Privacy Policy

Effective Date: April 1, 2026 Last Updated: April 15, 2026

1. Introduction

Storefront Live ("we," "us," or "our") operates an online marketplace. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website and services (collectively, the "Platform").

By using the Platform, you consent to the collection and use of your information as described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

Waitlist and Communications When you sign up for our waitlist or subscribe to updates, we collect:

• Email address
• Name (if provided)

Account Information When you create an account, we may collect:

• Name
• Email address
• Phone number
• Date of birth
• Shipping address
• Profile photo (optional)

Seller Information If you register as a Seller, we may also collect:

• Business name and address
• Tax identification number (EIN or SSN)
• Bank account information for payouts
• Government-issued identification for verification

Transaction Information When you make purchases or sales, we may collect:

• Items purchased or sold
• Transaction amounts
• Payment method information
• Shipping information

Communications We collect information from your communications on the Platform, including:

• Messages with other users
• Customer support inquiries
• Reviews and ratings

2.2 Information Collected Automatically

Device Information We automatically collect:

• Device type and model
• Operating system and version
• Unique device identifiers
• IP address

Usage Information We collect information about your use of the Platform:

• Pages and features accessed
• Search queries
• Interactions with the Platform
• Referring URLs

Location Information We collect approximate location based on your IP address. We do not collect precise GPS location.

2.3 Information from Third Parties

Payment Processor We may receive transaction confirmation and fraud prevention data from our payment processor, Stripe.

Shipping Carriers We may receive delivery status and tracking information from shipping carriers.

Identity Verification For Sellers, we may receive verification results from identity verification services.

3. How We Use Your Information

We use your information for the following purposes:

Providing Services

• Process transactions and payments
• Facilitate shipping and delivery
• Enable communication between Buyers and Sellers
• Provide customer support
• Manage your waitlist registration and send updates

Platform Operations

• Verify user identity and prevent fraud
• Monitor and enforce compliance with our Terms and policies
• Moderate content and resolve disputes
• Improve and optimize the Platform

Communications

• Send transactional notifications (order confirmations, shipping updates)
• Send service announcements and policy updates
• Send waitlist updates and launch notifications
• Respond to your inquiries

Analytics

• Analyze usage patterns and trends
• Measure Platform performance
• Conduct research and development

Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent harm
• Enforce our Terms and Conditions

4. How We Share Your Information

4.1 With Other Users

• Buyers may see Seller's store name, profile, ratings, and policies
• Sellers may see Buyer's name and shipping address for order fulfillment

4.2 With Service Providers

We share information with service providers who perform services on our behalf:

• Payment processor (Stripe): Payment and transaction data to process payments
• Shipping carriers: Name, address, and order details to fulfill shipments
• Identity verification providers: Name and ID documents to verify Seller identity
• Cloud hosting providers: Platform data for hosting and storage
• Analytics providers (Google Analytics): Usage data and device information to analyze Platform usage
• Customer support tools: Support inquiries and account information to provide support

4.3 For Legal Reasons

We may disclose information:

• To comply with applicable law or legal process
• To respond to lawful requests from government authorities
• To protect our rights, privacy, safety, or property
• To enforce our Terms and Conditions
• In connection with a merger, acquisition, or sale of assets

4.4 With Your Consent

We may share your information for other purposes with your consent.

4.5 Sale of Personal Information

We do not sell your personal information as defined under the California Consumer Privacy Act (CCPA).

5. Cookies and Tracking Technologies

5.1 Website Technologies

Our website uses the following technologies:

Google Analytics We use Google Analytics to understand how users interact with our Platform. Google Analytics collects information such as how often users visit, what pages they view, and what other sites they visited prior to our Platform. We use this information to improve our Platform and user experience.

Google Analytics collects the IP address assigned to you on the date you visit the Platform, but not your name or other identifying information. We do not combine the information collected through Google Analytics with personally identifiable information.

Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy.

Essential Cookies We use essential cookies to maintain session state and authentication tokens. These cookies are necessary for the Platform to function properly.

Preference Cookies We may use preference cookies to remember your language and display settings.

5.2 Advertising and Tracking Pixels

We do not currently use advertising tracking pixels. If this changes, we will update this Privacy Policy and provide appropriate notice.

5.3 Your Choices

You can manage cookie preferences through your browser settings. You can also install browser extensions that block analytics tracking. Disabling cookies may affect Platform functionality.

As our services expand to include mobile applications, additional analytics tools may be used. We will update this Privacy Policy accordingly.

6. Your Privacy Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

6.1 Categories of Personal Information We Collect

We have collected or may collect the following categories of personal information:

• Identifiers: Name, email address, phone number, postal address, account name, IP address, device identifiers
• Personal Information (Cal. Civ. Code § 1798.80): Name, address, telephone number, bank account number (Sellers only), credit card number (processed by Stripe)
• Commercial Information: Products purchased or sold, transaction history, order details
• Internet/Electronic Activity: Browsing history on Platform, search queries, interactions with Platform features
• Geolocation Data: Approximate location based on IP address (city/region level)
• Professional Information: Business name and address (Sellers only)
• Inferences: Preferences, characteristics, and behavior patterns derived from your Platform activity

6.2 Sources of Personal Information

We collect personal information from:

• Directly from you (registration, transactions, communications, waitlist signup)
• Automatically from your devices (usage data, device information)
• Third-party service providers (payment processor, shipping carriers, identity verification)

6.3 Business Purposes for Collection

We collect personal information for:

• Providing and improving our services
• Processing transactions and payments
• Shipping and delivery
• Customer support and dispute resolution
• Fraud prevention and security
• Legal compliance and enforcement
• Analytics and research
• Waitlist management and communications

6.4 Right to Know

You have the right to request the categories and specific pieces of personal information we collected, the sources, business purposes, and categories of third parties with whom we shared it.

6.5 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal compliance, completing transactions).

6.6 Right to Correct

You have the right to request correction of inaccurate personal information.

6.7 Right to Opt-Out

You have the right to opt out of the sale or sharing of your personal information. We do not sell personal information.

6.8 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

6.9 How to Exercise Your Rights

To exercise your rights, you may:

• Email us at reachout@storefrontlive.com

We will verify your identity before processing your request. We will respond within 45 days, with the option to extend by an additional 45 days if necessary.

6.10 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We will require verification of both your identity and the agent's authorization.

7. Data Retention

We retain your information for the following periods:

Waitlist Information

• Email addresses and associated data are retained until you unsubscribe or until we complete our launch process, whichever comes first

Account Information

• Profile data (name, email, etc.): 90 days after account deletion
• Profile photos: 90 days after account deletion

Transaction Data

• Purchase and sale records: 7 years (tax and legal compliance)
• Payment records: 7 years (tax and legal compliance)
• Shipping records: 7 years (legal compliance)

Tax Documents

• W-9 forms and 1099 records: 7 years (IRS requirements)

Communications

• Messages between users: 2 years
• Customer support tickets: 3 years

Technical Data

• Server logs: 90 days
• Analytics data: 26 months (Google Analytics default)

After Account Deletion

When you delete your account, personal profile data is deleted after the 90-day soft deletion period. Transaction records are retained for legal compliance. Communications you had with other users remain visible to those users but your identifying information is anonymized.

We may retain information longer than stated if required by law, legal proceeding, or government request. After the retention period, data is permanently deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

No system is completely secure. We cannot guarantee the absolute security of your information.

9. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete it promptly.

10. International Users

The Platform is operated in the United States and intended for U.S. users only. If you access the Platform from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before the effective date. The "Last Updated" date at the top of this policy indicates when it was last revised.

Continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us:

Storefront Live Email: reachout@storefrontlive.com