting and tax audits.

If you have any questions or concerns regarding this policy, contact us at privacy@sotkit.com.