Privacy Policy

Effective Date: September 21, 2025
Last Updated: September 21, 2025

1. Introduction

This Privacy Policy describes how Shoplay ("we," "us," or "our") collects, uses, stores, and shares information when you use our mobile application (the "App"). Our App is an e-commerce platform that enables sellers to showcase and sell products through live streaming, and allows buyers to purchase products and interact in real-time.

By using our App, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

• Phone Number: Used for account creation, login, and verification through Firebase Phone Authentication

• Profile Information: Name, profile picture, and other details you choose to share

• Address Information: Shipping and billing addresses for order fulfillment

• Payment Information: Credit/debit card details processed securely through Stripe

• Banking Information: Bank account details for seller payouts

• Communications: Chat messages, comments, and interactions during live streams

• Media Content: Photos, videos, and files you upload to the platform

2.2 Information Automatically Collected

• Device Information: Device type, operating system, unique device identifiers

• Usage Data: App usage patterns, features accessed, time spent in the app

• Log Information: IP address, access times, pages viewed, app crashes

• Video Calling Data: Video and audio content during live streaming sessions via Agora services (with your permission)

• Location Data: Approximate location for shipping and local recommendations (with your permission)

• Firebase Analytics: App performance, crash reports, and usage statistics

2.3 Third-Party Information

• Information from social media platforms if you choose to connect your accounts

• Analytics data from third-party service providers

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Core App Functionality

• Creating and managing your account

• Processing transactions and payments

• Facilitating live streaming sessions

• Enabling real-time chat and communication

• Managing product listings and orders

• Providing customer support

3.2 Service Improvement

• Analyzing app usage to improve features and performance

• Personalizing your experience and recommendations

• Conducting research and analytics

• Detecting and preventing fraud

3.3 Communication

• Sending order confirmations and shipping updates

• Notifying you about live streams and promotions

• Providing customer support responses

• Sending security alerts and important notices

4. Information Sharing and Disclosure

4.1 With Your Consent

We may share your information when you explicitly consent, such as during public live streams or when you choose to share profile information.

4.2 Service Providers

We share information with trusted third-party service providers who help us operate our App:

• Stripe: For payment processing (governed by Stripe's privacy policy)

• Firebase (Google): For authentication, database storage, file storage, and analytics

  • Firebase Phone Auth for user authentication

  • Cloud Firestore and Realtime Database for data storage

  • Firebase Storage for media files and documents

  • Firebase Analytics for app performance monitoring

• Agora: For real-time video calling and live streaming services

• Cloud Storage Providers: For additional data storage and backup

• Analytics Services: For app performance and usage analytics

• Communication Services: For messaging and notification services

4.3 Legal Requirements

We may disclose information if required by law, legal process, or to:

• Comply with legal obligations

• Protect our rights and property

• Ensure user safety and security

• Investigate fraud or security issues

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction.

5. Data Storage and Security

5.1 Data Storage Infrastructure

Your information is stored using secure cloud services:

• Firebase Cloud Firestore: For structured app data and user profiles

• Firebase Realtime Database: For real-time chat and live session data

• Firebase Storage: For profile pictures, product images, and media files

• Agora Cloud: For temporary storage of video calling data during live sessions

5.2 Security Measures

We implement appropriate security measures to protect your information:

• Encryption of sensitive data in transit and at rest

• Firebase Security Rules to control data access

• Secure payment processing through PCI-compliant systems

• Regular security audits and updates

• Limited access to personal information on a need-to-know basis

• Multi-factor authentication for administrative access

• Secure video streaming through Agora's encrypted channels

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account

• Comply with legal obligations

• Resolve disputes and enforce agreements

• Improve our services

Specific retention periods:

• Account information: Until account deletion

• Transaction records: 7 years for tax and legal compliance

• Chat messages: 2 years from creation date

• Analytics data: 24 months

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access your personal information

• Update or correct your information

• Delete your account and associated data

• Export your data in a portable format

7.2 Communication Preferences

You can:

• Opt out of promotional communications

• Manage push notification settings

• Control email preferences

7.3 Privacy Controls

• Manage profile visibility settings

• Control who can contact you

• Set preferences for data collection and usage

8. Children's Privacy

Our App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable privacy laws.

10. Third-Party Services

Our App integrates with third-party services that have their own privacy policies:

• Stripe Payment Processing: https://stripe.com/privacy

• Firebase/Google Services: https://policies.google.com/privacy

• Agora Video Services: https://www.agora.io/en/privacy-policy/

• Google Play Services: https://policies.google.com/privacy

We encourage you to review these policies to understand how these services handle your information.

11. Data Deletion

You can request deletion of your personal data by:

• Using the in-app settings to delete your account

• Contacting our support team at support@shoplay.com

• Sending a written request to our physical address

Upon deletion request, we will:

• Remove your personal information from Firebase databases

• Delete media files from Firebase Storage

• Remove authentication data from Firebase Auth

• Retain only necessary data for legal compliance

• Complete deletion within 30 days of verification

Note: Some data may be retained in Firebase backups for up to 60 days as part of Google's backup retention policy.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected

• Right to delete personal information

• Right to opt-out of sale of personal information

• Right to non-discrimination for exercising privacy rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights:

• Right of access to your personal data

• Right to rectification of inaccurate data

• Right to erasure ("right to be forgotten")

• Right to restrict processing

• Right to data portability

• Right to object to processing

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make changes:

• We will post the updated policy in the App

• We will update the "Last Updated" date

• For material changes, we will provide additional notice

• Continued use of the App constitutes acceptance of changes

15. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: huzaifa.farooqi.dev@gmail.com
Address: House 28, Lane 2, Falcon Complex Tufail Road Lahore Cantt.
Phone: +923351662794

16. Consent

By using our App, you consent to:

• The collection and use of information as described in this Privacy Policy

• The transfer of information to third-party service providers

• The processing of your information for the purposes outlined above

You may withdraw consent at any time by deleting your account or contacting us directly.

Note: This Privacy Policy is effective as of the date listed above and applies to all information collected by Shoplay. Please review this policy regularly for updates.