配信者ダッシュボード

プライバシーポリシー

Last updated: October 27, 2026

This Privacy Policy describes our policies and procedures on the collection, use and disclosure of your information when you use the Service, and tells you about your privacy rights and how the law protects you.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

"Company" (referred to as "the Company", "We", "Us" or "Our" in this Agreement) refers to ChiwaBots (Chiwa Studio).

Information We Collect

Personal Data

While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you, including but not limited to:

  • Name and contact data: such as your name, email address, and other similar contact data.
  • Payment data: data needed to process your order. We do not collect sensitive payment information such as your credit card number; transactions are completed through secure third-party payment providers, subject to their own privacy policies; the provider used is shown to you at checkout.

Birthday and Gender (Optional)

You may optionally provide your birthday (month and day, plus an optional birth year) and gender in "Account settings". We collect this data for statistical analysis and service improvement, and do not make it available to third parties. Your birth year and gender are not shown in any message and are not provided to streamers. You can view and edit this data at any time in "Account settings", or delete your profile. You can also set or clear your birthday's month and day with a chat command. If a channel has birthday greetings turned on, the bot sends a greeting in that channel's chat on your birthday, which may include the month and day; you can pause birthday greetings in "Account settings".

Information from Third-Party Services

The Service allows you to create an account, log in, or link through the following third-party services. Currently only Twitch can be used to create an account and log in; YouTube and Discord can only be linked to an existing account:

  • Twitch
  • YouTube
  • Discord

If you decide to register through, or otherwise grant us access to, a third-party service, we may collect personal data already associated with that account, such as your name, email address, or your activities. You may also choose to share additional information with us through your third-party account; by choosing to provide such information, you permit us to use, share, and store it in a manner consistent with this Privacy Policy.

When you sign in or link an account with Twitch or YouTube, we store that platform account's identifier, account name (such as your Twitch login name), display name, and profile image URL to identify your account; when you sign in with Twitch, we also store the email address Twitch provides. When you sign in to the dashboard or link a platform identity there, we store the authorization tokens issued by the platform in encrypted form and use them to provide the bot and channel management features. The "Linked accounts" feature on the public site uses the platform's authorization only to confirm that the platform account belongs to you: it does not store any authorization token or email address, and it does not create a channel for you.

If you register a passkey in the dashboard, we store its public key, its credential identifier, and the name you give it, to verify your sign-ins. The passkey's private key and any biometric data stay on your device or in your password manager, and we never receive them.

YouTube API Services

The Service uses YouTube API Services. When you link or connect YouTube, we obtain your YouTube channel identifier, channel name, and profile image URL through Google's authorization (plus your Google account's email address when you connect it in the dashboard), and use them only to provide the features described in this Privacy Policy. Google's handling of data is governed by the Google Privacy Policy. You can revoke the Service's access at any time in your Google Account's third-party access settings, or unlink YouTube in the Service, which revokes the authorization we hold with Google and removes that YouTube identity's data from your account; when an account is deleted (de-identified), we also try to revoke the YouTube authorization we hold with Google first. The Service's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and Local Storage

Cookies and browser local storage are small pieces of data stored on your device. We use them to maintain your login session, remember your preferences (such as language and light/dark mode), personalize the content you see, measure how the site is used (Google Analytics, see the dedicated section below), and serve advertising (Google AdSense, see the dedicated section below). Most browsers can be set to disable Cookies, but doing so may prevent parts of the Service from working correctly.

We never place your name, email address, account identifier, or other directly identifying data in Cookies. Note, however, that the measurement and advertising Cookies described above store randomly generated identifiers issued by the third party whose purpose is to distinguish one browser from another; in some jurisdictions such pseudonymous identifiers may still count as personal data.

Sign-in Records and Devices

To keep your account secure, each time you sign in we record your IP address, device information provided by your browser (operating system and browser), an approximate location estimated from your IP address (country or city), and the time. We use this to let you review and sign out of active devices on the "Security" and "Signed-in devices" pages and to detect unusual sign-ins; the full IP address is never shown on those pages. Records of active devices are deleted when you sign out or when they expire, sign-in records are kept for 90 days, and audit logs of account actions are kept for 180 days, after which the system deletes them automatically.

Sharing Information with Third Parties

We do not share your personal information with companies, organizations, or individuals outside of ChiwaBots except in the following cases:

When you share your information

Many of our features let you share information with others, and you control how you share. For example, you can display or hide the sponsor ranking in an interactive widget. Remember, when you share information publicly, your content may become accessible through search engines.

Channel integrations (forwarding to third-party platforms)

A channel owner can enable "channel integrations" to forward that channel's events to a third-party server of their choosing (currently Discord). Once enabled, and depending on the categories selected, the following is sent to that server and stored by that platform: stream online/offline announcements, supporter events such as follows and subscriptions, donation amounts and messages, and, if "chat mirror" is enabled, public chat messages from that channel, including the sender's display name, Twitch login name, and badges.

That server is administered by the channel owner and is outside ChiwaBots' control. The forwarded copy is subject to that third-party platform's privacy policy and to the rules of that server's administrators; ChiwaBots' data deletion process cannot reach content that has already been forwarded to that server (see "Retaining Your Information" below).

