Privacy Policy

Alcidor Tech, LLC (“Alcidor Tech,” “we,” “us,” or “our”) provides a livestream chat management service that lets churches and ministries view, respond to, and moderate the live chats of their YouTube and Facebook livestreams from one dashboard (the “Service”). The Service is available at tkcchat.alcidortech.com and at other alcidortech.com addresses we may use for it.

This Privacy Policy explains what information the Service handles, how we use it, who we share it with, how long we keep it, and the choices you have. By using the Service, you agree to this Privacy Policy.

1. Who this policy covers

• Organizations — churches and ministries that sign up for the Service and connect their accounts.
• Operators and administrators — staff and volunteers who sign in to the dashboard on behalf of an Organization.
• Livestream viewers — people who post chat messages or comments on an Organization’s YouTube or Facebook livestream. Viewers do not use the Service directly, but their public messages pass through it.
• Website visitors — people who view a read-only chat that an Organization has embedded on its website, if the Organization enables that feature.

2. Our role

When we process livestream chat data, referral information, and operator information for an Organization, we act as a service provider following that Organization’s instructions. The Organization decides how its livestreams, chats, and follow-up are run. If you have questions about how a specific church uses your information, you can contact that church directly. We will also help where we can.

3. Information we collect

3.1 From Organizations, operators, and administrators

• Account and identity information: name, email address, profile image, and Planning Center person and organization identifiers. We receive this through our sign-in provider, Clerk, when you sign in with Planning Center or another supported sign-in method.
• Roles and settings: your role (for example, Operator or Admin), campus assignments, message templates, service schedules, and referral settings.
• Operator activity logs: when an operator session starts and ends, which service was operated, how the operator signed in, and the actions taken (posting, hiding, deleting, blocking, and referring).
• Planning Center data: with the Organization’s authorization, we read service times, teams, and scheduled team members from Planning Center Services. This lets the right service times and operators appear in the dashboard.
• Connected platform credentials: OAuth access and refresh tokens that let the Service act for the Organization’s YouTube channel and Facebook Page. These are stored encrypted.

3.2 From YouTube and Facebook

Through YouTube API Services and Meta’s APIs, and with the Organization’s authorization, the Service accesses:

• Channel and Page information: identifiers and status of the Organization’s live broadcasts and live videos.
• Live chat messages and comments on the Organization’s livestreams: message text, time posted, and the commenter’s public display name, profile image, and platform identifier.
• Moderation information: whether a message was hidden or deleted, and whether a user was banned or blocked from the Organization’s chat or Page.

The Service also posts messages, hides or deletes comments, and bans or blocks users. It does this only on the Organization’s own YouTube channel and Facebook Page, and only when an authorized operator takes that action.

3.3 Referrals

An operator may refer a viewer to the Organization’s follow-up team (for example, for prayer or assistance). When that happens, the Service sends a notification, such as an email, to the Organization. It contains the viewer’s display name, platform, message, time, and a link to the livestream.

The Service does not ask viewers for phone numbers, home addresses, or email addresses. Viewers who want follow-up are pointed to the Organization’s own forms, which are governed by the Organization’s own privacy practices.

3.4 Collected automatically

• Technical logs: IP address, browser type, and request times. We use these for security, troubleshooting, and abuse prevention.
• Cookies and similar technology: we use only the cookies and browser storage needed to keep you signed in and remember your dashboard preferences. Our sign-in provider, Clerk, sets session cookies for this purpose. We do not use advertising cookies or third-party analytics trackers. The read-only website embed does not set cookies.

4. How we use information

We use information to:

• run the Service: show a combined chat, post and moderate messages as operators direct, detect when livestreams start and end, and route referrals;
• keep operator activity logs for the Organization;
• secure the Service, prevent abuse, and troubleshoot problems;
• communicate with Organizations about the Service; and
• comply with the law and with the terms of the platforms we connect to.

5. Google and YouTube data

• The Service uses YouTube API Services. Features connected to YouTube are subject to the YouTube Terms of Service and the Google Privacy Policy.
• Alcidor Tech’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• You can revoke the Service’s access to your Google or YouTube account at any time through Google’s security settings page. You can also disconnect YouTube inside the Service or ask us to delete your data (see Data Deletion).
• We do not keep YouTube API data for more than 30 days unless it is refreshed. When access is revoked or deletion is requested, we delete the related YouTube data within 7 days.

6. Meta (Facebook) data

• We use data from Meta’s APIs only to provide the Service’s features for the Organization’s own Facebook Page, in line with the Meta Platform Terms.
• You can remove the Service’s access from your Facebook settings at any time. Instructions are on our Data Deletion page.

7. How we share information

We share information only as follows:

• With the Organization: its operators and administrators can see its chats, operator logs, and referrals.
• With service providers that help us run the Service: Clerk (sign-in and account management), DreamHost (hosting), and our email delivery provider (referral and system emails). They may use the information only to provide their services to us.
• With connected platforms: when operators post, moderate, or look up schedules, the Service sends the needed information to YouTube, Meta, or Planning Center.
• For legal reasons: to comply with the law, respond to valid legal requests, or protect the rights, safety, and security of our users, the public, or us.
• In a business transfer: if Alcidor Tech is involved in a merger, acquisition, or sale of assets. We will give notice before information becomes subject to a different privacy policy.

8. How long we keep information

9. Security

We protect information with encrypted connections (HTTPS), encryption of stored platform credentials, role-based access controls, and activity logging. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected Organizations of a security incident as required by law.

10. Your choices and rights

• Operators and administrators can ask their Organization’s administrator, or us, to access, correct, or delete their information.
• Organizations can disconnect YouTube, Facebook, or Planning Center at any time, request their operator logs, and request deletion of their data.
• Livestream viewers can delete their own comments directly on YouTube or Facebook. They can also ask us to delete any copies we still hold (see Data Deletion).

Depending on where you live, you may have rights to access, correct, delete, or object to the processing of your personal information. We honor these requests wherever practical, regardless of where you live. We may need to verify your identity first. For information we process on behalf of an Organization, we may forward your request to that Organization.

11. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 except as described here. YouTube and Facebook set their own age rules for who may comment. If a child’s public message passes through the Service, it is handled like any other message and deleted within 30 days. Parents or guardians may contact us to request earlier deletion.

12. Where information is processed

The Service is hosted in the United States. If you access it from elsewhere, your information will be processed in the United States.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the effective date above. If the changes are significant, we will notify Organizations by email or in the Service.

14. Contact us

For privacy questions, requests, or complaints: