Privacy Policy
Last updated October 14, 2026
This policy explains what information LiveStreamPro collects, how we use it, how long we keep it, and the choices and rights you have. We keep it in plain language on purpose. It is effective as of the date shown above and is being finalized with our legal counsel.
1. Who we are
LiveStreamPro is software that helps live sellers run their shows: capturing sales, forming orders, printing labels, and keeping a back office across live marketplaces. This policy covers our marketing site (livestreampro.ai) and the LiveStreamPro application. "We", "us", and "our" refer to LiveStreamPro; "you" refers to the person or business using the service. For the purposes of GDPR and UK data-protection law, LiveStreamPro is the controller of the personal information described here.
2. Information we collect
We collect only what we need to run the service for you:
- Account details: your name, email, phone number, and profile photo when you create an account or update your profile.
- Billing information: your plan, subscription status, and invoices. Payments are processed by Stripe; we never see or store your full card number.
- Connected marketplace data: when you connect a marketplace account (such as Whatnot), we sync the shows, orders, buyers, and shipment information needed to run your back office, using the permissions you grant.
- Newsletter & waitlist details: if you subscribe to our newsletter or join a waitlist, we collect your email address, your name (if you give it), and how you found us.
- Lia chat: our marketing-site assistant, Lia, works without an account. If you use it, we process the messages you send so it can answer, and we run a bot-protection check and rate limits to keep it available. We don't require you to sign in to chat.
- Visits to our website: which pages of livestreampro.ai are viewed, the site or campaign link a visit came from, the kind of device, and roughly where in the world the visitor is. See Visits to our website below for exactly what, and how to refuse.
- Being signed in: While you are signed in, we record that you are using the app: the kind of page you are on (never what you type or the records you open), your device and browser, and your approximate location to city level. We use it to support you and keep the service secure, and delete it after 13 months.
- Product usage: how you use the app (pages visited, features used, device and browser information, IP address, and log data) so we can operate, secure, and improve it.
- Support communications: messages you send us through the site, chat, or contact form, and the tickets they create.
3. Browser extension
The LiveStreamPro browser extension runs in your own browser, on the pages of the live marketplace(s) it supports (today, Whatnot). It's built to power your own LiveStreamPro account — syncing your shows, automations, and label printing:
- What it reads. On a supported marketplace page, it reads the listing, order, and show data you can already see on screen — the same information the marketplace is showing you in that tab.
- Where it sends it. That data is sent only to LiveStreamPro's own servers, over your signed-in LiveStreamPro session, so it can appear in your back office, automations, and printing. We don't send it anywhere else.
- Your shows, by default. Out of the box it records the shows you host. Shows you're only watching aren't recorded, and nothing about them is added to your business data.
- Market research, where it's granted. Some sellers want to study the public side of the market — what's selling, at what price, in front of how many people. That works only through a viewer permission granted for your account, per specific host — there is no blanket switch and no default. A viewer permission captures only the public side of that host's shows (what any viewer of a public show can see — never a seller's private orders, payouts, or customer records), it never exposes your own data to anyone, and everything it captures is kept in a separate Competitors area so it can't mix into your own sales figures or analytics. Revoking the permission stops the capture and hides that data again.
- What stays on your device. Some checks, like warning you if the same show is already open in another tab, run entirely locally in your browser and are never sent anywhere.
- What it doesn't do. It doesn't read your general browsing history, and it doesn't collect data from sites outside the marketplaces it supports.
- Same rules as everywhere else. Data the extension collects follows the exact same rules as the rest of this policy. We don't sell it and we don't share it for advertising.
- What it reports about itself. The browser extension reports that it is connected, its version and the marketplace it is attached to; it does not report the pages you browse.
- Turning it off. Uninstalling the extension stops its data collection immediately.
The data disclosures on the extension's Chrome Web Store listing match this policy.
4. Visits to our website
We count visits to livestreampro.ai so we know which pages and which campaigns are working. You don't need an account for any of this, and you decide how much of it applies to you.
- What we always count. That a page was viewed: which page, when, the website or campaign link the visit came from, and whether it was a phone, tablet or computer. That is all. For a visitor who has not allowed more, we make no ID of any kind, on your device or on our servers, we do not look up where you are, and nothing connects one of your page views to another. We never store your IP address.
- What we add if you allow us to remember your browser. A random ID saved in your browser, so a return visit is recognised as the same browser; your visit as one session; the full address of the page that linked to you; the ad click ID, if you arrived from an ad; which of our marked buttons you press (its words, the page, and where it leads: for a link to another site, only that site's name); and your country, region and city (never a street address). If you later create an account or sign in from the same browser, we connect that ID to your account, so the account's history includes the visits that led to it.
- Google Analytics and our affiliate tool, only after a yes. Google Analytics (which sets its own cookies and receives your page views) and Refgrow (which remembers an affiliate's link so they are credited if you sign up) are run by other companies. We load them only after you press Accept, wherever in the world you are. Until then, and if you decline, neither is loaded and nothing is sent to either.
- Who is asked about what. Everyone is asked once. A bar at the bottom of the page asks once, with Accept and Decline side by side. Decline turns off both items above. If your browser appears to be in the European Union, the European Economic Area, the United Kingdom or Switzerland, nothing in them happens until you press Accept, and until you answer we treat it as a no. Elsewhere, we remember your browser until you decline, and Google Analytics and the affiliate tool still wait for Accept. If we change what we ask for, we ask again, and a no you gave before stays in force until you answer.
- How to refuse or change your mind. Use the Privacy choices link at the bottom of any page, at any time. It shows the bar again with your current answer marked. Pressing Decline removes the ID, the visit details and Lia's cookies from your browser straight away, and offers to delete what we recorded under that ID from our servers too: the page views, the button presses, the visit and its link to an account. Later you can still ask us to delete them through the contact page; otherwise they are removed after 13 months. A no you give in one tab applies in your other open tabs as soon as you return to them.
- Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat that as Decline, everywhere, without asking, and we show you a short confirmation that we have done so.
- One answer for the website and the app. Your answer is kept in one cookie,
lsp_consent, that livestreampro.ai and app.livestreampro.ai both read, so you are asked once, not once on each. It holds your answer, when you gave it and which version of this notice it answers, and is kept for 13 months, after which we ask again. - The servers' own log. The servers that deliver this website write one line for each request: the page, the time, the answer, the site that linked to it and the name the browser gives itself. Never your IP address. We read it only to count the search engines and AI programs that fetch our pages; nothing from it is kept about a person, and the log itself is deleted after three days.
- How long we keep it. Individual page-view records are deleted after 13 months.
5. How we use information
We use the information above to:
- Provide, maintain, and secure the service, and turn your live sales into orders, labels, and reports.
- Handle billing, subscriptions, and account management.
- Send the newsletter and product updates you asked for, and respond to your questions and support requests.
- Detect, prevent, and address fraud, abuse, and security issues, including defending against payment disputes using our own transaction and usage records.
- Improve our features and understand what's working.
- Comply with our legal, tax, and accounting obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. No company that receives anything about you from our pages or our servers uses it for advertising: we run no advertising pixels, and the two measurement tools we do use (Google Analytics and Refgrow) load only after you accept them.
6. Our legal bases (EU/UK)
If you are in the UK or the European Economic Area, we rely on these legal bases to process your personal information:
- Performing our contract with you: to run your account, sync your marketplace data, and bill your subscription.
- Your consent: for the newsletter and non-essential cookies. You can withdraw consent at any time.
- Our legitimate interests: to secure the service, prevent abuse, defend against payment disputes, and improve the product, balanced against your rights.
- Legal obligation: to keep billing and tax records for the periods the law requires.
8. Cookies and browser storage
We keep what we store in your browser small and mostly first-party. We don't use advertising cookies. This table is produced from the same list our automated tests check the code against, so it is complete: the website's and the app's.
On our website (livestreampro.ai)
| Name | What it's for | When, and for how long |
|---|---|---|
| lsp_consentLiveStreamPro, cookie | Your answer to the cookie notice, when you gave it and which version of the notice it answers, so we ask again only when the notice changes. The app reads the same cookie, so you are asked once for both. Your browser sends it with requests to our own servers, which do not read it; it never goes to another company. | When: Always: needed for the site to work, or the record of your own choice.Lasts: 13 months |
| lsp_internal_v1LiveStreamPro, browser storage | Marks a browser as belonging to our own team, so its visits are left out of our numbers. Only set when someone opens the site with a special link; it is the same value on every browser that has it. | When: Only when you use the thing that needs it.Lasts: until it is cleared |
| lsp_anon_v1LiveStreamPro, browser storage | A random ID that lets us recognise a return visit. | When: Only if we may remember your browser; removed if you press Decline.Lasts: until you press Decline or clear it |
| lsp_attr_v2LiveStreamPro, browser storage | The website or campaign link you first came from, so that a later sign-up can be credited to it. | When: Only if we may remember your browser; removed if you press Decline.Lasts: 30 days |
| lsp_visit_v1LiveStreamPro, tab storage | Your current visit, so its page views count as one visit. | When: Only if we may remember your browser; removed if you press Decline.Lasts: until you close the tab |
| lsp_liaLiveStreamPro, cookie | Your first name, so Lia can greet you by name when you come back. Only if you give your name when you subscribe. | When: Only if we may remember your browser; removed if you press Decline.Lasts: 180 days |
| lsp_lia_teaserLiveStreamPro, cookie | That you've already seen or used Lia, so the same teaser isn't shown again. | When: Only if we may remember your browser; removed if you press Decline.Lasts: 7 days |
| lsp_lia_captureLiveStreamPro, cookie | That Lia's "Keep me posted" card has been offered, so it isn't offered again that week. | When: Only if we may remember your browser; removed if you press Decline.Lasts: 7 days |
| lia-soundLiveStreamPro, browser storage | Whether you turned Lia's sound off. Only written when you press her sound button or start talking to her. | When: Only when you use the thing that needs it.Lasts: until you clear it |
| _ga, _ga_*Google Analytics, cookie | Set by Google Analytics to tell visitors apart. | When: Only after you press Accept; removed if you take that back.Lasts: up to 2 years |
| refgrow_*Refgrow, cookie | Set by Refgrow (a cookie and browser storage) to remember the affiliate link you arrived through. | When: Only after you press Accept; removed if you take that back.Lasts: 30 days |
In the app (app.livestreampro.ai)
| Name | What it's for | When, and for how long |
|---|---|---|
| lsp_consentLiveStreamPro, cookie | Your answer to the cookie notice, the same cookie the website reads, so you are asked once for both. | When: Always: needed for the site to work, or the record of your own choice.Lasts: 13 months |
| lsp_device_idLiveStreamPro, cookie | Identifies this browser as one device, so a sign-in, its second step and your printers belong to the same device. Set when you open the app, before you sign in. It is set for the domain the app shares with our own servers, so your browser sends it to them with each request; our visit counting does not read it. | When: Always: needed for the site to work, or the record of your own choice.Lasts: 400 days, renewed while you use the app |
| lsp_device_id_previousLiveStreamPro, browser storage | The device id this browser carried before it took over our extension's, kept only until our server has been told of the change. | When: Always: needed for the site to work, or the record of your own choice.Lasts: until the next sign-in |
| lsp.presence.visit.v1LiveStreamPro, tab storage | Which visit to the app this tab is on, so a reload is not counted as another visit. Kept only while you are signed in; it is part of the record of being signed in. | When: Always: needed for the site to work, or the record of your own choice.Lasts: until you sign out or close the tab |
| lsp_internal_v1LiveStreamPro, browser storage | Marks a browser as belonging to our own team, as on the website. Only set with a special link. | When: Only when you use the thing that needs it.Lasts: until it is cleared |
| lsp_anon_v1LiveStreamPro, browser storage | A random ID that ties what a browser did before signing up to the account it then created. | When: Only if we may remember your browser; removed if you press Decline.Lasts: until you press Decline or clear it |
| lsp_visit_v1LiveStreamPro, tab storage | Your current visit to the app. | When: Only if we may remember your browser; removed if you press Decline.Lasts: until you close the tab |
| lsp_first_touch_v1LiveStreamPro, browser storage | The campaign link you first arrived through, when you came straight to the app, so that a later sign-up can be credited to it. | When: Only if we may remember your browser; removed if you press Decline.Lasts: 30 days |
| lsp_landing_reported_v1LiveStreamPro, tab storage | That this visit's arrival from a campaign link has been counted, so a reload does not count it twice. | When: Only if we may remember your browser; removed if you press Decline.Lasts: until you close the tab |
| lsp.oauth.signupAttributionLiveStreamPro, tab storage | The campaign a sign-up came from, held while you are away at Google to sign up, so it is still there when you come back. | When: Only if we may remember your browser; removed if you press Decline.Lasts: until the sign-up finishes or you close the tab |
| _ga, _ga_*Google Analytics, cookie | Set by Google Analytics to tell visitors apart. | When: Only after you press Accept; removed if you take that back.Lasts: up to 2 years |
| refgrow_*Refgrow, cookie | Set by Refgrow (a cookie and browser storage) to remember the affiliate link you arrived through. | When: Only after you press Accept; removed if you take that back.Lasts: 30 days |
Once you sign in, the app also keeps what it needs to work in your browser: your session, which organisation you are in, and settings you change (your theme, a panel you closed, a draft). None of that is used to measure you and none of it is sent to another company, so it is not part of Privacy choices.
