Privacy Policy

Last updated: July 2026. This policy explains what data Vayla Stream ("Vayla", "we") collects, how we use it, and your choices. Vayla is a self-hosted live-streaming relay operated by the account owner on their own server.

YouTube API Services

Vayla uses the YouTube API Services to let you connect your YouTube channel and manage your own live broadcasts. By connecting your channel you agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.

What we access

When you connect Google, we request the youtube.force-ssl scope so Vayla can, on your behalf: read your channel information, create and update your live broadcasts and streams, edit broadcast titles, descriptions, and thumbnails, and read live status and viewer counts for your broadcasts.

How we use it

This access is used solely to operate the multistreaming and broadcast-management features you initiate from your panel. We do not use your YouTube data for advertising, profiling, or any purpose unrelated to delivering your own live streams.

How we store it

Your Google refresh token is stored encrypted (AES-256-GCM) with a dedicated key, on the server you control. Destination stream keys are likewise stored encrypted. We do not sell or share your YouTube data or credentials with third parties.

Revoking access

You can disconnect your Google account at any time from the panel's account page, which deletes the stored token. You may also revoke Vayla's access from your Google account permissions. Data deletion via the panel removes the associated stored records.

Contact form

If you use our contact form, we store the name, email, and message you submit in order to reply to you. We apply spam protection (a hidden honeypot field and rate limiting). We do not use this information for marketing.

Contact

Questions about this policy? Reach us through the contact form.