Privacy Policy

StoresOnLive ("we", "us") operates StoresOnLive, a Shopify application for live commerce. This policy describes how we handle personal data across our services.

Merchants decide how their customers' data is used for their stores. We process that data on their behalf to provide the service and follow their instructions. We are responsible for our own merchant account, billing, and service-security data processing.

Merchant account and store data — name, email, account identifier, shop domain, store details, products, inventory, orders, and the Shopify connection data needed to operate the service.

Customer and selling activity — customer name, email, phone number, Shopify customer identifier, address information used for customer management or fulfillment, purchase and order history, live-session participation, chat messages, bids, offers, giveaway entries and claims, rewards, and checkout or settlement status. Payments are handled by Shopify and its payment providers; we do not collect full payment card numbers.

Content you provide — product photos and videos, live audio and video, replay recordings, show details, support messages, and other content you choose to create or upload.

Device and service data — device and browser identifiers, IP address, push-notification token, product and feature interactions, other usage data, crash data, performance data, server logs, and other diagnostics needed to run, secure, and improve the service.

We use personal data to sign users in, connect Shopify stores, create and manage products and shows, stream and replay live video, run chat and selling actions, support checkout and order follow-up, manage merchant customer records and contact preferences, run giveaways and rewards, send requested service alerts and marketing messages where customers have consented, provide support, detect abuse, diagnose failures, improve performance, and meet legal obligations.

Operational data is associated with the relevant merchant account and Shopify store so the service works across sessions and devices. Diagnostics may be associated with an opaque account identifier so we can investigate failures. We use data only for these service, security, support, analytics, and legal purposes. We do not use mobile-app data for third-party advertising.

We may share data with:

· Shopify — as required to connect stores, products, customers, orders, billing, and checkout
· Service providers — authentication, databases, storage, video delivery, push notifications, crash reporting, hosting, email, payments, and AI processing when a feature needs it
· Merchants — customer data is shared with the relevant merchant
· Legal — when required by law or legal process
· Business transfers — in connection with mergers, acquisitions, or asset sales

Our main service providers include Shopify for store and commerce operations, Supabase for authentication and data services, Amazon Web Services for live video and infrastructure, Apple and Expo for iPhone distribution and push delivery, Sentry for crash, performance, and other diagnostics, Resend for email delivery, and PostHog for product analytics. We require providers to handle data for the services they supply.

We do not sell personal data or share it for cross-company targeted advertising.

The iPhone app asks for camera and microphone access when you capture products or host a live show, photo access when you choose or save media, notifications when you turn on selling alerts, and Face ID or device authentication when you enable device lock. You can change these permissions in iOS Settings.

Our website uses cookies and similar technology for sign-in, preferences, security, and service operation. Optional shopper analytics require confirmed consent; withdrawing that consent stops optional analytics collection. The iPhone app does not include a third-party advertising SDK and we do not track people across other companies' apps or websites for advertising.

We keep data as long as reasonably necessary to provide the service, secure accounts, resolve disputes, and meet legal obligations, then delete or anonymize it. Uninstalling the iPhone app does not itself delete an account. Merchants can delete their account from Profile → Security → Delete account. We also process shop-data deletion when required by Shopify.

We clear completed Shopify customer and order webhook copies after 30 days. We also clear copied recipient emails, provider responses, and error text from successful or skipped checkout-delivery attempts after 30 days. Delivery status and dates, customer records, and order history follow the service retention purposes above; they are not removed by this troubleshooting-data cleanup.

We protect data with encryption in transit and at rest, access controls, and security monitoring. No system is perfectly secure, we cannot guarantee absolute security.

Depending on your location, you may request access, correction, deletion, restriction, portability, or object to processing of your data. Contact hello@storesonlive.com we respond within 30 days.

Our service providers may process data outside your country, where privacy laws may differ. We require safeguards for these transfers where applicable law requires them, such as approved contractual clauses. Contact us for information about the safeguards relevant to your data.

We do not direct services to individuals under 16 or knowingly collect their data.

We may update this policy and will notify merchants of material changes. Continued use constitutes acceptance.

StoresOnLive — hello@storesonlive.com