Text-to-speech for on-screen alerts

A channel owner can enable "read aloud" for on-screen alerts. When enabled, the text to be spoken for that alert (typically a donation message or a chat message, depending on the rule) is sent to a third-party speech synthesis service to produce an audio file, which is then played on the stream. The service currently used is Microsoft's speech synthesis endpoint; when that service is unavailable, your browser/OBS instead fetches the audio directly from Google's speech synthesis endpoint.

What is sent is limited to the text to be spoken: it does not include your account details, email address, or any identifying information. The text has already passed the channel's blocked-word list and the system profanity filter, and is truncated to the configured length, before it is sent. The synthesized audio is not retained: it exists only for playback and is cleared automatically within minutes. These third-party services apply their own privacy policies to the content they receive, and that is outside ChiwaBots' control.

If you would rather messages were not sent to a third-party speech service, the channel owner can turn off the "read aloud" switch on the relevant alert rules; nothing is sent once it is off.

For external processing

We provide personal information to our affiliates and other trusted businesses or persons to process it for us, based on our instructions and in compliance with this Privacy Policy and other appropriate confidentiality and security measures (for example, maintaining data center operations, providing and improving products and services, and providing customer support).

For legal reasons

We will share personal information outside of ChiwaBots if we have a good-faith belief that access, use, preservation, or disclosure is reasonably necessary to:

  • Meet any applicable law, regulation, legal process, or enforceable governmental request.
  • Enforce the applicable Terms of Service, including investigation of potential violations.
  • Detect, prevent, or otherwise address fraud, security, or technical issues.
  • Protect against harm to the rights, property, or safety of ChiwaBots, our users, or the public, as required or permitted by law.

Retaining Your Information

We retain the data we collect for different periods depending on what it is, how we use it, and how you configure your settings:

  • Some data you can delete whenever you like, such as donation records. We keep this data in your account until you manually remove it or the system automatically removes it.
  • Other data is deleted or anonymized automatically after a set period, such as chatroom message logs in server logs.
  • We retain some data until you delete your ChiwaBots account (e.g., when you disconnect your Twitch account). Note: if you revoke ChiwaBots' access to your Twitch account for the dashboard, the system will automatically delete your related data after 65 days. Viewers who only use the public site do not trigger this automatic deletion; you can delete your profile yourself in "Account settings".
  • Image and audio assets you upload via the media library are stored on Cloudflare R2 and delivered publicly via CDN; when you delete an asset, or delete the corresponding channel or ChiwaBots account, these files are removed (a shared file is retained if identical content is still referenced by another channel).
  • Content forwarded to a third-party server (such as Discord) via "channel integrations" is not covered by our deletion process. That copy lives on a server designated by the channel owner, which ChiwaBots does not administer and cannot delete on your behalf; to have it removed, contact that server's administrators. A channel owner can turn forwarding off at any time, but doing so only stops future forwarding; it does not recall content already sent.
  • Some data is retained for longer when necessary for legitimate business or legal purposes, such as security, fraud and abuse prevention, or financial record-keeping.

When you delete data, we follow a deletion process that removes your data from our servers. Account-level deletion (for example, the automatic deletion after you revoke access on Twitch) does not delete the account record itself: it removes authorization tokens, email addresses, and profile images and disables the account, while we keep the platform account identifier, account name, and display name so that the original account can be matched if you authorize again. So that we can match an account when you contact support, your email address is archived separately and is used only for support lookups, never for sending email or notifications; the same applies to a platform identity's email address when you unlink it.

Security of Your Personal Data

The security of your personal data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. The measures we take include:

  1. Our host is equipped with firewalls, anti-virus systems, and other necessary information security measures. Personal data is strictly protected and only accessible to authorized personnel, who have signed confidentiality agreements; any violation is subject to relevant legal punishment.
  2. If it is necessary to entrust other parties to provide services for business needs, we strictly require them to comply with confidentiality obligations and take necessary inspection procedures to ensure compliance.

Google Analytics

When you visit the Service, we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behavior patterns, in order to track things such as the number of visitors to various parts of the site and interactions with it. We do not send your account identifier to Google. This information is processed in a way that does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of visitors to our website.

Google AdSense (Advertising)

Some pages of the Service display advertising provided by a third-party service, Google AdSense, and some ad slots may also show our own promotional images.

Google, as a third-party vendor, uses cookies to serve ads on our Service, and may tailor those ads based on your prior visits to our Service or other websites. You can reduce or stop seeing ads in the following ways:

  • Opt out of personalized advertising in Google Ad Settings. Opting out does not remove ads; it means their content is no longer tailored to your browsing history.
  • Use your browser's cookie settings or an ad-blocking feature to block the cookies and requests used by Google ads.
  • Use a paid ChiwaBots plan; paid users see no ads.

We do not provide your name, email address, or account identifier to Google. Ads are served by Google directly, and its handling of the data it collects is governed by Google's privacy terms, outside of ChiwaBots' control.

To understand how our promotions perform, we count how often promotional images are shown and clicked, and the result of each ad slot. The server stores only daily aggregate counts, and does not store individual events or IP addresses, does not set Cookies, and does not link anything to your account or any personal data. Your IP address is used only at that moment for rate limiting to prevent abuse and is not recorded. Paid users generate none of these counts.

Links to Other Websites

Our Service may contain links to other websites not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Changes to This Policy

We change this Privacy Policy from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent, and we always indicate the date the last changes were published. If changes are significant, we will provide a more prominent notice.

Contact Us

If you have any questions about this Privacy Policy, you can contact us: