Legal

Privacy Policy

Information about the processing of personal data.

Last updated: May 25, 2026

Controller

JingJing is operated by Marveo Media Group OÜ. Privacy contact: jingjing@marveo.io.

JingJing is a live-first social streaming platform for accounts, profiles, live streams, chat, creator features, internal credits, payouts, and launch waitlist functions.

Data We Process

Account data: email address, password hash, login status, verification status, authentication and recovery data.

Profile data: user ID, username, display name, avatar, bio, language, country, creator status and settings.

Waitlist data: email address, opt-in status, consent timestamp, referral code, referral relationships and technical confirmation data.

Usage data: follows, reactions, streams, feed interactions, wallet actions and abuse signals.

Content data: profile content, chat messages, stream metadata, thumbnails, avatars, uploaded files, reports and moderation decisions.

Transaction data: Bao purchases, Bao gifts, Glow credits, Chai movements, ledger entries, package IDs, order and refund references.

Creator and payout data: creator status, KYC status, Trolley references, payout history, tax form status and fraud review status.

Technical data: IP address, timestamps, browser, device, operating system, language, referrer, session IDs, rate-limit signals and security events.

Communication data: emails, support requests, press requests, legal notices and related correspondence.

Purposes and Legal Bases

Platform operation, accounts, login, profiles, streams, wallet and creator features: Art. 6(1)(b) GDPR.

Waitlist and launch notifications: Art. 6(1)(a), (b) or (f) GDPR depending on the specific flow.

Security, fraud prevention, abuse prevention, debugging and credit integrity: Art. 6(1)(f) GDPR.

Purchases, refunds, payout preparation, accounting and tax documentation: Art. 6(1)(b) and (c) GDPR.

Creator KYC, sanctions checks and payouts via Trolley: Art. 6(1)(b), (c) and (f) GDPR.

Moderation, reports, legal compliance and legal defence: Art. 6(1)(c) and (f) GDPR.

Optional analytics, marketing or campaign measurement are used only where legally required consent under GDPR, ePrivacy and applicable national cookie rules exists.

Authentication and Waitlist

We use Supabase for authentication, session handling, email verification and password recovery. Waitlist emails may be sent through Resend. You can unsubscribe from launch messages by contacting jingjing@marveo.io.

Streaming, Chat and Content

Live streaming may be provided through LiveKit. Chat and feed functions may be provided through Stream.io. These services process connection data, room or channel IDs, participant status, messages, moderation signals and related content data.

Public profile and stream content may be visible to other users. Streams may be stored, replayed or retained where this is required for product functions, moderation, security, evidence or legal obligations.

Credits, Payments and Payouts

JingJing uses internal credits. Bao is bought with real money and gifted to creators. Glow records creator compensation. Chai is an activity credit without monetary value.

Web purchases may be processed by Lemon Squeezy. JingJing receives order, package, refund and allocation references required to credit Bao and provide support. Creator payouts are processed through Trolley, which may process identity, tax, bank, sanctions and payout data.

Recipients

Data may be shared with hosting, database, authentication, storage and realtime providers such as Supabase; live-video providers such as LiveKit; chat and feed providers such as Stream.io; payment providers such as Lemon Squeezy; payout, KYC and tax providers such as Trolley; email providers such as Resend; error monitoring providers such as Sentry where enabled; and advisers, authorities, courts or payment bodies where legally required or necessary to enforce rights.

International Transfers

Some providers may process data outside the EU or EEA, including in the United States, Canada or other countries where they operate infrastructure. Where required, transfers rely on adequacy decisions, the EU-US Data Privacy Framework, standard contractual clauses or other safeguards under Art. 44 ff. GDPR.

Retention

We keep personal data only as long as required for the stated purposes or legal retention duties. Account data is generally kept for the life of the account. Waitlist data is kept until unsubscribe, expiry of the launch purpose or conversion into an account. Ledger, payment, refund, tax and payout records may be retained for up to ten years. Security logs are retained only as long as needed for security and abuse prevention.

Your Rights

You have the right to access, rectification, erasure, restriction, portability and objection under the GDPR. Consent can be withdrawn at any time with future effect. You may also lodge a complaint with a data protection supervisory authority.

For Marveo Media Group OÜ as an Estonian provider, the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) is in particular a competent authority.

Cookies

Details about cookies, local storage, session storage and optional services are explained in the Cookie Policy.

Automated Decisions

JingJing currently does not make solely automated decisions with legal or similarly significant effects under Art. 22 GDPR. Security, fraud and moderation signals may be pre-sorted automatically where necessary.

Contact and Changes

For privacy questions contact jingjing@marveo.io. We update this policy when features, providers, law or processing activities change.

Privacy Policy — JingJing