Other companies your browser contacts. A page of ours contacts another company only in these cases:
| Company | What it receives, and why | When |
|---|---|---|
| Google Analytics | Which pages you view on the website, and which screens you open in the app (the kind of screen, never what is on it), with your IP address and browser details as any request carries them.Why: Measuring how the website and the app are used. | When: Only after you press Accept; removed if you take that back |
| Refgrow | The affiliate link you arrived through and the page you landed on, with your IP address and browser details as any request carries them. Separately, when an account is created from an affiliate link, our server tells Refgrow so the affiliate is credited.Why: Crediting the affiliate who referred you. | When: Only after you press Accept; removed if you take that back |
| Cloudflare (Turnstile) | Your IP address and browser details, to decide whether a person or a program is submitting.Why: Protecting our forms and Lia from spam and abuse. Loaded when you start Lia or open a form that needs it. | When: Only when you use the thing that needs it |
| YouTube, Vimeo and Loom | Your IP address and browser details, and what you play. Until you press play there is only a cover from our own servers; the player loads on the press.Why: Playing a video you pressed play on: a lesson in the academy, a set-up guide in the app. | When: Only when you use the thing that needs it |
| LiveAvatar (HeyGen) and OpenAI | Your IP address and browser details when Lia's picture is shown, and your voice or the video session itself when you talk to her by voice or video.Why: Lia's face and voice. On the website, only after you press past her start notice; in the app, when her panel is open. | When: Only when you use the thing that needs it |
| OpenFreeMap | The IP address and browser details of a member of our own team, and which part of the map they are looking at. Nothing about a visitor or a customer: the marks on the map are drawn in the browser from our own servers' answers.Why: The map on a screen only our own team can open. A customer's or a visitor's browser never contacts it. | When: Only when you use the thing that needs it |
| Stripe | Your card details, typed into a form that Stripe serves, with your IP address and browser details.Why: Taking a payment. Loaded on the checkout screen. | When: Only when you use the thing that needs it |
| Whatnot | Your IP address and browser details, when the app shows pictures of your own listings that Whatnot hosts.Why: Showing your listings once you have connected your Whatnot account. | When: Only when you use the thing that needs it |
Everything else on our pages, the fonts included, comes from our own servers.
You can clear or block cookies in your browser settings. Blocking Lia's cookies just means she won't recognize you between visits; blocking the bot check may stop our forms and chat from working.
9. How we protect information
We use technical and organizational safeguards (including encryption in transit, access controls, and encrypted storage for sensitive credentials) to protect your information. No system is perfectly secure, but we work to protect your data and to respond quickly if something goes wrong.
10. How long we keep data
We keep personal information only for as long as we actually need it for the purpose we collected it, then we delete it or irreversibly anonymize it. We don't use a single blanket period; we set a period for each category. This is our current schedule:
| Category | What we keep | How long | Why we keep it |
|---|---|---|---|
| Account & profile | Name, email, phone, profile photo, login records | While your account is active; deleted or de-identified within 90 days of closure | To run your account under our contract with you |
| Newsletter & waitlist | Email, name, and how you found us | Until you unsubscribe or ask us to remove you | Consent: you can withdraw it any time |
| Marketplace back-office data | Shows, orders, buyers, and shipments synced from connected marketplaces | While your account is active; removed on closure or sooner on request | To provide your back office and history under our contract |
| Billing & invoices | Plan, subscription status, invoices (never your full card number) | Up to 7 years | Legal obligation: tax, accounting, and audit rules require it, so these are kept even after you close your account |
| Support tickets & messages | Your messages to us and the tickets they create | Up to 3 years after they're resolved; the personal parts are erased when you ask us to forget you (see below) | To provide support and keep a record of what we agreed |
| Security, access & audit logs | Log data, IP address, device/browser details | Up to 12 months | Security, fraud prevention, and payment-dispute defense (a legitimate interest) |
| Website visits | Page views on livestreampro.ai, where each visit came from, device type and location | 13 months | To understand which pages and campaigns work (consent where the law requires it, otherwise a legitimate interest) |
| Cookies | The first-party cookies in the table above | 7–180 days (see the cookie table) | Recognition and bot protection |
When you ask us to forget you. Our support system erases these at once: what you and our team wrote in your messages and chats, your name, email address and phone number on your tickets, ticket subjects, attachments, the AI's summary and draft replies, satisfaction comments, and the customer record we filed you under. The ticket stays as an anonymous entry (its number, dates, status and counts) so our support numbers stay true. We keep the Message-ID of each email on purpose. It is a technical reference, not your words, and it stops a redelivered email from creating the ticket again.
