Privacy Policy

Last updated: February 18, 2026

Introduction

Live Stream Auction ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and how we protect it when merchants and customers use our Shopify application.

Information We Collect

When you use Live Stream Auction, we may collect:

• Store and app data: Shopify store domain, OAuth/session tokens, and app configuration needed to operate the app.
• Event and product data: Event settings, product and variant IDs, prices, auction status, and timing configuration.
• Bid and checkout data: Customer email, customer ID (when available), bid amounts, winning status, and checkout status.
• Security and anti-abuse data: A one-way hashed IP value for anti-spam controls and abuse prevention, plus basic request metadata for rate limiting.
• Order and webhook data: Shopify order and webhook payload data used to reconcile auction outcomes and compliance requests.

How We Use Your Information

We use the collected information to:

• Provide and maintain the Live Stream Auction service
• Process and manage live auction events
• Facilitate bidding and checkout processes
• Send real-time in-app auction status updates
• Improve our services
• Detect abuse, enforce auction rules, and protect service integrity
• Meet legal and platform compliance obligations

Data Storage and Security

Data is processed and stored using service providers including Fly.io (hosting), PostgreSQL (database), Shopify platform services, and Ably (real-time messaging). We implement reasonable technical and organizational safeguards designed to protect data against unauthorized access, alteration, disclosure, or destruction.

Data Sharing

We do not sell personal information. We share data only as needed to provide the service, including with:

• Shopify platform APIs and mandatory webhooks
• Infrastructure and messaging providers (such as Fly.io, PostgreSQL, and Ably)
• Streaming provider embeds (for example, Twitch) when loaded in the storefront
• Legal authorities when required by law

International Transfers

Your information may be processed in countries other than your own, depending on where our and our service providers' systems operate.

Data Retention

We retain merchant and auction data while the app is installed to provide service. When the app is uninstalled, associated merchant data is deleted through Shopify's uninstall webhook flow. Customer privacy and shop redact requests are handled through Shopify compliance webhooks. Limited residual data may remain temporarily in backup or log systems, then be removed according to provider retention windows.

Your Rights

You have the right to:

• Request access to your personal data
• Request correction of your personal data
• Request deletion of your personal data
• Uninstall the app at any time, which will delete all your data

GDPR Compliance

We support GDPR and Shopify privacy requirements. Customer data deletion requests are processed automatically through Shopify's mandatory webhooks.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: colin@aquaaquatiks.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.