Home Features All Modules MissClicks MissHud API Contact Discord Sign in with Kick Sign in with Twitch
Privacy

Privacy Policy

Explains what information we collect, why we use it, who receives it, how long it is kept and your choices.

Last updated: August 4, 2026

Important: This policy explains general service privacy. Activity-specific KVKK notice and application details are provided separately in the KVKK Privacy Notice.

1. Controller and scope

XsystemSoft Software Services is the data controller for MissXss services. Contact: [email protected]; website: https://missxss.com.tr.

This policy covers the website, account dashboard, API, bots, OBS widgets and overlays, MissClicks, MissHud and related support channels. Third-party sites have their own policies.

2. Categories of data

Account and contact

  • Email, username, avatar, language and time-zone preferences.
  • Support requests, notification preferences and correspondence.

Connected platforms and streams

  • OAuth account identifiers, channel information, permission scopes and access/refresh tokens from services you connect, including Kick, Twitch, TikTok, YouTube and Discord.
  • Live-chat messages, usernames, moderation events, follow/subscription/donation events and stream/category data to the extent required by enabled features.
  • Connection, alert and event settings for donation and stream integrations such as BynoGame, StreamElements, StreamLabs and Ko-fi.

Content and configuration

  • Commands, responses, TTS text, AI prompts and output, variables, media, overlay and widget settings.
  • MissClicks and MissHud preferences, macro/key configurations and necessary technical settings. Unless the application clearly says otherwise, we do not record general keystroke content.

Technical, usage and security

  • IP address, timestamps, requested URL, browser, device/OS, session and error logs, API scopes and usage counts.
  • Security events, audit records, abuse signals and cookie/local-storage preferences.

Future payment data

  • If premium sales launch: name or business title, invoice details, plan, amount, currency, transaction identifier and payment status.
  • MissXss will not store full card numbers or security codes; a payment provider will process them under its own terms.

3. Sources

  • Directly from you through registration, settings, support, API and content inputs.
  • From APIs and webhooks of platforms you authorize.
  • Automatically through server, application, security and error logs when you use the service.
  • If premium sales launch, limited transaction results from payment and invoicing providers.

4. Purposes and legal bases

  • Provide your account, enabled features, integrations and support: performance of a contract.
  • Security, abuse prevention, debugging, capacity and service improvement: legitimate interests balanced against your rights.
  • Billing, accounting, lawful authority requests and required records: compliance with legal obligations.
  • Establish, exercise or defend legal claims.
  • Optional analytics, marketing, certain cookies or features/transfers without another valid basis: prior consent where required.
  • We do not intend to collect sensitive or special-category data. Avoid placing it in free-text fields or chat commands.

5. Sharing and providers

We do not sell personal data. Necessary data may be shared with the following recipient groups subject to access limits and contractual safeguards.

  • Hosting, database, content-delivery, security, email, error-monitoring, AI, TTS and technical-support providers.
  • Kick, Twitch, TikTok, YouTube, Discord, donation and stream-integration providers selected by the user.
  • If premium sales launch, payment, invoicing, accounting and fraud-prevention providers.
  • Authorized public bodies, courts and legal advisers for valid requests or protection of rights.
  • A successor in a merger, transfer or restructuring, subject to appropriate privacy safeguards.

6. International transfers

Servers used by Google, YouTube, Twitch, TikTok, Discord, AI/TTS, cloud or content-delivery providers may be outside Türkiye. Depending on your selected integration, account, technical, content or authorization data may therefore be transferred internationally.

Transfers use a mechanism available under Article 9 of the KVKK, such as an adequacy decision, appropriate safeguards (including standard contracts published by the Board), or an applicable incidental-transfer case. Consent is requested where required. Revoking an integration stops future access but does not erase records subject to legal retention or the third party’s own policy.

7. Retention

  • Account and settings data while the account remains active, followed by a limited backup and dispute period.
  • OAuth tokens until disconnection, expiry or account closure; secure revocation records may remain longer.
  • Live events, chat, commands, security and technical logs for the feature purpose, configured retention and security need.
  • Support and legal records for applicable dispute and limitation periods.
  • If premium sales launch, payment, invoice and accounting records for legally required periods.
  • After expiry, data is deleted, destroyed or irreversibly anonymized.

8. Security

We use risk-based administrative and technical controls such as access restriction, encryption in transit, authentication, log monitoring, backups and updates. No internet method is absolutely secure.

Protect API keys, overlay links and OAuth permissions like credentials. Rotate or revoke them and contact us if you suspect compromise.

9. Cookies

We may use essential cookies or local storage for login, security, language, time zone and preferences. If non-essential analytics or advertising cookies are introduced, they will not run before consent and equal accept, reject and preference choices will be provided.

See the Cookie Policy for current details.

10. Children

The service is not directed to children. Applicable minimum age may vary by platform and country. Minors may use the service only with legal-representative permission. Contact us if you believe child data was processed without authorization.

11. Your choices and rights

  • Update account data, revoke platform permissions and invalidate API keys.
  • Exercise rights available under Article 11 of the KVKK, including access, information, correction, deletion/destruction, recipient information, objection to automated analysis and compensation.
  • Where GDPR applies, conditional rights of access, correction, erasure, restriction, objection, portability and withdrawal of consent may also apply.
  • Submit requests from your registered account email to [email protected]. Identity verification and clarification may be required.

12. Changes and contact

We may update this policy as services and law change. We will announce material changes appropriately and revise the date above.

Privacy questions and data-subject requests: [email protected].