What ages out. Encrypted backups of our database rotate on a rolling basis, so an erased record can remain in a backup until that backup is overwritten. Copies held by the services that deliver email and text messages for us follow those services' own retention rules, which we don't control.
The billing exception. When you close your account we delete or anonymize your personal data, but we keep the billing and invoice records the law requires us to hold. In short, we retain the invoice and delete everything else.
11. Your privacy rights (EU, UK & global)
Depending on where you live, you have rights over your personal information. Wherever you are, you can ask us to:
- Access a copy of the personal information we hold about you.
- Correct information that's wrong or out of date.
- Delete your information (the "right to be forgotten"), subject to the legal exceptions above.
- Export your information in a portable format.
- Restrict or object to certain processing, and withdraw consent you've given.
If you're in the UK or EEA and think we've got something wrong, you also have the right to complain to your local data-protection authority, though we'd appreciate the chance to put it right first.
12. US state privacy rights (California and beyond)
If you live in California or another US state with a comprehensive privacy law (there are 20 as of 2026, and the list keeps growing), you have the right to:
- Know what personal information we collect, use, and disclose.
- Delete the personal information we hold about you.
- Correct inaccurate personal information.
- Opt out of any sale or "sharing" of personal information, and limit the use of sensitive personal information.
We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there's nothing there to opt out of, but we still honor recognized universal opt-out signals, including Global Privacy Control (GPC), and we honor them globally: a browser that sends the signal is not remembered on our website or in our app, Google Analytics and our affiliate tool are not loaded for it, signed in or not, and we show a confirmation that the signal was honored. You can also opt out yourself with the Privacy choices link at the bottom of any page. We will never discriminate against you for exercising any of these rights.
13. How to exercise your rights
If you have a LiveStreamPro account, sign in and go to Account → Privacy. There you can download a copy of your data and delete your support history: after you confirm by email, our support system erases what is described under "When you ask us to forget you" above.
Deleting your account itself is done by our team: contact us from the address on the account. We then permanently delete the account: your profile, sign-in records and sessions, two-step settings, preferences, the record of your visits to the app with their city, the link between your account and the browser you visited our website with, and what only you could open. What you made for your team stays with the team without your name, and we keep the billing records the law requires (see the billing exception above) and a record that the deletion happened.
If you don't have an account (for example, you only joined the newsletter), just contact us and we'll handle your request. We may need to verify your identity first so we don't hand your data to the wrong person.
How quickly we respond. We aim to respond within 30 days. Where your local law sets a specific deadline, we'll meet it. For example, most US state privacy laws give us up to 45 days, with one further 45-day extension where the law allows and we tell you why; under GDPR/UK law we respond within one month. Some states also let you appeal a decision, and we'll tell you how if that applies to you.
14. Marketing emails & unsubscribing
We only send you marketing email, like our newsletter and product updates, if you asked for it. Every marketing email includes a working unsubscribe link, and you can opt out at any time using that link or by contacting us; we'll honor it promptly. Unsubscribing from marketing doesn't stop essential service messages (for example, billing receipts or security notices), which we send because you have an account with us.
15. International data transfers
We're based in the United States, and some of our service providers (cloud hosting, payments, email delivery, and bot protection) process data in the US and other countries. When we move personal information out of the UK or EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, so your information stays protected wherever it's handled.
16. Children
LiveStreamPro is a business tool intended for people who are at least 18 years old. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, tell us and we'll delete it.
17. Changes to this policy
We may update this policy as the service evolves. When we make material changes, we'll update the date at the top and, where appropriate, let you know. Your continued use of the service after an update means you accept the revised policy.
18. Contact us
Questions about your privacy, or want to make a request? Get in touch and we'll help. We aim to reply to privacy requests within 30 days, and always within the deadline your local law requires.
Questions about this page? We're happy to help.
Talk to our team