1.Who We Are & How to Contact Us
EchoLive, Inc. ("EchoLive," "we," "us," or "our") is the entity responsible for the personal information processed through the EchoLive platform (the "Platform") and acts as the data controller (or "business" under applicable US state laws) for that information.
Privacy matters, data-subject requests & complaints: legal@echolivenow.com
General support & questions: contact@echolivenow.com
Echo Live Inc., a Delaware corporation with its principal place of business in Ohio
This tells you who is responsible for your data (EchoLive, Inc.) and how to reach our privacy team. For anything privacy-related, email legal@echolivenow.com.
2.Scope of This Policy
This Policy applies to personal information we process about Users of the Platform — including viewers, creators, and amplifier partners — and visitors to our websites and applications. It does not apply to third-party services that have their own privacy policies, which we encourage you to review.
This Policy covers the information we handle for everyone who uses EchoLive. It does not cover other companies' services, even if you reach them through our app.
3.Information We Collect
We collect personal information in several ways: information you provide directly, information we collect automatically, and information we receive from third parties.
3.1Information You Provide Directly
- Account registration information — your name, username, email address, password, and date of birth.
- Profile information — your display name, avatar, biography, links, and preferences.
- Identity & verification information — government identification or other documents we may require to verify your identity or age, particularly for creators, payouts, and adult-only features.
- Payment & payout information — billing details and payout account information, processed by our third-party payment processors.
- Content you create or submit — live streams, recorded video, reels, images, messages, comments, and other materials.
- Communications — information you provide when you contact support, submit a report, file an appeal, or participate in surveys, research, or promotions.
- Application information — the business and performance information that amplifier applicants submit.
3.2Information We Collect Automatically
- Device & technical information — IP address, device identifiers, hardware model, operating system, browser type, and language settings.
- Usage & activity information — streams watched, content viewed, features used, gifts sent and received, search queries, session duration, and interactions.
- Approximate location information — derived from your IP address or device settings.
- Log & diagnostic information — crash data, performance data, and error reports.
- Cookies & similar technologies — as described in Section 7.
3.3Information We Receive From Third Parties
- Payment processors — transaction confirmations, payout status, and fraud signals.
- Identity & fraud-prevention providers — to help verify identity and detect abuse.
- Analytics & infrastructure providers — consistent with their terms.
- Amplifiers — information about creators they manage or refer.
- Other Users — for example, when they submit a report about you.
3.4Sensitive Information
We do not seek to collect sensitive personal information except where necessary (for example, identity documents for verification or payout compliance), and we handle it with heightened care and only as permitted by law.
3.5Identity & Age Verification Data
In certain cases — for example, before a purchase over $1,000, when we need to confirm you meet our minimum age, or for payout, fraud-prevention, or legal-compliance purposes — we use a third-party identity verification provider, Didit, to verify your identity and/or age. Didit acts as our service provider (processor) for this purpose.
What is collected: To complete a check, Didit may collect a government-issued ID, a photo (selfie), your date of birth/age, and biometric information derived from a face match between your selfie and your ID. This information is collected and processed by Didit, not by EchoLive.
What EchoLive receives and stores: EchoLive does not receive or store your ID document or biometric images. We receive and retain only the result of the verification (such as “verified/not verified” and whether you meet the age requirement) and a session reference.
Retention & deletion: Verification data held by Didit is configured to be deleted promptly after a check is completed (approved or denied), except where longer retention is required by law. You may request access to or deletion of your verification data as described in Didit’s privacy policy, available at didit.me/terms/privacy-policy.
Biometric information: The selfie-to-ID face match involves biometric information. We rely on your consent, collected before verification begins, for this processing. EchoLive does not sell or lease biometric information, and does not use it for any purpose other than completing verification. Biometric data is handled in accordance with applicable biometric-privacy laws (including, where applicable, the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI, Washington law, and the EU GDPR).
International transfers: Where verification data is processed outside your region, appropriate safeguards (such as Standard Contractual Clauses) are applied as described in Section 13 and in Didit’s privacy policy.
Here is everything we might collect: things you give us (name, email, age, profile, ID for verification, payment info, your content), things we gather automatically (device info, how you use the app, rough location), and things we get from others (like payment processors and people who report content). We only collect sensitive items like ID when we genuinely need to.
4.How We Use Your Information
We use personal information for the following purposes:
- To create and manage your Account and provide the Platform and its features.
- To process purchases of Echo Coins, the sending and receiving of Gifts, payouts, and withdrawals.
- To verify your identity and age and to maintain the security and integrity of the Platform.
- To detect, investigate, prevent, and address fraud, abuse, security incidents, and violations of our Terms and Community Guidelines.
- To review reports, operate our moderation and enforcement systems, and handle appeals.
- To personalize and improve the Platform, develop new features, and conduct analytics and research.
- To communicate with you about your Account, transactions, security, and changes to our policies.
- To send you marketing and promotional communications where permitted, from which you may opt out.
- To operate the Amplifier program, including sharing limited performance data with an enrolled creator's Amplifier.
- To comply with legal obligations, enforce our agreements, and protect the rights, property, and safety of EchoLive, our Users, and the public.
We will not use your personal information for materially different, unrelated, or incompatible purposes without providing notice or obtaining consent where required.
This is the why-we-use-your-data list: running your account, processing payments, keeping you and the platform safe, fixing and improving features, and following the law. We will not suddenly use your data for something unrelated without telling you.
5.Legal Bases for Processing (EEA & UK Users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on one or more of the following legal bases:
- Performance of a contract — to provide the Platform and fulfill our Terms with you.
- Legitimate interests — to secure, operate, and improve the Platform, prevent fraud and abuse, and understand usage, provided these interests are not overridden by your rights.
- Consent — where required, such as certain cookies and marketing communications. You may withdraw consent at any time without affecting prior processing.
- Legal obligation — to comply with applicable laws and respond to lawful requests.
- Vital & public interest — in limited circumstances, such as protecting someone's safety.
If you are in Europe or the UK, the law requires us to have a specific legal reason to process your data. This lists those reasons (like fulfilling our contract with you, or keeping the platform secure).
7.Law Enforcement & Government Requests
'This section explains how EchoLive responds to requests from law enforcement and government authorities for user information. It does not create rights for third parties and does not waive any rights or defenses available to EchoLive or its Users.
7.1Required Legal Process
We disclose user information only when we receive valid legal process appropriate to the information sought, or in the limited emergency circumstances below. At minimum we require a legally valid and properly served subpoena, court order, search warrant, or equivalent legal process; sufficient detail to identify the relevant Account; and identification of the requesting authority. We construe requests narrowly and disclose only what is required.
7.2Preservation Requests
Upon a valid preservation request from law enforcement, we take reasonable steps to preserve available account records for a limited period pending service of valid legal process, consistent with applicable law.
7.3Emergency Disclosure
In emergencies involving a credible risk of death or serious physical harm to a person, including imminent threats to a child, we may voluntarily disclose information to law enforcement where permitted by law and where we believe in good faith disclosure is necessary to prevent the harm. Emergency requests should be marked clearly and sent to legal@echolivenow.com.
7.4Child Safety Reporting
7.5User Notice
Our policy is to notify affected Users of requests for their information before disclosure, except where we are legally prohibited (for example, under a court-ordered nondisclosure), or where we believe in good faith that notice would risk harm to a person, a child, or an investigation.
7.6How Authorities Submit Requests
Law enforcement and government requests should be submitted to legal@echolivenow.com on official letterhead or from an official government email address, with appropriate legal process attached. We may require verification of the requester's identity and authority.
This explains how we handle police and government requests for your data: we require proper legal paperwork (a subpoena, court order, or warrant), we can preserve records or act fast in a genuine emergency, we report child exploitation to NCMEC, and we try to tell you when someone requests your info unless a court forbids it.
8.Cookies, Tracking Technologies & Device Identifiers
We and our service providers use cookies and similar technologies to operate the Platform, keep you signed in, remember your preferences, and understand usage. "Cookies" are small text files stored on your device; we also use related technologies, including software development kits (SDKs) in our mobile apps, pixels, web beacons, local storage, and device identifiers (collectively, "cookies and similar technologies").
8.1Categories We Use
| Category | Purpose | Can you disable? |
|---|---|---|
| Strictly necessary | Sign-in, security, fraud prevention, load balancing, and core functionality. The Platform cannot work properly without these. | No (essential) |
| Functional | Remember settings and preferences, such as language and display options. | Yes |
| Analytics & performance | Understand how the Platform is used so we can fix problems and improve features. | Yes |
| Advertising / attribution | Measure the effectiveness of our own promotions and app-install attribution, to the extent we use them. | Yes |
8.2Third-Party Technologies
Some cookies and similar technologies are placed by our service providers (for example, analytics, infrastructure, crash reporting, and payment processors) to perform services on our behalf. Their use of information is governed by their own privacy policies.
8.3Your Choices & How to Manage
- Browser controls: most browsers let you block or delete cookies through their settings; blocking some may affect functionality.
- Mobile device controls: your device settings let you reset or limit advertising identifiers and control app tracking.
- Consent controls: where required by law, we present a consent mechanism for non-essential cookies, and you can change your choices at any time.
We use cookies and similar tech to keep you logged in, remember settings, and understand usage. Some are essential and cannot be turned off; others you can control in your browser or device settings.
9.Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide the Platform, maintain security, comply with legal obligations, resolve disputes, and enforce our agreements.
- Account and profile information is generally retained while your Account is active and for a reasonable period afterward.
- Transaction and financial records may be retained for periods required by tax, accounting, and anti-fraud laws.
- Safety, legal-hold, and law-enforcement-preservation records may be retained as long as legally required or necessary, including child-safety records.
When information is no longer needed, we delete, anonymize, or de-identify it in accordance with our retention practices and applicable law.
We keep your information only as long as we need it: while your account is active, plus longer where the law requires (like tax records or child-safety records). After that, we delete or anonymize it.
