Privacy Policy

Version 1.1.0
Effective Date: October 5, 2026
Last Updated: October 5, 2026

1. Introduction

Storefront Live, Inc. ("Storefront Live," "we," "us," or "our") operates a livestream shopping marketplace. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our mobile applications, our website, and our related online and offline services (collectively, the "Platform"). Storefront Live, Inc. is responsible for the personal information described in this Policy.

This Policy applies to all users of the Platform. If you are a California resident, you have additional rights, which are described in Section 6.

This Privacy Policy is part of, and incorporated into, our Terms of Service. It explains how we handle your information.

2. Information We Collect

2.1 Information You Provide

Account Information
When you create an account, we collect:

• Name
• Email address
• Phone number
• Shipping address
• Profile photo (optional)

Account Credentials
Auth0 processes the password and login credentials you use to access and secure your account.

Seller Information
If you register as a Seller, identity, tax, and bank-account information used for verification and payouts is collected and verified through our payment provider, Stripe, including:

• Business name and address
• Tax identification number (EIN or SSN)
• Bank account information for payouts
• Government-issued identification for verification

Transaction Information
When you make purchases or sales, we collect:

• Items purchased or sold
• Transaction amounts
• Payment method information (card details are processed and stored by Stripe, not by us)
• Shipping information

Communications
We collect information from your communications, including:

• Direct messages with other users
• In-show chat messages
• Customer support inquiries
• Reviews and ratings

Your messages on the Platform are not private or end-to-end encrypted. Platform staff and the relevant Store may access your messages and order communications for moderation, support, safety, and dispute-resolution purposes. See Section 4.1.

Promotions and Giveaways
When you enter a giveaway or promotion, we collect your entry and eligibility information and, if you win, the details needed to award and deliver the prize.

Surveys and Marketing
If you take part in a survey or sign up to receive updates, we collect your responses and your contact and communication preferences.

Content
We collect content you create or share, including:

• Product listings and descriptions
• Product photos
• Livestream video content

Storefront Live may record Shows and retain the recordings.

2.2 Information Collected Automatically

Device Information
We automatically collect:

• Device type and model
• Operating system and version
• Unique device identifiers
• IP address

Usage Information
We collect information about your use of the Platform:

• Pages and features accessed
• Shows viewed and duration
• Search queries
• Purchase history
• Interactions with other users

Location Information
We collect approximate location based on your IP address. We do not collect precise GPS location.

2.3 Information from Third Parties

Payment Processor
We receive transaction confirmation, identity/verification results, and fraud-prevention data from Stripe, our payment processor.

Shipping Carriers
We receive delivery status and tracking information from shipping carriers (e.g., UPS).

Age Confirmation
When you apply, we record your confirmation that you are at least 18, its source and time, and the Terms version you accept. On supported devices, this may include an age range declared through Apple, including the reported status, bounds and declaration method; Apple provides an age range, not your birth date. This is a declaration, not independent age verification. Existing accounts have an operator-attested age confirmation; no self-certification or Terms acceptance is attributed to those users.

Reports
When you report content or a user, we collect the target, reason and any note you provide. We obtain available message content and related evidence from Platform records for moderation, safety and dispute resolution.

3. How We Use Your Information

We use your information for the following purposes:

Providing Services

• Process transactions and payments
• Facilitate shipping and delivery
• Enable communication between Buyers and Sellers
• Provide customer support

Platform Operations, Security, and Safety

• Verify user identity and prevent fraud
• Monitor and enforce compliance with our Terms and policies
• Moderate content and resolve disputes
• Maintain the security, integrity, and safety of the Platform
• Improve and optimize the Platform

Automated Processing

• Filter chat messages and direct messages for blocked words when they are sent
• Classify buyer activity (for example, "Top Buyer") and generate engagement and performance analytics

Communications

• Send transactional notifications (order confirmations, shipping updates, return shipping instructions)
• Send service announcements and policy updates
• Send marketing or promotional messages, which you can opt out of at any time
• Respond to your inquiries

Analytics

• Analyze usage patterns and trends
• Measure Platform performance
• Conduct research and development

De-identified and Aggregated Data

• Create and use de-identified or aggregated information — which can no longer reasonably identify you — for analytics, research, reporting, and improving the Platform

Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and prevent harm
• Enforce our Terms of Service

We do not use your personal information or your Content to train third-party generative artificial-intelligence models.

4. How We Share Your Information

4.1 With Other Users and Stores

Buyers see:

• Seller's shop name and profile
• Seller's ratings and reviews
• Seller's shipping and return policies

Sellers and Stores see, for buyers who interact with or purchase from them:

• Buyer's name and shipping address (for fulfillment)
• Buyer's order and purchase history with that Store
• Buyer-level analytics, including spend, engagement, reviews, complaints, refunds, and open issues
• Buyer activity classification (for example, "Top Buyer")
• Messages and order communications exchanged with that Store

Platform administrators can access conversations, orders, and account information across the Platform for moderation, support, safety, and enforcement, and may communicate under an administrator identity.

