Privacy Policy
This Privacy Policy explains how [Company Legal Name] (“MaxxShow”, “we”, “us”) collects, uses, and shares personal data in connection with the MaxxShow live shopping platform (the “Service”) and our website.
MaxxShow plays two distinct roles:
- As a controller — for data about merchants and website visitors (for example, your account details or a demo request).
- As a processor / service provider — for data about a merchant's viewers and customers, which we process on the merchant's behalf and under their instructions. If you are a viewer of a brand's livestream, the brand is the controller of your data; please also refer to that brand's own privacy policy.
1. Data we collect
Merchant and website data (MaxxShow as controller)
| Category | Examples |
|---|---|
| Account data | Name, work email, store name, login credentials |
| Contact and demo requests | Email address and message content you send us |
| Live chat | Name, email address, chat transcript, and technical data (IP address, browser, pages viewed) collected when you start a conversation in the chat widget on our website |
| Usage data | Log data, device and browser information, pages visited, feature usage |
| Cookies | See Section 7 below |
Viewer and store data (MaxxShow as processor)
| Category | Examples |
|---|---|
| Store data | Products, variants, inventory, pages, and orders synced from the merchant's commerce platform (e.g., Shopify) |
| Viewer interaction data | Chat messages, likes, shares, product clicks, add-to-cart events, watch time |
| Notification subscriptions | Email address submitted through “Notify Me”, and consent records |
| Purchase and attribution data | Order references linked to livestream or replay sessions for attribution reporting |
| Livestream content | Live video streams and recorded replays produced by the merchant |
2. How we use data
- Provide, operate, and secure the Service, including delivering livestreams and replays;
- create and maintain the merchant's Live Shopping page and sync store catalog data;
- send opt-in email notifications to a merchant's subscribers when a show goes live;
- produce analytics and order-attribution reporting for the merchant;
- respond to support and demo requests;
- monitor, debug, and improve the Service; and
- comply with legal obligations.
We do not sell personal data, and we do not use viewer data to build cross-merchant advertising profiles.
3. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies and MaxxShow acts as controller, we rely on: performance of a contract (providing the Service to merchants); legitimate interests (securing and improving the Service, responding to enquiries); consent (where required, e.g., non-essential cookies); and legal obligation (where processing is required by law). Where we act as processor, the merchant is responsible for establishing the legal basis for processing their viewers' data.
4. Sharing and subprocessors
We share personal data only with:
- Service providers (subprocessors) — hosting, video streaming and transcoding, email delivery, live chat and support ticketing, and analytics vendors that process data under contract with us and only on our instructions. A current list of subprocessors is available on request at support@maxxshow.com.
- Commerce platforms — data flows between MaxxShow and the merchant's connected platform (e.g., Shopify) as needed to run the Service.
- Legal and safety recipients — where required by law, or to protect the rights, safety, or property of MaxxShow, our merchants, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
5. International transfers
We may process data in countries other than where you live. Where personal data protected by the GDPR or UK GDPR is transferred outside the EEA or UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable).
6. Retention
We retain personal data for as long as needed to provide the Service and for legitimate business or legal purposes:
- Merchant account data — for the life of the account and a reasonable period afterwards;
- viewer and store data processed on a merchant's behalf — for the duration of our agreement with the merchant, then deleted or returned in line with that agreement;
- notification subscriptions — until the subscriber opts out or the merchant deletes them;
- logs and diagnostics — for a limited operational period.
7. Cookies
Our website and the Service use cookies and similar technologies:
- Strictly necessary — authentication, security, and core functionality (always active);
- Functional — remembering preferences such as language or dismissed notices;
- Analytics — we use Google Analytics 4 to understand aggregate usage of our website. Analytics cookies are not set until you accept them in the cookie banner, and you can change your choice at any time through the “Cookie settings” link in the footer;
- Live chat — our chat widget sets cookies to keep your conversation and its history available across page loads and visits.
You can control cookies through your browser settings; blocking some cookies may affect how the Service works.
8. Your rights
EEA / UK (GDPR)
You may have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.
California (CCPA/CPRA)
California residents may have the right to know what personal information we collect, to request deletion or correction, and to be free from discrimination for exercising these rights. We do not sell or share personal information as defined by the CPRA.
How to exercise your rights
Contact us at support@maxxshow.com. If your request concerns data we process on a merchant's behalf (for example, your activity as a viewer of a brand's livestream), we will refer the request to that merchant and support them in responding, as required by law.
9. Security
We apply technical and organizational measures appropriate to the risk — including encryption in transit, access controls, and logging — to protect personal data against unauthorized access, loss, or alteration. No system is completely secure; please notify us immediately at support@maxxshow.com if you believe your data has been compromised.
10. Children
The Service is intended for business use by merchants and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. If a change is material, we will notify merchants — for example, by email or an in-app notice — before it takes effect. The “Last updated” date above reflects the most recent revision.
12. Contact
[Company Legal Name]
[Registered Address]
Email: support@maxxshow.com
Data protection contact: [DPO / Privacy Contact]