Privacy policy
Last updated 27 October 2026
ICCA Live lets organisers broadcast live events with phones as cameras, mix the show in the cloud and stream it to YouTube, Facebook and Instagram. This policy explains what information we handle to do that, why, who sees it, how long we keep it and the choices you have. We wrote it to be read, so it uses plain language.
1. Who we are
ICCA Live is operated by [Company legal name: set LEGAL_ENTITY], [Registered address: set LEGAL_ADDRESS] ("we", "us"). We decide how your personal data is used for the purposes in this policy, which makes us the Data Fiduciary under India's Digital Personal Data Protection Act, 2023. You can reach us at support@icca.co.in.
When an organiser uses ICCA Live to broadcast an event, the organiser decides who is filmed, which scores and names are shown and where the show is streamed. For that event content we act on the organiser's instructions.
2. What this policy covers
This policy covers the website at gogetslive.com, the ICCA Live mobile app for Android and iOS, the public watch pages and on-screen graphics we host, and the servers that run broadcasts. It applies to organisers and their staff (account holders), volunteers who join an event with a code (camera operators, scorers and commentators), and viewers who use a watch page.
3. Information we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account details | Name, email address, password (stored only as a one-way bcrypt hash), organisation name, your role in the organisation | You, when you sign up or are invited |
| Billing details | Billing name, mobile number, billing email, GSTIN if you add one, credit balance, purchases and usage (live minutes, extra cameras) | You, and our payment provider Cashfree when a payment completes |
| Event content | Live video and audio from camera phones, commentary audio, event and venue names, player names, clubs and categories, scores, text for on-screen graphics, highlight clips | Organisers, their staff and volunteers |
| Volunteer details | The display name a volunteer types, a random device identifier created by the app, camera name and position, phone model and platform, battery level and network quality during the event | The app on the volunteer's phone |
| Viewer chat | The name a viewer types, their message, the time, and a one-way hash of their IP address used only to limit spam and enforce bans | Viewers on a watch page |
| Watch-page viewing | A random viewer ID kept in your browser, how long the video played and whether it was unmuted, the influencer or share link you came from, device type (phone, tablet, desktop) and app (for example Instagram's browser), and a one-way hash of your network used only to stop fake views. No name and no IP address is stored | The watch page, while the video plays |
| Games, reminders and prizes | Your answers in quizzes, polls and predictions, spins of a wheel; the mobile number you give for a "Remind me" message or a lucky draw; if you win, the mobile number (checked with a one-time code) and email you give to claim the prize | You, on the watch page and the claim page |
| Influencer details | Name, social handle, payout terms and, if given, PAN for tax deduction (stored encrypted) | The organiser |
| Connected platform data | YouTube channel name and ID, Facebook Page names and IDs, access tokens, broadcast IDs, stream status, comments on your live broadcasts, an Instagram stream key you paste | Google and Meta, with your permission (sections 5 and 6) |
| Technical data | IP address, browser or app version, device type, request logs, error reports | Your browser or device, automatically |
Watch-page games and prizes. Games and prize draws on a watch page are run by the event's organiser. They are free: no purchase or payment is needed to play or win, and sharing on social media is never required. Winners are picked by our server and every draw is logged. Your mobile number is used only to send the message you asked for (a reminder, a draw entry confirmation, a prize code or a winner's message) and, if you win, is shared with the organiser (and the sponsor, if they send the prize) only to deliver it. Each event has its own prize terms page.
Camera and microphone. The app uses the camera and microphone only while you are streaming as a camera or commentator, and only after you allow it. It does not access your photos, contacts, location or other files.
Cookies and local storage. Our website and app store a sign-in token on your device so you stay logged in, and remember small preferences such as the selected organisation. We use no advertising or third-party analytics cookies. Watch pages embed the YouTube player, which is provided by Google and may set its own cookies under the Google Privacy Policy.
4. How we use information
- To create and secure your account and let your team and volunteers join your events.
- To run broadcasts: receive camera video, mix the programme, render graphics, record short replays, make clips, and stream to the platforms you choose.
- To show live scores, leaderboards and the combined chat on your broadcast and watch page.
- To measure live minutes and cameras, charge credits, process purchases and issue receipts.
- To keep the service safe: prevent abuse and spam, enforce bans, investigate faults and fix bugs.
- To contact you about your account, payments, important service changes and support requests. We send marketing email only if you opt in, and you can unsubscribe at any time.
- To meet legal obligations, such as tax records and lawful requests from authorities.
We rely on your consent when you create an account, connect a platform or start a broadcast, and on the legitimate uses the law allows for things like security, fraud prevention and legal compliance. You can withdraw consent at any time (section 12); this stops future processing but does not undo what was already done lawfully.
5. Google user data and YouTube API Services
ICCA Live uses the YouTube API Services. If you connect a YouTube channel, you also agree to be bound by the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.
What we ask for and why
When an organisation owner taps Connect YouTube, Google asks you to grant the https://www.googleapis.com/auth/youtube permission ("Manage your YouTube account"). We need this permission because YouTube's live-streaming features (creating a live broadcast, creating a stream, binding them and starting or ending the broadcast) are only available with it. We use it to:
- read your channel's ID and title, so you can see which channel is connected;
- create a live broadcast and a live stream for each event you choose to stream, with the title and privacy setting you pick;
- start and end that broadcast when your director taps Go live and End stream, and read its status and stream health;
- read the live chat messages of that broadcast, so they appear in the combined chat for your commentator.
We do not use this access to read, upload, edit or delete your other videos, playlists, subscriptions or comments, to post anything other than the broadcasts you start, or to access any other Google service such as Gmail, Drive or Contacts.
How we store and protect it
- Google gives us an access token and a refresh token. The refresh token is encrypted at rest with AES-256-GCM. Access tokens are kept only in server memory and expire within an hour.
- We store your channel ID and title, and the IDs of broadcasts we create, for as long as the channel stays connected.
- Live chat messages copied from your YouTube broadcasts are deleted from our servers automatically within 30 days.
Sharing and human access
We do not sell Google user data, and we do not share or transfer it to anyone except: our hosting provider, which stores it on our behalf under contract; when you direct us to (for example, by showing a viewer's comment on your broadcast); or when the law requires it. We never use it for advertising, credit decisions or training AI or machine-learning models. Our staff do not read it unless you ask us to for support, it is needed for security or abuse investigations, or the law requires it.
Disconnecting and revoking access
You can disconnect YouTube at any time in the app (Organisation, then Disconnect next to YouTube). We then delete the stored tokens and ask Google to revoke our access. You can also revoke access directly from your Google Account at security.google.com/settings/security/permissions. Broadcasts already published stay on your YouTube channel, where you control them.
Sign in with Google. If you choose Continue with Google, Google shares your name, email address and a Google account ID with us (the openid, email and profile permissions only). We use them only to create and sign in to your ICCA Live account. We do not get your Google password or access to any other Google data, and we keep these details until you delete your account.
6. Facebook and Instagram data
If you connect Facebook, Meta asks you to grant these permissions. We use each one only as described:
pages_show_list: list the Pages you manage, so you can choose one to stream to.pages_read_engagement: read basic information about that Page and the status of live videos we create.pages_manage_posts: create, start and end the live video on that Page for your event.pages_read_user_content: read comments on those live videos, so they appear in the combined chat.
Page access tokens are encrypted at rest. Comments copied from Facebook are deleted from our servers automatically within 30 days. You can disconnect Facebook in the app, which deletes the stored tokens, and remove ICCA Live from your Facebook settings under Business Integrations. Meta's handling of your data is described in the Meta Privacy Policy.
Instagram. Meta does not let apps start Instagram live videos, so you copy a stream key from Instagram and paste it into the app for each event. We encrypt that key, use it only to send your broadcast to Instagram, and you can replace or remove it at any time. Instagram keys stop working after one live video.
To ask us to delete data we received from Facebook or Instagram, follow the steps on our data deletion page.
7. Payments
Credit purchases are processed by Cashfree Payments India Pvt Ltd on its own secure checkout page. You enter card, UPI or bank details with Cashfree, not with us, and we never receive or store them. Cashfree tells us the order number, amount and whether the payment succeeded. Cashfree's handling of your data is covered by its own privacy policy.
8. Who we share information with
- Service providers who run parts of the service for us under contract and only on our instructions: Amazon Web Services (hosting, storage and computing) and Cashfree (payments).
- The platforms you choose. When you stream to YouTube, Facebook or Instagram, we send your broadcast and its title to that platform. What happens there is governed by that platform's terms and policies.
- Your organisation. Owners and admins of your organisation can see its members, events, credits and usage.
- Legal reasons. When required by law, a court order or a lawful request from authorities, or to protect people's safety and our rights.
- Business transfers. If ICCA Live is merged or sold, information may move to the new owner, who must respect this policy.
We do not sell personal data and do not share it with advertisers or data brokers.
9. What is public
A broadcast is public by design. Anyone can see the live video on the platforms you stream to, and, if the organiser turns on the watch page, the video, player names, scores, leaderboard, highlight clips the organiser marks public, and chat messages with the names viewers chose. Viewers should not post anything in chat they would not want others to see.
10. How long we keep information
| Information | How long |
|---|---|
| Account and organisation details | Until you delete your account, then removed within 30 days |
| Camera recordings used for instant replay | Deleted automatically after 3 days |
| Highlight clips | Until the organiser deletes them or the account is deleted |
| Watch-page chat messages | With the event, until the organiser deletes it or the account is deleted |
| Comments copied from YouTube and Facebook | Deleted automatically within 30 days |
| YouTube and Facebook tokens, Instagram keys | Until you disconnect or delete your account |
| Volunteer access | Volunteer sign-ins expire after about two days; their names and camera details stay with the event |
| Watch-page viewing | The viewer ID and network hash are removed 90 days after your last visit; only anonymous totals stay in the organiser's reports |
| "Remind me" and lucky draw numbers | Deleted after 30 days |
| Prize winners' phone and email | Removed 90 days after the win (enough to deliver the prize) |
| Purchases, invoices and credit history | As long as Indian tax and accounting law requires (generally 8 years) |
| Server logs | Rotated automatically and kept only as long as needed for security and fixing faults |
Videos published to YouTube, Facebook or Instagram stay on those platforms under your control. Deleting your ICCA Live account does not delete them.
11. Security
Traffic between our website, app and servers is encrypted in transit with HTTPS, and camera streams are sent over SRT with per-camera access keys and encryption. Passwords are stored only as hashes, and platform tokens and stream keys are encrypted at rest. Access to production systems is limited to the people who need it. No system is perfectly secure; if a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.
12. Your rights and choices
Under the Digital Personal Data Protection Act, 2023, and other laws that apply to you, you can:
- ask for a summary of the personal data we hold about you and how it is used;
- correct or update it;
- ask us to erase it, or delete your account (see how to delete your data);
- withdraw consent, for example by disconnecting YouTube or Facebook;
- nominate someone to exercise these rights for you if you die or become unable to;
- raise a grievance with us, and if you are not satisfied with our answer, complain to the Data Protection Board of India.
Email support@icca.co.in from the address on your account. We may ask you to confirm your identity, and we reply within 30 days. Volunteers and viewers who want their name or messages removed from an event can also ask the organiser.
13. Children
Accounts are for people aged 18 or older. We do not knowingly create accounts for children. Organisers who broadcast events involving children, such as school sports days, are responsible for getting verifiable consent from a parent, guardian or the school before filming or showing a child's name, and for not tracking, profiling or targeting children. If you believe a child's data was shared with us without that consent, email us and we will remove it.
14. Where data is processed
Our servers are hosted by Amazon Web Services. When you stream to YouTube, Facebook or Instagram, Google and Meta process your broadcast in their own data centres, which may be outside India. We transfer data outside India only as permitted by Indian law.
15. Changes to this policy
We will update this page when our practices change and change the date at the top. If a change materially affects how we use your personal data, we will tell you by email or in the app before it takes effect, and ask for your consent again where the law requires.
16. Contact and Grievance Officer
For questions, requests or complaints about privacy, contact our Grievance Officer:
[Grievance Officer name: set GRIEVANCE_OFFICER]
[Company legal name: set LEGAL_ENTITY]
[Registered address: set LEGAL_ADDRESS]
Email: support@icca.co.in
We acknowledge complaints within 24 hours and aim to resolve them within 15 days.