Legal

Privacy Policy

How we collect, use, and protect your information.

Privacy Policy

Version 1.0.0 Effective Date: June 30, 2026 Last Updated: June 30, 2026

1. Introduction

Storefront Live, Inc. ("Storefront Live," "we," "us," or "our") operates a livestream shopping marketplace. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our mobile applications, our website, and our related online and offline services (collectively, the "Platform"). Storefront Live, Inc. is responsible for the personal information described in this Policy.

This Policy applies to all users of the Platform. If you are a California resident, you have additional rights, which are described in Section 6.

This Privacy Policy is part of, and incorporated into, our Terms of Service. It explains how we handle your information.

2. Information We Collect

2.1 Information You Provide

Account Information When you create an account, we collect:

  • Name
  • Email address
  • Phone number
  • Date of birth
  • Shipping address
  • Profile photo (optional)

Account Credentials We collect the password and login credentials you use to access and secure your account.

Seller Information If you register as a Seller, identity, tax, and bank-account information used for verification and payouts is collected and verified through our payment provider, Stripe, including:

  • Business name and address
  • Tax identification number (EIN or SSN)
  • Bank account information for payouts
  • Government-issued identification for verification

Transaction Information When you make purchases or sales, we collect:

  • Items purchased or sold
  • Transaction amounts
  • Payment method information (card details are processed and stored by Stripe, not by us)
  • Shipping information

Communications We collect information from your communications, including:

  • Direct messages with other users
  • In-show chat messages
  • Customer support inquiries
  • Reviews and ratings

Your messages on the Platform are not private or end-to-end encrypted. Platform staff and the relevant Store may access your messages and order communications for moderation, support, safety, and dispute-resolution purposes. See Section 4.1.

Promotions and Giveaways When you enter a giveaway or promotion, we collect your entry and eligibility information and, if you win, the details needed to award and deliver the prize.

Surveys and Marketing If you take part in a survey or sign up to receive updates, we collect your responses and your contact and communication preferences.

Content We collect content you create or share, including:

  • Product listings and descriptions
  • Product photos
  • Livestream video content, including recorded video of a Seller's broadcast associated with an order ("video receipts")

2.2 Information Collected Automatically

Device Information We automatically collect:

  • Device type and model
  • Operating system and version
  • Unique device identifiers
  • IP address

Usage Information We collect information about your use of the Platform:

  • Pages and features accessed
  • Shows viewed and duration
  • Search queries
  • Purchase history
  • Interactions with other users

Location Information We collect approximate location based on your IP address. We do not collect precise GPS location.

2.3 Information from Third Parties

Payment Processor We receive transaction confirmation, identity/verification results, and fraud-prevention data from Stripe, our payment processor.

Shipping Carriers We receive delivery status and tracking information from shipping carriers (e.g., UPS).

Authentication Partners If you sign in using a third-party service (such as Apple or Google), we receive basic profile information from that service — such as your name and email address — as permitted by your settings with that service.

3. How We Use Your Information

We use your information for the following purposes:

Providing Services

  • Process transactions and payments
  • Facilitate shipping and delivery
  • Enable communication between Buyers and Sellers
  • Provide customer support

Platform Operations, Security, and Safety

  • Verify user identity and prevent fraud
  • Monitor and enforce compliance with our Terms and policies
  • Moderate content and resolve disputes
  • Maintain the security, integrity, and safety of the Platform
  • Improve and optimize the Platform

Automated Processing

  • Label, prioritize, and route inbound support messages (see Section 9)
  • Detect potential fraud, counterfeit, safety, or policy issues and flag them for human review
  • Classify buyer activity (for example, "Top Buyer") and generate engagement and performance analytics
  • Generate periodic, activity-based recommendations

Communications

  • Send transactional notifications (order confirmations, shipping updates, return labels)
  • Send service announcements and policy updates
  • Send marketing or promotional messages, which you can opt out of at any time
  • Respond to your inquiries

Analytics

  • Analyze usage patterns and trends
  • Measure Platform performance
  • Conduct research and development

De-identified and Aggregated Data

  • Create and use de-identified or aggregated information — which can no longer reasonably identify you — for analytics, research, reporting, and improving the Platform

Legal Compliance

  • Comply with applicable laws and regulations
  • Respond to legal requests and prevent harm
  • Enforce our Terms of Service

We do not use your personal information or your Content to train third-party generative artificial-intelligence models.

4. How We Share Your Information

4.1 With Other Users and Stores

Buyers see:

  • Seller's shop name and profile
  • Seller's ratings and reviews
  • Seller's shipping and return policies

Sellers and Stores see, for buyers who interact with or purchase from them:

  • Buyer's name and shipping address (for fulfillment)
  • Buyer's order and purchase history with that Store
  • Buyer-level analytics, including spend, engagement, reviews, complaints, refunds, and open issues
  • Buyer activity classification (for example, "Top Buyer")
  • Messages and order communications exchanged with that Store

Platform administrators can access conversations, orders, and account information across the Platform for moderation, support, safety, and enforcement, and may communicate under an administrator identity.

4.2 With Service Providers

We share information with service providers who perform services on our behalf:

| Provider Type | Information Shared | Purpose | |--------------|-------------------|---------| | Payment processor (Stripe) | Payment, identity, tax, and transaction data | Process payments, verify identity, collect tax info, issue tax forms | | Shipping carriers (UPS, etc.) | Name, address, order details | Fulfill shipments and returns | | Cloud hosting | Platform data | Host and store data | | Analytics (Firebase, Google Analytics) | Usage data, device info | Analyze Platform usage | | Customer support platform (Intercom) | Support inquiries, account info, order data, communication history | Provide support; AI-assisted labeling and prioritization (metadata only) |

4.3 For Legal Reasons

We may disclose information:

  • To comply with applicable law or legal process
  • To respond to lawful requests from government authorities
  • To protect our rights, privacy, safety, or property
  • To enforce our Terms of Service
  • In connection with a merger, acquisition, or sale of assets

4.4 With Your Consent

We may share your information for purposes not described in this Policy only with your consent.

4.5 Sale or Sharing of Personal Information

We do not sell or "share" (as those terms are defined under the California Consumer Privacy Act, as amended) your personal information, and we do not use advertising tracking pixels. If we introduce advertising or any practice that constitutes a sale or sharing of personal information in the future, we will update this Privacy Policy and provide a "Do Not Sell or Share My Personal Information" choice and any other rights required by law before doing so.

5. Cookies and Tracking Technologies

5.1 Technologies Used

Mobile Applications Our mobile apps use the following analytics and monitoring tools:

| Tool | Provider | Purpose | Data Collected | |------|----------|---------|----------------| | Firebase Analytics | Google | Usage analytics | App opens, screen views, feature usage | | Firebase Crashlytics | Google | Crash reporting | Device info, app state, crash logs | | Firebase Performance | Google | Performance monitoring | App load times, network latency |

Website Our website uses:

| Tool | Provider | Purpose | Data Collected | |------|----------|---------|----------------| | Google Analytics | Google | Usage analytics | Page views, session duration, referrers, device info | | Essential cookies | Storefront Live | Platform functionality | Session state, authentication tokens | | Preference cookies | Storefront Live | User preferences | Language, display settings |

5.2 Analytics (Website)

We use Google Analytics to understand how people use our website — for example, which pages are visited and how long visits last. Google Analytics collects the IP address assigned to you but not your name, and we do not combine it with information that identifies you. Google's use of this information is governed by the Google Analytics Terms of Service and the Google Privacy Policy.

5.3 Analytics (Mobile Apps)

In our mobile apps, we use Google's Firebase tools to understand app usage and to monitor performance and crashes, so we can keep the app stable and improve it. You can limit this collection through your device settings or by uninstalling the app.

5.4 Advertising

We do not currently use advertising pixels or display third-party advertising. If that changes, we will update this Policy and provide the notice and choices required by law (see Section 4.5).

5.5 Your Choices

Mobile Apps: You can limit data collection through your device settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

Website: You can manage cookie preferences through your browser settings. Disabling cookies may affect Platform functionality.

6. Your Privacy Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA").

6.1 Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email address, phone number, postal address, account name, IP address, device identifiers
  • Personal Information (Cal. Civ. Code § 1798.80): Name, address, telephone number, bank account number (Sellers only), payment card number (processed by Stripe)
  • Commercial Information: Products purchased or sold, transaction history, order details
  • Internet/Electronic Activity: Browsing history on the Platform, search queries, interactions with Platform features, app usage data
  • Geolocation Data: Approximate location based on IP address (city/region level)
  • Audio/Visual Information: Livestream video and audio, video receipts, profile photos
  • Professional Information: Business name and address, tax identification (Sellers only)
  • Sensitive Personal Information: Social Security number, government-issued identification, and financial-account number with access credentials (Sellers only) — see Section 6.4
  • Inferences and Profiling: Preferences, characteristics, buyer activity classification (e.g., "Top Buyer"), and behavior patterns derived from your Platform activity

6.2 Sources, Purposes, and Recipients

  • Sources: directly from you; automatically from your devices; and from service providers (payment processor, shipping carriers) and authentication partners.
  • Business purposes: providing and improving services; processing transactions; shipping; customer support and dispute resolution; fraud prevention and security; legal compliance; and analytics. See Section 3.
  • Categories of recipients: service providers; other users and Stores (as described in Section 4.1); and legal authorities when required by law.

6.3 Your Rights

As a California resident, you have the right to:

  • Know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
  • Delete personal information we collected from you, subject to legal exceptions (such as completing transactions and tax/legal retention).
  • Correct inaccurate personal information.
  • Non-Discrimination: we will not discriminate against you for exercising your rights.

We do not sell or "share" your personal information (as those terms are defined under the CCPA), and we do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age. You can also unsubscribe from marketing emails at any time using the link in any such email or through your settings. To exercise any of these rights, see Section 6.6.

6.4 Sensitive Personal Information

Some of the information we collect is "sensitive personal information" under the CCPA — specifically, a Seller's Social Security number, government-issued identification, and financial-account number together with the credentials needed to access the account. We collect this information only from Sellers, and we use and disclose it only to verify identity, process payouts, prevent fraud, and meet legal and tax obligations. We do not use sensitive personal information to infer characteristics about you. Because we limit our use to these purposes, the CCPA's right to limit the use of sensitive personal information does not apply, and we do not offer a separate "Limit the Use of My Sensitive Personal Information" option.

6.5 Automated Decisionmaking and Profiling

We use automated systems to label and prioritize support messages, to flag potential fraud or safety concerns for human review, to classify buyer activity (e.g., "Top Buyer"), and to generate activity-based recommendations. These systems support human staff; routing, responses, refunds, account actions, and enforcement are decided by people, not automatically. Where the CCPA's automated decisionmaking technology rules grant you rights to access information about, or opt out of, automated decisionmaking, you may exercise those rights as described in Section 6.6.

6.6 How to Exercise Your Rights

To exercise your rights, you may:

  • Submit a request through app settings (Buyers);
  • Email us at privacy@storefrontlive.com; or
  • Contact us at reachout@storefrontlive.com.

We will verify your identity before processing your request and will respond within 45 days, with the option to extend by an additional 45 days if necessary. You may designate an authorized agent to submit requests on your behalf; we will require verification of both your identity and the agent's authorization.

7. Data Retention

We keep personal information for as long as needed to provide the Platform and to meet our legal, tax, and dispute-resolution obligations. In general:

| Information | How long we keep it | |-------------|---------------------| | Account and profile | While your account is active; deleted after a 90-day soft-delete window when you close your account (subject to the exceptions below) | | Transactions, payments, and tax records | 7 years, to meet tax and legal requirements | | Communications and support | Messages and in-show chat for about 2 years; support records for up to 3 years — for dispute resolution, safety, and moderation | | Content (livestream recordings, video receipts, listings, reviews) | For as long as needed for Platform operations and dispute resolution; reviews remain until you delete your account | | Technical and analytics data | Server logs and crash reports for about 90 days; analytics data for up to 26 months |

Identity, tax, and bank-account information collected for Seller verification is held by Stripe under its own retention practices and is not separately retained by us after verification.

7.1 Retention After Account Deletion

When you delete your account, personal profile data is deleted after the soft-delete period; transaction records are retained for legal compliance (7 years); communications you had with other users remain visible to those users but your identifying information is anonymized where feasible; and content you posted may be retained in anonymized form. Reviews are described in our Buyer Guidelines; a deletion request submitted under Section 6 will be honored subject to legal exceptions.

7.2 Legal Holds

We may retain information longer than stated if required by law, legal proceeding, or government request. After the retention period, data is permanently deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

No system is completely secure. We cannot guarantee the absolute security of your information. Help protect your account by using a strong, unique password and notifying us promptly at reachout@storefrontlive.com if you suspect any unauthorized use.

9. Automated Support Labeling

We may use an automated support agent to read inbound support messages already submitted through the app or our support inbox and to add metadata — such as a priority level and fraud, safety, or eligibility flags — for the human handler. This automated agent does not make refund or account decisions. Responses to support messages are written by our team.

10. Children's Privacy

Account holders must be at least 18 years of age (see Terms of Service Section 3). The Platform is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. Where a parent or guardian permits a minor aged 13–17 to use the Platform under the adult's supervision and account, the adult account holder is responsible for that use.

11. International Users

The Platform is operated in the United States and intended for U.S. users only. If you access the Platform from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or in-app notification at least 14 days before the effective date. The "Last Updated" date at the top indicates when it was last revised. Continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

Storefront Live, Inc. 555 West 25th Street, Suite 2, New York, NY 10001

Privacy Inquiries: privacy@storefrontlive.com General Support: reachout@storefrontlive.com