Data Protection & Privacy

Privacy Policy

Last Updated: September 5, 2026 • Compliant with Indian IT Act, 2000 & DPDPA, 2023

Our Privacy Commitment

StreamChai ("we", "our", "Platform") respects and safeguards your personal data. We will never sell your personal information or transaction history to advertisers. All financial transactions are processed through Cashfree Payments India Pvt. Ltd. with bank-grade 256-bit encryption.

1.Information We Collect

Depending on how you interact with StreamChai, we collect the following types of information:

Streamer & Creator Account Information

Full name, channel name, email address, password hash, verified UPI Virtual Payment Address (VPA), bank account number, IFSC code (for payout settlement verification via Cashfree), and custom overlay preferences.

Supporter & Tipper Information

Donor display name, optional message text, tip amount, chosen chai token badge, and payment confirmation IDs generated by NPCI / Cashfree.

Automated Technical & Device Telemetry

IP addresses, browser type, operating system version, referring URLs, OBS browser-source connection logs, and session cookies required for authentication.

2.How We Use Your Information

  • To route voluntary UPI tips seamlessly to creator accounts with automated 5% platform fee accounting.
  • To deliver real-time visual alerts and text-to-speech audio to the creator's OBS overlay.
  • To filter offensive text, hate speech, and harassment using automated AI safety shield models.
  • To comply with regulatory mandates under the Reserve Bank of India (RBI) Payment Aggregator guidelines, Prevention of Money Laundering Act (PMLA), and Indian Income Tax regulations.
  • To provide customer support and troubleshoot failed transactions or billing inquiries.

3.Third-Party Service Providers

We partner with trusted, industry-leading infrastructure providers to deliver our services:

Cashfree Payments India Pvt. Ltd.

Licensed RBI Payment Aggregator handling UPI QR generation, payment collection, and direct streamer bank payouts.

Payment Partner
Supabase Inc.

Enterprise PostgreSQL database, real-time WebSocket messaging, and encrypted authentication infrastructure.

Cloud Infrastructure
AI Content Safety Shield

Automated multilingual content safety assessment for donor messages (Hinglish/Hindi slang filtering).

AI Safety Engine

4.Data Retention & Security Measures

All traffic between your browser and StreamChai is encrypted using modern TLS 1.3 cryptographic protocols. Financial transaction logs are stored in compliance with Indian statutory audit regulations for a minimum period of 5 years.

We do not store UPI PINs, bank account passwords, or full credit/debit card numbers on our servers. All sensitive financial authorization occurs within Cashfree's PCI-DSS Level 1 certified environment.

5.Your Rights under DPDPA, 2023

Under the Digital Personal Data Protection Act, 2023, you have the right to request access to the personal data we hold about you, request rectification of inaccurate records, or request deletion of non-statutory account data. You may exercise these rights by contacting our Grievance Officer.

Grievance Officer & Redressal Mechanism

In accordance with the Information Technology Act, 2000 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the details of our Grievance Officer are published below:

Name of Officer: Ronit Verma

Designation: Grievance & Compliance Officer

Platform: StreamChai

Operational Address: Outer Ring Road, Bellandur, Bengaluru, Karnataka 560103, India

Email: grievance@streamchai.com

Response Timeline: Acknowledgment within 24 hours; redressal within 15 calendar days.