10.Data Security
We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and destruction. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You play an important role by safeguarding your credentials and notifying us of any suspected compromise.
We use safeguards to protect your data, but no system is 100% secure. You help by protecting your password and telling us if something seems off.
11.Children’s & Teens’ Privacy (COPPA & Minor Users)
The Platform is available to users aged thirteen (13) and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will delete it.
For Teen Users (ages 13 to 17), monetized and adult-only features are restricted as described in our Terms of Service, and any appearance of a minor in Content requires in-person adult supervision and applicable consent. If you believe a child under 13 has provided us personal information, contact us at legal@echolivenow.com.
EchoLive is for ages 13 and up, and we do not knowingly collect data from kids under 13. Teens (13 to 17) cannot use money features, and a minor on camera needs adult supervision. If you think a young child gave us info, email legal@echolivenow.com.
12.Your Privacy Rights & Choices
Depending on where you live, you may have certain rights regarding your personal information. We honor these rights as required by applicable law.
12.1Rights That May Apply to You
- The right to access and obtain a copy of the personal information we hold about you.
- The right to correct inaccurate or incomplete information.
- The right to delete your personal information, subject to legal exceptions.
- The right to data portability, where applicable.
- The right to object to or restrict certain processing, including processing based on legitimate interests.
- The right to withdraw consent where processing is based on consent.
- The right to opt out of the sale or sharing of personal information (note: we do not sell personal information).
- The right to opt out of targeted advertising and certain profiling, where applicable.
- The right to non-discrimination for exercising your rights.
12.2How to Exercise Your Rights
To exercise any of these rights, contact us at legal@echolivenow.com. We may need to verify your identity before fulfilling your request, and we may decline requests as permitted by law.
12.3US State Privacy Rights
If you are a resident of California or another US state with applicable privacy laws (such as Virginia, Colorado, Connecticut, or Utah), you may have additional rights, including the rights described above. You may also designate an authorized agent to make a request on your behalf.
12.4EEA & UK Rights
If you are in the EEA or UK, you have the rights described above under the GDPR and UK GDPR, as well as the right to lodge a complaint with your local supervisory authority.
12.5Marketing Choices
You may opt out of non-essential marketing communications at any time by using the unsubscribe link in our emails or by contacting us. We may still send you essential service and transactional communications.
Depending on where you live, you have rights over your data: to see it, correct it, delete it, take it elsewhere, or object to certain uses. To use these rights, email legal@echolivenow.com. We may need to confirm it is really you.
13.International Data Transfers
EchoLive is based in the United States, and we process and store information in the United States and may process it in other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.
We are based in the US, so your data is processed here and possibly elsewhere. Where required, we use legal safeguards to protect it when it crosses borders.
14.Third-Party Links & Services
The Platform may contain links to, or integrations with, third-party websites and services that we do not control, including payment processors and external sites. This Policy does not apply to them, and we encourage you to review their privacy policies.
EchoLive links to and connects with other companies' services. Their privacy practices are their own; check their policies.
15.Do Not Track Signals
Because there is no common industry or legal standard for recognizing and honoring Do Not Track signals, the Platform does not currently respond to them. We do honor recognized opt-out preference signals where required by applicable law.
There is no agreed standard for Do Not Track browser signals, so we do not act on them, but we do honor recognized opt-out signals where the law requires.
16.Automated Decision-Making & Profiling
We may use automated systems to help operate the Platform, including to detect fraud, prioritize safety reports, route reports to the appropriate reviewers, and personalize content. Where automated processing produces legal or similarly significant effects and the law requires it, we provide appropriate safeguards, including human review where applicable.
We use automated systems to help with things like fraud detection and prioritizing safety reports. Where the law requires it for significant decisions, we provide safeguards like human review.
17.Changes to This Privacy Policy
We may update this Policy from time to time. If we make material changes, we will provide notice through the Platform, by email, or by other reasonable means before they take effect. The "Last Updated" date above indicates when this Policy was most recently revised.
We can update this Policy. If a change is significant, we will let you know before it takes effect. The Last Updated date shows the latest version.
18.Limitation of Liability for Privacy Matters
To the maximum extent permitted by law, our liability for any claim relating to privacy or data processing is subject to the disclaimers, limitations, and exclusions set forth in our Terms of Service.
Our responsibility for privacy claims follows the same limits set out in the Terms of Service.
19.Dispute Resolution for Privacy Matters
Any dispute relating to privacy or this Policy is subject to the governing law, informal dispute resolution, binding arbitration, class action waiver, and jury trial waiver provisions set forth in our Terms of Service.
Privacy disputes follow the same process as other disputes; see the dispute resolution section of the Terms of Service.
20.Contact, Complaints & Supervisory Authorities
If you have questions, requests, or complaints about this Policy or our handling of your personal information, contact our privacy team at legal@echolivenow.com. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
legal@echolivenow.com
Echo Live Inc., a Delaware corporation with its principal place of business in Ohio · echolivenow.com
Questions or complaints? Email our privacy team at legal@echolivenow.com. In Europe or the UK, you can also complain to your local data protection authority.