Liveshops Privacy Policy

1. Who We Are and How to Contact Us

Liveshops is operated by Liveshops, a company organized under the laws of [JURISDICTION], with its registered address at [COMPANY ADDRESS].

For any privacy-related questions, requests, or complaints, you can reach us at:

• Email: privacy@liveshops.com
• Postal mail: [COMPANY ADDRESS], Attn: Privacy
• Data Protection Officer (if applicable): dpo@liveshops.com

2. Scope of This Policy

This Policy applies to:

• The end-user web application at liveshops.com
• The internal admin application at admin.liveshops.com
• Any live channel sessions, chat, video, and audio streamed through the Service
• All communications between you and us in connection with the Service

This Policy does not apply to third-party websites, applications, or services that may be linked from or integrated with the Service. Those third parties operate under their own privacy policies.

3. Information We Collect

We collect information in three ways: information you give us directly, information generated through your use of the Service, and information we receive from third parties.

3.1 Information You Provide

• Account information: name, email address, and password when you register or when an administrator creates an account on your behalf. Email addresses are normalized and treated case-insensitively.
• Channel information: channel names, scheduled times, and any descriptive content you enter when creating a channel.
• Invitation data: the identities of users you invite to a channel and the roles (broadcaster or viewer) you assign them.
• Live broadcast content: if you join a channel as a broadcaster, your camera video and microphone audio are transmitted live to other participants in that channel for the duration of the session.
• Chat messages:the text of any messages you send in a channel’s chat, up to 1000 characters per message.
• Support communications: if you contact us, we collect the contents of your message and any attachments.

3.2 Information Generated Through Use

• Session and authentication data: session tokens, sign-in timestamps, sign-out timestamps, and a record of whether a session is an administrative impersonation session.
• Device and connection data: IP address, user-agent string, browser type, operating system, and approximate location derived from IP.
• Activity data: channels created, channels joined, invites sent and received, broadcaster status changes, mute and removal events, and chat participation.
• Diagnostic data: error logs, performance metrics, and connection-quality signals from the live-streaming infrastructure.

3.3 Information from Third Parties

If you sign in or connect through a third-party identity provider (such as Facebook Login), we receive the basic profile information that provider shares with us, in accordance with the permissions you grant. See Section 9 for details on Facebook integrations specifically.

3.4 Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service against fraud and abuse, and measure aggregate usage. You can control cookies through your browser settings; disabling them may impair core Service functionality such as staying signed in.

4. How We Use Information

We use the information described above for the following purposes:

• Providing the Service: authenticating you, routing live audio and video between channel participants, delivering chat messages, managing invitations, and rendering the channel experience.
• Channel administration: enabling moderators to manage their channels (muting, removing, revoking invites) and enabling platform administrators to oversee Service health, force-end channels, and moderate abuse.
• Communications: sending you transactional messages such as invitation notifications, password resets, and security alerts.
• Safety and integrity: detecting and preventing fraud, abuse, harassment, spam, and unauthorized access; enforcing our Terms of Service; and responding to reports of misconduct.
• Service improvement: analyzing aggregate usage to debug issues and improve features.
• Legal compliance: complying with applicable laws, regulations, court orders, and lawful requests from public authorities.

We do not sell your personal information, and we do not use your live broadcast content or chat messages to train artificial intelligence models without your explicit consent.

5. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract — to provide the Service you have signed up for.
• Legitimate interests — to secure the Service, prevent abuse, communicate with you about the Service, and improve our product, balanced against your rights and freedoms.
• Consent— for optional features that require it (for example, certain cookies). You can withdraw consent at any time.
• Legal obligation — when processing is required by applicable law.

6. How Information Is Shared

6.1 With Other Users of the Service

Liveshops is, by design, a multi-user live broadcasting product. The following information is visible to other users:

• Your name and account avatar are visible to anyone who can see a channel you participate in.
• Your live video and audio, if you broadcast, are streamed to all participants in that channel, including any signed-in user who joins as a public viewer while the channel is live.
• Your chat messages are visible to all participants in that channel for the duration of the channel.
• Channel and invitation activity is visible to the channel’s moderator and, in some cases, to platform administrators.

Because any signed-in user can join a channel as a public viewer while it is live, you should treat anything you broadcast or type in chat as publicly viewable to the platform user base unless and until private/unlisted channels are introduced.

6.2 With Service Providers

We share information with vendors that help us operate the Service, including:

• Hosting and cloud infrastructure providers — to run our servers and store data.
• Real-time communications providers (e.g., LiveKit or equivalent) — to deliver live audio and video between participants.
• Email delivery providers — to send transactional emails.
• Error monitoring and analytics providers — to diagnose issues and measure usage.

These providers process information only on our instructions and under contractual confidentiality and security obligations.

6.3 With Administrators

If you are part of a deployment overseen by an administrator (for example, an enterprise tenant), administrators may have access to your account details, session activity, and channel activity through the admin application. Administrators may also impersonate user sessions for support purposes; impersonation events are logged.

