Privacy Policy

BlessBit Multicast, a product of TiCON System Ltd · Last updated 5 September 2026

Draft pending legal review. This document accurately describes how BlessBit Multicast handles data today, and is published so that platform reviewers and users can read it. It has not yet been reviewed by counsel qualified in Bangladeshi law. TiCON System Ltd should have it reviewed against the Personal Data Protection Act 2026 and the Telecommunication (Amendment) Act 2026 before the service accepts public sign-ups.

1. Who we are

BlessBit Multicast ("the Service") is operated by TiCON System Ltd, a company registered in Bangladesh. Contact: info@blessbit.net.

2. What the Service does

The Service takes a single live video feed that you send us and relays it, unchanged, to live-streaming destinations you have connected — Facebook Pages and YouTube channels that you control. We do not transcode, record, store or serve your video to viewers. Video passes through our relay server in memory and is discarded.

3. What we collect

Data	Why	Kept for
Name, email address and/or phone number	To create and secure your account	Until you delete your account
Facebook and Google account identifiers, and the access/refresh tokens you grant	To create live broadcasts on the Pages and channels you choose	Until you disconnect that destination or delete your account
Destination names and profile images (your Pages / channels)	So you can tell your destinations apart in the dashboard	Until disconnected
Broadcast metadata — titles, descriptions, privacy setting, start/end time, duration, bitrate, resolution, error messages	To run the broadcast and to support you when it fails	Up to 24 months, then deleted
Usage totals — minutes streamed, data transferred	Fair-use limits and capacity planning	Up to 24 months
Server logs including IP address	Security, abuse prevention, debugging	90 days

We do not collect or retain your video or audio content. We do not sell personal data. We do not use your data for advertising.

4. Google and YouTube

The Service uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

What we request, and why

youtube.force-ssl — to create a live broadcast on your channel, bind it to a stream, and end it. This is the minimum scope that permits creating broadcasts.
openid, userinfo.email, userinfo.profile — to identify your account and show you which Google account a channel belongs to.

Revoking access

You can revoke the Service's access to your Google account at any time at myaccount.google.com/permissions, or from within the Service by disconnecting the channel. When access is revoked we delete the associated tokens.

Data obtained through YouTube API Services is deleted within 30 days unless we have a continuing need to store it to provide the Service to you, and is refreshed or deleted at least every 30 days in line with the YouTube API Services Developer Policies.

5. Facebook and Meta

Connecting a Facebook Page uses Facebook Login for Business. We request pages_show_list (to list the Pages you manage), pages_read_engagement and pages_manage_posts (to create and end the live video), together with the Live Video API. We use these only to publish live video to the Pages you explicitly select. You can remove the Service from your Facebook account at any time in Facebook Settings, or by disconnecting the Page in the Service.

6. Where your data is processed

Personal data and broadcast metadata are stored on servers operated by Amazon Web Services in the Asia Pacific (Mumbai) region, India. Live video is relayed through the same infrastructure and is not retained. Your video is transmitted onward to Meta and Google, whose own infrastructure is global.

Because this involves transferring personal data outside Bangladesh, we rely on your consent and on the necessity of the transfer to perform our agreement with you, as permitted under section 29(3) of the Personal Data Protection Act 2026. You may withdraw consent by deleting your account.

7. Your rights

You may request access to, correction of, or deletion of your personal data, and you may object to or restrict processing. Write to info@blessbit.net and we will respond within 30 days. Account deletion instructions are at /data-deletion.

8. Security

OAuth tokens are encrypted at rest. Access to production systems is restricted to named personnel. We will notify affected users and the relevant authority of a personal data breach as required by law.

9. Children

The Service is not directed at children and we do not knowingly collect data from anyone under 16.

10. Changes

We will post any change to this policy on this page and update the date above. Material changes affecting how we use your data will be notified to you by email.