4.2 With Service Providers

We share information with service providers who perform services on our behalf:

Moderation notifications sent to Slack contain a report pointer, not message text, names, notes or photos. Report evidence remains in Platform records.

4.3 For Legal Reasons

We may disclose information:

• To comply with applicable law or legal process
• To respond to lawful requests from government authorities
• To protect our rights, privacy, safety, or property
• To enforce our Terms of Service
• In connection with a merger, acquisition, or sale of assets

4.4 With Your Consent

We may share your information for purposes not described in this Policy only with your consent.

4.5 Sale or Sharing of Personal Information

We do not sell or "share" (as those terms are defined under the California Consumer Privacy Act, as amended) your personal information, and we do not use advertising tracking pixels. If we introduce advertising or any practice that constitutes a sale or sharing of personal information in the future, we will update this Privacy Policy and provide a "Do Not Sell or Share My Personal Information" choice and any other rights required by law before doing so.

5. Cookies and Tracking Technologies

5.1 Technologies Used

Mobile Applications
Our mobile apps use Auth0 for authentication, OneSignal for push notifications and Agora for livestreaming. See Section 4.2 for the information shared with these providers.

Website
Our website uses:

5.2 Analytics (Website)

We use Google Analytics, loaded through Google Tag Manager, to understand how people use our website — for example, which pages are visited and how long visits last. Google Analytics sets cookies on our website whose names begin with "_ga"; they hold a randomly generated identifier that recognizes a returning browser. Google Analytics collects the IP address assigned to you but not your name, and we do not combine it with information that identifies you. Google's use of this information is governed by the Google Analytics Terms of Service and the Google Privacy Policy. We keep website analytics data for the period set in our analytics configuration, up to 14 months.

We may add other analytics and diagnostics providers and will update this Policy when we do.

5.3 Mobile Applications

Our mobile apps process device and usage information as described in Section 2.2 and use the service providers listed in Section 4.2.

5.4 Advertising

We do not currently use advertising pixels or display third-party advertising. If that changes, we will update this Policy and provide the notice and choices required by law (see Section 4.5).

5.5 Your Choices

Mobile Apps: You can manage notification permissions through your device settings.

Website: You can manage cookie preferences through your browser settings. Disabling cookies may affect Platform functionality.

6. Your Privacy Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA").

6.1 Categories of Personal Information We Collect

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, phone number, postal address, account name, IP address, device identifiers
• Personal Information (Cal. Civ. Code § 1798.80): Name, address, telephone number, bank account number (Sellers only), payment card number (processed by Stripe)
• Commercial Information: Products purchased or sold, transaction history, order details
• Internet/Electronic Activity: Browsing history on the Platform, search queries, interactions with Platform features, app usage data
• Geolocation Data: Approximate location based on IP address (city/region level)
• Audio/Visual Information: Livestream video and audio, profile photos
• Professional Information: Business name and address, tax identification (Sellers only)
• Sensitive Personal Information: Social Security number, government-issued identification, and financial-account number with access credentials (Sellers only) — see Section 6.4
• Inferences and Profiling: Preferences, characteristics, buyer activity classification (e.g., "Top Buyer"), and behavior patterns derived from your Platform activity

6.2 Sources, Purposes, and Recipients

• Sources: directly from you; automatically from your devices; and from service providers (payment processor, shipping carriers) and Auth0. Age information includes your age confirmation and, where available, an age range declared through Apple.
• Business purposes: providing and improving services; processing transactions; shipping; customer support and dispute resolution; fraud prevention and security; legal compliance; and analytics. See Section 3.
• Categories of recipients: service providers; other users and Stores (as described in Section 4.1); and legal authorities when required by law.

6.3 Your Rights

As a California resident, you have the right to:

• Know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
• Delete personal information we collected from you, subject to legal exceptions (such as completing transactions and tax/legal retention).
• Correct inaccurate personal information.
• Non-Discrimination: we will not discriminate against you for exercising your rights.

We do not sell or "share" your personal information (as those terms are defined under the CCPA), and we do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age. You can also unsubscribe from marketing emails at any time using the link in any such email or by emailing reachout@storefrontlive.com. To exercise any of these rights, see Section 6.6.

6.4 Sensitive Personal Information

Some of the information we collect is "sensitive personal information" under the CCPA — specifically, a Seller's Social Security number, government-issued identification, and financial-account number together with the credentials needed to access the account. We collect this information only from Sellers, and we use and disclose it only to verify identity, process payouts, prevent fraud, and meet legal and tax obligations. We do not use sensitive personal information to infer characteristics about you. Because we limit our use to these purposes, the CCPA's right to limit the use of sensitive personal information does not apply, and we do not offer a separate "Limit the Use of My Sensitive Personal Information" option.