6.4 For Legal and Safety Reasons

We may disclose information if we believe in good faith that disclosure is necessary to:

• comply with applicable law, regulation, legal process, or governmental request;
• enforce our Terms of Service;
• detect, prevent, or address fraud, security, or technical issues;
• protect against harm to the rights, property, or safety of Liveshops, our users, or the public.

6.5 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

7. Live Broadcasts and Chat — Special Notice

Because the core of the Service is live audio, video, and text broadcasting, please note:

• Once you go on-air as a broadcaster, your camera feed and microphone audio are transmitted in real time to everyone in the channel, including any signed-in user who joins as a public viewer.
• Chat messages are persisted while the channel exists and a small number of recent messages are backfilled to participants who join later.
• We do not record live audio or video by default. If recording is ever introduced, you will be notified before any recording begins.
• Other participants may, in violation of our Terms, attempt to capture, screenshot, or rebroadcast content. We cannot fully control such activity. Do not broadcast anything you would not want re-shared.

8. Data Retention

We retain different categories of information for different periods:

• Account information — for as long as your account is active, plus a reasonable period afterward to comply with legal obligations and resolve disputes.
• Channel records (channel name, status, timestamps, moderator) — retained indefinitely for product history and admin oversight unless you request deletion.
• Invitation records — retained for the lifetime of the related channel plus a reasonable archival period.
• Chat messages— retained while the channel exists and for a reasonable archival period afterward; ended channels become read-only and chat closes.
• Session logs and diagnostic data — typically retained for up to [12 months] then deleted or anonymized.
• Live audio and video — not recorded or stored by default; transmitted only in real time.

When we no longer need information, we delete or anonymize it.

9. Facebook and Third-Party Integrations

If we offer the ability to sign in with Facebook Login or to connect a Facebook account, the following applies:

• We request only the minimum permissions needed (typically your name, email, and profile picture).
• We use Facebook-provided information solely to create and authenticate your Liveshops account and to populate your profile.
• We do not post to Facebook on your behalf, and we do not share your Facebook data with third parties except as described in Section 6.
• You can disconnect the Facebook integration at any time from your Liveshops account settings or from your Facebook app settings at facebook.com/settings → Apps and Websites.
• Information received from Facebook is handled in accordance with Meta’s Platform Terms and Developer Policies.

If we integrate with other third-party platforms in the future, we will update this Policy and disclose the data flows.

10. Your Rights and Choices

Subject to applicable law, you have the following rights with respect to your personal information:

• Access— request a copy of the personal information we hold about you.
• Correction— ask us to correct inaccurate or incomplete data.
• Deletion— ask us to delete your personal information (see Section 11).
• Portability— request your data in a portable format.
• Restriction or objection — ask us to restrict or stop certain processing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Lodge a complaint — with your local data protection authority.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect, the right to opt out of “sale” or “sharing” (we do not sell or share your information as those terms are commonly understood), and the right not to be discriminated against for exercising your rights.

To exercise any of these rights, contact us at privacy@liveshops.com. We will respond within the timeframes required by applicable law.

11. Data Deletion Requests

You may request deletion of your Liveshops account and associated personal data at any time. There are two ways to do this:

1. In-product: sign in and follow the account deletion option in your account settings, where available.
2. By email: send a deletion request to privacy@liveshops.com from the email address associated with your account, with the subject line “Data Deletion Request.”

For requests originating from a Facebook-connected account, you may also submit a deletion request via the data deletion callback URL we have registered with Meta:

• Data deletion request URL: https://liveshops.com/data-deletion

We will confirm receipt within a reasonable period and complete deletion within 30 days, except where we are required by law to retain certain information (for example, financial records or fraud-prevention logs). Channel content you posted (such as chat messages and channel metadata) may persist in archived form where it is necessary to preserve the historical integrity of channels in which other users participated; on request we will anonymize your association with that content.

12. Children’s Privacy

The Service is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction, such as 16 in parts of the EEA). We do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us at privacy@liveshops.com and we will take steps to delete it.

13. International Data Transfers

We may process and store information in countries other than the one in which you reside, including the United States. When we transfer personal data out of the EEA, the United Kingdom, or other jurisdictions with data export restrictions, we use appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms.

14. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls, and ongoing security monitoring. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

15. Account Sessions and Administrative Access

We track active session tokens, including the user, IP address, user-agent, creation time, and expiration time. Platform administrators can view this session information and, where necessary for support, may impersonate user sessions; impersonation events are logged and auditable. We use this information solely to operate, secure, and support the Service.

16. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email (to the address associated with your account) or by a prominent notice in the Service before the change takes effect. The “Last updated” date at the top of this Policy reflects the most recent revision.

17. Contact

Questions, concerns, or complaints about this Policy or our privacy practices?

If you are in the EEA or UK and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.