Privacy Policy

Last updated: June 24, 2026 · Effective date: June 24, 2026

This Privacy Policy (the “Policy”) explains how Streamalytix (“Streamalytix”, “we”, “us”, or “our”) collects, uses, discloses, retains, and protects information when you visit our websites, create an account, or use the Streamalytix web application, APIs, integrations, and related services (collectively, the “Service”). This Policy is incorporated into and forms part of our Terms of Service.

We act as a controller of the personal information we collect about visitors, prospects, account holders, and Authorized Users for our own operational purposes (such as account management, billing, security, and product improvement). When we process personal information on behalf of our customers as part of the Service (for example, information about a customer's hosts, packers, SMS subscribers, or shoppers), we act as a processor for the relevant customer, who is the controller.

Table of contents

1. Scope and roles
2. Information we collect
3. How we use information
4. Legal bases (EEA/UK)
5. How we share information
6. Subprocessors and integrations
7. Cookies and similar technologies
8. Analytics and product telemetry
9. Marketing communications
10. SMS marketing features
11. International transfers
12. Data retention
13. Security
14. Your privacy rights
15. U.S. state privacy disclosures
16. Children's privacy
17. Do Not Track
18. Third-party websites
19. Changes to this Policy
20. Contact us

1. Scope and roles

This Policy applies to information processed in connection with the Service, including our websites, marketing pages, support channels, and the in-product application. It does not apply to information processed by third parties whose services we link to or integrate with; those parties operate under their own privacy policies.

When you are a Streamalytix customer, your end users' personal information that you submit through the Service is processed by us on your behalf in accordance with our Terms of Service and, where applicable, a Data Processing Addendum. You are responsible for ensuring you have a lawful basis to provide that information to us and for providing required notices to your end users.

2. Information we collect

We collect information in the categories below.

2.1 Information you provide

• Account information. Name, email address, password hash, profile photo, business name, business address, and contact phone number you supply when creating or updating an account.
• Billing information. Plan selection, billing address, last four digits of payment card, card brand, expiration date, billing history, and tax identifiers. Full payment card details are collected and stored by our payment processor; we do not store full card numbers.
• Workspace and operational data. Live stream records, inventory and SKU data, lots and manifests, purchase orders, host and staff records, shift and payroll data, packing and shipping details, customer-facing messages and marketing lists, notes, attachments, and any other content you upload to the Service.
• Support and feedback. Information you provide when you contact support, respond to a survey, or post in our community channels, including screenshots and diagnostic logs you choose to share.

2.2 Information collected automatically

• Device and connection. IP address, browser type and version, operating system, device identifiers, timezone, language, and referring/exit pages.
• Usage data. Pages and features used, actions taken, timestamps, query parameters, performance metrics, and error logs.
• Cookies and similar technologies. See Section 7.

2.3 Information from third parties

• Authentication providers. If you sign in with a third-party identity provider, we receive basic profile information (such as name, email, and avatar) according to the scopes you approve.
• Connected platforms. When you authorize the Service to connect to a marketplace, messaging provider, payment processor, or analytics tool, we receive data from those platforms necessary to provide the integrated functionality (for example, stream records, inventory updates, message delivery status).
• Service providers. Our subprocessors may provide us with diagnostic, security, fraud-prevention, and operational information.

3. How we use information

We use information for the following purposes:

• provide, operate, maintain, and secure the Service;
• create and manage your account, authenticate you, and respond to your requests;
• process subscriptions, billing, and renewals, and prevent fraud;
• generate analytics, dashboards, profit calculations, payroll reports, and other outputs you request;
• deliver messages on your behalf through enabled communication features (such as SMS marketing) at your direction;
• monitor and improve the performance, reliability, and quality of the Service, and develop new features;
• detect, investigate, and prevent fraudulent, unauthorized, or unlawful activity, and protect the rights, property, and safety of Streamalytix, our users, and others;
• send service, transactional, and security communications;
• provide customer support and training;
• send marketing communications about Streamalytix products and features, where permitted, subject to your choices; and
• comply with legal obligations and enforce our agreements.

We may use de-identified or aggregated data, which is not personal information, for any lawful business purpose, including benchmarking and product analytics.

4. Legal bases (EEA/UK)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:

• Contract. To provide the Service you have requested and to perform our obligations under our Terms of Service.
• Legitimate interests. To operate, secure, and improve the Service, prevent fraud, communicate with our users, and grow our business, balanced against your interests and rights.
• Consent. Where required, for example for certain cookies, marketing communications, or sensitive processing. You may withdraw consent at any time.
• Legal obligation. To comply with applicable laws, regulations, and court orders.

5. How we share information

We do not sell personal information for money. We share information only in the following circumstances:

• Within your workspace. Information you submit may be visible to other Authorized Users in the same workspace based on their assigned role.
• Service providers and subprocessors. We share information with vendors that perform services for us, such as hosting, database, authentication, payments, email, SMS delivery, analytics, error monitoring, and customer support, subject to contractual confidentiality and security obligations.
• Connected platforms. When you authorize an integration, we share information with the relevant third party as needed to perform the integration.
• Compliance and protection. We may disclose information when required by law, legal process, or government request, or when we believe disclosure is necessary to protect the rights, property, or safety of Streamalytix, our users, or others, including to prevent fraud or address security or technical issues.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of the transaction, subject to standard confidentiality protections.
• With your direction or consent. We may share information at your direction or with your consent.

6. Subprocessors and integrations

We use a limited set of subprocessors to operate the Service, including cloud hosting, authentication, database, payment, and messaging providers. A current list of subprocessors is available on request by emailing privacy@streamalytix.com. We require subprocessors to implement appropriate security measures and to process personal information only as instructed.

7. Cookies and similar technologies

We and our service providers use cookies, local storage, and similar technologies to (a) keep you signed in, (b) remember preferences, (c) measure and analyze usage of the Service, and (d) help secure the Service against abuse. Where required by law, we obtain consent for non-essential cookies. You can manage cookies through your browser settings; disabling certain cookies may impair Service functionality.

8. Analytics and product telemetry

We use first-party and third-party analytics to understand how the Service is used and to improve performance and reliability. This may include aggregated usage metrics, feature adoption, and crash and performance logs. We configure analytics tools to limit the collection of personal information where reasonable.

9. Marketing communications

We may send you product updates, newsletters, and promotional communications. You can opt out at any time using the unsubscribe link in any marketing email or by emailing privacy@streamalytix.com. We will continue to send service, transactional, and security communications regardless of marketing preferences.

10. SMS marketing features

If you use the Service's SMS features to send messages to your own subscribers, you are the sender of those messages and are responsible for obtaining and maintaining the prior express consent required by applicable law (including the TCPA, CAN-SPAM, CASL, and equivalent regimes), honoring opt-out requests, and complying with carrier requirements and message-content rules. Streamalytix acts as a service provider with respect to those messages.

11. International transfers

Streamalytix operates from and stores information in the United States and may transfer information to other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we use appropriate transfer safeguards, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum, and we take steps to ensure your personal information receives a level of protection consistent with this Policy.

12. Data retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account data is retained for the life of the account and deleted in the ordinary course after termination, subject to the export period described in our Terms of Service.
• Workspace and operational data is retained while your Subscription is active. Following termination, we retain it for a limited period (typically up to ninety (90) days) for reactivation and export, after which it is deleted from production systems.
• Billing records are retained for the period required by applicable tax and accounting laws.
• Logs and security records are retained for the period needed to maintain audit trails and investigate incidents, typically twelve (12) months unless a longer period is required.
• Backups may retain copies for additional periods before they are overwritten in the normal course.

13. Security

We implement administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit, access controls, least-privilege principles, monitoring, and regular review of our security practices. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for configuring your workspace appropriately.

14. Your privacy rights

Subject to applicable law and verification of your identity, you may have the following rights regarding personal information we control:

• access and obtain a copy of your personal information;
• correct inaccurate or incomplete personal information;
• delete personal information, subject to certain exceptions;
• port personal information to another service;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• opt out of targeted advertising, sale, or sharing of personal information; and
• lodge a complaint with a data protection authority.

To exercise your rights, email privacy@streamalytix.com. If you are an end user of a Streamalytix customer (for example, a host, packer, or SMS subscriber of a shop), please direct your request to that customer; we will assist them as their processor. You may designate an authorized agent to make a request on your behalf, subject to verification.

15. U.S. state privacy disclosures

Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia, and Utah) have specific rights under state privacy laws. In the preceding twelve (12) months, Streamalytix has collected the categories of personal information described in Section 2, used them for the purposes described in Section 3, and disclosed them to the categories of recipients described in Section 5. We do not “sell” personal information for monetary consideration, and we do not knowingly “share” personal information for cross-context behavioral advertising as those terms are defined under California law. We do not use or disclose sensitive personal information for purposes that require an opt-out right under the CCPA.

California residents may also request information about disclosures for direct-marketing purposes under California Civil Code § 1798.83. To exercise any of these rights, contact us at privacy@streamalytix.com. We will not discriminate against you for exercising your rights.

16. Children's privacy

The Service is not directed to children under sixteen (16), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

17. Do Not Track

Some browsers offer “Do Not Track” signals. Because there is no common industry standard for how to respond to these signals, we currently do not respond to them. We do respect Global Privacy Control (GPC) signals where required by applicable law.

18. Third-party websites

The Service may contain links to third-party websites and services we do not control. This Policy does not apply to those websites or services, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third party before providing them with personal information.

19. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice through the Service or by email before the changes take effect. The “Last updated” date at the top of this Policy indicates when it was last revised. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

20. Contact us

If you have questions, concerns, or requests regarding this Policy or our privacy practices, please contact us at:

Streamalytix · Privacy Team
Email: privacy@streamalytix.com
Legal: legal@streamalytix.com
Security: security@streamalytix.com

This page is maintained by Streamalytix and describes our current privacy practices. It is provided for informational purposes and does not constitute legal advice. You should consult your own counsel about how this Policy applies to your specific situation.