6.5 Automated Decisionmaking and Profiling

We use an automated word filter on chat messages and direct messages, and automated systems to classify buyer activity (e.g., "Top Buyer"). Refunds, account actions, and enforcement are decided by people, not automatically. Where the CCPA's automated decisionmaking technology rules grant you rights to access information about, or opt out of, automated decisionmaking, you may exercise those rights as described in Section 6.6.

6.6 How to Exercise Your Rights

To exercise your privacy rights, email privacy@storefrontlive.com. Account deletion is also available through the Buyer app settings.

We will verify your identity before processing your request and will respond within 45 days, with the option to extend by an additional 45 days if necessary. You may designate an authorized agent to submit requests on your behalf; we will require verification of both your identity and the agent's authorization.

7. Data Retention

We keep personal information for as long as needed to provide the Platform and to meet our legal, tax, and dispute-resolution obligations. In general:

Identity, tax, and bank-account information collected for Seller verification is held by Stripe under its own retention practices and is not separately retained by us after verification.

7.1 Retention After Account Deletion

When your deletion request is accepted, you are signed out and account access ends. An open payment hold does not prevent a deletion request. Deletion completes automatically when the open hold settles. Your account data is then deleted or anonymized promptly, with the exceptions listed below, and saved payment methods are detached.

For legal, tax, safety and dispute-resolution reasons, the following are retained:

• Orders with their shipping snapshot
• Tax records
• Payment, refund, dispute, and payout records
• Parcel and label records
• Order issues you reported
• Reports and their evidence
• Reviews you wrote (anonymized, shown as from "Deleted user")
• Messages sent to stores (shown as from "Deleted user")
• Messages you sent through our contact form
• Chat messages (anonymized); other users' messages that mention your @username are not changed
• The Stripe customer until the dispute window ends
• Any email-suppression entry
• The application notice already posted to the team's Slack
• The emptied account row

Residual copies may remain in secure backups until those backups are deleted; automated database backups are deleted after at most 7 days.

Reports and their evidence may remain under legal hold. Transaction and tax records are retained for legal compliance as described above. A deletion request submitted under Section 6 will be honored subject to legal exceptions.

7.2 Legal Holds

We may retain information longer than stated if required by law, legal proceeding, or government request. After the retention period, data is permanently deleted or anonymized.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect your personal information.

No system is completely secure. We cannot guarantee the absolute security of your information. Help protect your account by using a strong, unique password and notifying us promptly at reachout@storefrontlive.com if you suspect any unauthorized use.

9. Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects.

10. Children's Privacy

You must be at least 18 years of age to access or use the Platform (see Terms of Service Section 3). Individuals under 18 may not use the Platform, including through an adult's account. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected such information, we will delete it promptly.

11. International Users

The Platform is operated in the United States and intended for U.S. users only. If you access the Platform from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date, and may also notify you by email. The "Last Updated" date at the top indicates when it was last revised. Continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

Storefront Live, Inc.
555 West 25th Street, Suite 2, New York, NY 10001

Privacy Inquiries: privacy@storefrontlive.com
General Support: reachout@storefrontlive.com

Website Analytics — How This Site Is Tagged

This note supplements Section 5 (Cookies and Tracking Technologies) with the
specifics of this website. It describes what we do today and does not change
the policy above.

Where analytics run

Analytics run on our public marketing pages only — For Shoppers (/), For
Sellers (/sellers), Contact (/contact), and our legal and policy pages
(/terms, /privacy, /community-guidelines, /giveaway-rules, /buyer-protection,
and /ip-policy). Signed-in areas of the site,
including your account and the seller and admin tools, are not tagged, and we
do not record page views there.

What we use

We load Google Analytics 4 through Google Tag Manager. Google Analytics sets
first-party cookies in your browser — their names begin with "_ga" — holding
a randomly generated identifier. That identifier lets us tell one visit from
another and recognise a returning browser; it is not linked to your name or
account.

What it collects

For each marketing page you open we record the page address and title, the
page that referred you, your browser and device type, and an approximate
(city-level) location derived from your IP address. Outbound-click measurement
helps us understand which links visitors follow to external destinations.
An outbound click does not tell us whether a signup or purchase was completed.
Analytics data is retained as described in Section 7.

Consent defaults

On every page load we set Google Consent Mode v2 defaults before any tag runs:
advertising storage, advertising user data, and ad personalization are
denied, and analytics storage is granted. We run no advertising,
remarketing, or ad-conversion tags (see Section 5.4).

Your choices

You can block or delete cookies in your browser settings, or install Google's
Google Analytics opt-out browser add-on.
Blocking analytics cookies does not affect your ability to use the site.