Privacy Policy
Last updated: 30 July 2026
1. Who we are
Kudex is a platform providing community engagement tools for Twitch streamers, available at kudex.app.
Kudex is operated by Markadept Ltd, a company registered in England and Wales under company number 13152094, with its registered office at 22 Friars Street, Sudbury, CO10 2AA, United Kingdom. Markadept Ltd is the data controller responsible for your personal data.
If you have any questions about this policy or how we handle your data, contact us at privacy@kudex.app.
2. Scope of this policy
This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have.
It applies to:
- Streamers who create a Kudex account and use our tools.
- Viewers in a streamer's Twitch chat, whose data may be processed by the tools a streamer chooses to use. See section 4.
- Visitors to our website.
3. What we collect, why, and on what basis
You sign in to Kudex using your Twitch account. We do not ask for or store a Kudex password.
| Data we collect | Why we collect it | Lawful basis | Who we share it with | How long we keep it |
|---|---|---|---|---|
| Twitch user ID, username, display name, profile image URL, email address | To create and authenticate your account and identify you across the platform | Performance of a contract | Vercel, Neon | Until you delete your account |
| Twitch OAuth access and refresh tokens, and their expiry | To act on your behalf on Twitch within the permissions you granted, for example to send chat messages and receive channel events | Performance of a contract | Vercel, Neon | Until you delete your account or revoke access on Twitch |
| Subscription status, plan, billing interval, Stripe customer identifier | To manage your subscription and your access to paid features | Performance of a contract | Stripe, Vercel, Neon | Account data until deletion; payment records for 6 years per UK accounting law |
| Trial period, free access status, account paused or active status | To determine whether you have access to the platform | Performance of a contract | Vercel, Neon | Until you delete your account |
| Date and time you last signed in | To understand account activity and support you | Legitimate interests | Vercel, Neon | Until you delete your account |
| Which apps you have activated and their settings | To provide the features you have chosen to use | Performance of a contract | Vercel, Neon | Until you delete your account |
| Content you create, such as custom chat commands, greeting messages, and exclusion lists | To provide the features you have chosen to use | Performance of a contract | Vercel, Neon | Until you delete it, or until you delete your account |
| Your stream status and stream session identifiers | So our tools behave correctly during a live broadcast, for example only running while you are live | Performance of a contract | Vercel, Neon | Stream session records are cleared when your stream ends |
| A record of the service emails we have sent you, and when | To avoid sending you duplicates and to support you if you contact us | Performance of a contract | Resend, Vercel, Neon | Until you delete your account |
| Viewer count samples and the running average for your current stream | To power the Partner Push overlay | Performance of a contract | Vercel, Neon | Reset at the start of each stream, deleted with your account |
| Counts of how many times each of your apps has run, totalled per day | To understand how much the platform is being used and where to improve it | Legitimate interests | Vercel, Neon | Until you delete your account |
| Support requests and app suggestions, including their content | To respond to you and improve the platform | Legitimate interests | Resend, Vercel | As long as needed to handle your request and a reasonable period after |
We do not sell your personal data. We do not use it for advertising, and we do not share it with advertisers.
We do not receive or store your card details. Stripe handles those directly.
4. Data we process about viewers in your chat
This section matters. Some Kudex tools process personal data about Twitch viewers who are not Kudex users and have not signed up with us. We think you should know exactly what that involves.
| What we process | Why | How long we keep it |
|---|---|---|
| Shoutouts. A viewer's Twitch username, display name, profile image URL, and channel URL when a shoutout is triggered for them, whether manually by a moderator or automatically | To display the shoutout on your overlay | Held only for the duration of the shoutout queue and removed automatically, within 30 minutes at most |
| VIP lists. The Twitch usernames you add to your VIP list, and the greeting messages you write for them | To greet your VIPs when they chat | Until you delete the entry or delete your account |
| Automated assistant activity. A record of which viewers have chatted during your current stream session | So each viewer is only automatically shouted out once per stream | Deleted automatically when your stream ends |
| Stream events. Twitch username and profile data associated with a channel event, such as a watch streak milestone | To display the corresponding alert on your overlay | Held only for the duration of the alert queue |
All of this data originates from Twitch, either from Twitch's public API or from events Twitch sends us about your channel. It is data that is already visible to anyone watching the stream.
Our lawful basis is legitimate interests: providing the streaming tools a streamer has chosen to use for their channel, in a way that viewers of a live stream would reasonably expect. We hold the minimum needed and delete it as soon as it is no longer required.
If you are a viewer, most of this data is deleted automatically within minutes or when the stream ends, so in most cases there is nothing held about you by the time you would think to ask.
