Privacy Policy
Last updated: October 16, 2026
We take the protection of your personal data seriously. This policy explains what we collect, why, and your rights under Tunisian Organic Law No. 2004-63 and, where applicable, the EU General Data Protection Regulation (GDPR).
This text is a template and must be reviewed by a legal professional before going live.
1. Controller
StreamersPilot SARL, Tunis, Tunisia: contact@streamerpilot.com. Our processing is declared to the Tunisian data protection authority (INPDP).
2. Data we process
Questionnaire answers (platform, channel link, country, languages, activity, equipment, goals); public channel data fetched from Twitch, Kick or YouTube; email address and optional first and last name at checkout; order and invoice data; technical logs. Card data is processed exclusively by our payment provider.
3. Purposes and legal bases
Generating and delivering your report and managing your account (performance of contract: Art. 6(1)(b) GDPR); invoicing and accounting (legal obligation: Art. 6(1)(c)); security, fraud prevention and anonymous funnel statistics (legitimate interest: Art. 6(1)(f)).
4. Cookies
We only use strictly necessary cookies: sp_draft (keeps your questionnaire draft, 30 days) and sp_session (keeps you logged in, 30 days). We do not use advertising or third-party tracking cookies, so no consent banner is required. Questionnaire steps are counted anonymously without cookies; you can object to this below.
5. Recipients and transfers
Hosting and storage providers, our email provider and the payment provider (Konnect), all bound by data processing agreements. Where data of EU residents is processed in Tunisia, which has no EU adequacy decision, transfers are protected by the European Commission's Standard Contractual Clauses.
6. Retention
Unpaid questionnaire drafts: 30 days. Account and reports: until you delete your account. Invoices: 10 years, as required by tax law. Technical logs: 30 days.
7. Your rights
You can access, rectify, export and delete your data at any time from your account (data export and account deletion), object to processing based on legitimate interest, and withdraw consent. You may lodge a complaint with the INPDP (www.inpdp.nat.tn) or, if you live in the EU, with your local supervisory authority.
8. Security
Encrypted connections (TLS), hashed access tokens, minimal data collection and access restricted to authorized staff.