The exception is a streamer's VIP list, which is created and controlled by that streamer and persists until they remove it. If you have been added to a streamer's VIP list and want to be removed, the quickest route is to ask the streamer directly, as they can remove you immediately from their own dashboard.
You can also contact us at privacy@kudex.app to ask what data we hold about you, or to ask us to remove it. We will need your Twitch username to locate it, and we will respond within one month.
5. Other things we use your data for
Beyond the purposes in the tables above, we process personal data to:
- Keep the platform secure, prevent abuse, and diagnose faults. Lawful basis: legitimate interests.
- Comply with our legal, tax, and accounting obligations. Lawful basis: legal obligation.
6. Who we share your data with
We share data only with service providers who help us run the platform. Each processes data on our instructions and under contract.
| Provider | Purpose | Location |
|---|---|---|
| Twitch Interactive, Inc. | Authentication, chat and stream events, profile data | United States |
| Vercel Inc. | Website and application hosting | United Kingdom (London region) |
| Neon Inc. | Database hosting | United Kingdom (London region) |
| Stripe, Inc. | Payment processing and subscription management | United States |
| Plus Five Five, Inc. (Resend) | Transactional email delivery | United States |
| Upstash, Inc. | Rate limiting and abuse prevention | United Kingdom (London region) |
| Sentry (Functional Software, Inc.) | Error monitoring and diagnostics | Germany |
We may also disclose personal data if required to do so by law, or to establish, exercise, or defend legal claims.
If we are ever involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We would notify you before your data became subject to a different privacy policy.
7. International transfers
Some of our service providers are based outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the provider's certification under an approved adequacy framework such as the UK Extension to the EU-US Data Privacy Framework.
8. How long we keep your data
Retention periods for each type of data are set out in the tables in sections 3 and 4. In summary:
- Account and app data: for as long as your account exists. If you delete your account, we delete your account data and all associated app data. Deletion is immediate and permanent.
- Shoutout and alert queue data: removed automatically shortly after display, within 30 minutes at most.
- Automated assistant session records: deleted automatically when your stream ends.
- Payment records: retained by Stripe under their own policy, and by us for as long as UK accounting and tax law requires, currently six years.
- Backups: our database provider retains backups for a limited period, so deleted data may persist in backups briefly before being overwritten.
We may retain data longer where we are required to by law, or where there is a realistic prospect of a legal claim.
9. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data, in certain circumstances
- Restrict how we process your data, in certain circumstances
- Object to processing based on our legitimate interests
- Data portability, meaning to receive your data in a portable format, in certain circumstances
- Withdraw consent, where we rely on consent
You can delete your Kudex account, and all data associated with it, at any time from your dashboard settings. This is immediate and permanent.
To exercise any other right, contact us at privacy@kudex.app. We will respond within one month. We may ask you to verify your identity first.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.
10. Cookies
We do not use advertising cookies, tracking cookies, or third party analytics cookies on Kudex. We do not track you across other websites.
We use only cookies that are strictly necessary to make the platform work. These are:
| Cookie | Purpose | Type | How long it lasts |
|---|---|---|---|
| kudex_session | Keeps you signed in to your dashboard after you authenticate with Twitch. The contents are encrypted. | Strictly necessary | 7 days, or until you sign out |
Because these cookies are strictly necessary to provide a service you have asked for, we do not need your consent to set them, and you will not see a cookie banner on Kudex.
You can block or delete cookies through your browser settings. If you block the session cookie, you will not be able to sign in to your dashboard.
Other storage. Your browser may store a small preference locally, such as your choice of light or dark theme. This stays on your device, is not sent to us, and does not identify you.
Third party pages. When you make a payment, you are handled by Stripe on their own pages, and Stripe sets its own cookies under its own privacy policy. The same applies when you sign in through Twitch. We do not control those cookies.
11. Security
We take the security of your data seriously. Our measures include encryption of data in transit, encrypted session cookies, access controls, and verification of the authenticity of incoming requests from Twitch and Stripe.
No system can be guaranteed completely secure. Security also depends in part on the device and network you use, and on you keeping your Twitch account secure.
12. Children
Kudex is not intended for children. Twitch requires its users to be at least 13 years old, and older in some jurisdictions. Our services are intended for streamers able to enter into a contract with us. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. If we make significant changes we will notify you, for example through the platform or by email. The date at the top of this page shows when it was last updated.
14. Contact us
For any questions about this policy or your personal data:
Markadept Ltd 22 Friars Street Sudbury CO10 2AA United Kingdom