Welcome to InflowLive ("the Service", "we", "us"), available at www.inflowlive.com. This policy explains what personal data we collect when you use the Service, how we use and protect it, and how you can exercise your legal rights.
By registering, signing in, browsing, purchasing, commenting, or using the Service in any other way, you confirm that you have read, understood, and agreed to this policy. If you do not agree with any part of it, please stop using the Service.
The Service is an e-commerce platform that combines an online storefront with live-auction order capture. It helps merchants run online marketplaces, sell through live streaming, automatically match social-media comments into orders, and manage orders, logistics, and payments. The Service is operated from Taiwan and serves merchants in Taiwan and Southeast Asia.
We collect only the data necessary to provide and improve the Service. The scope differs depending on your role:
| Category | Items |
|---|---|
| Account data | Email address, password (stored as a hash), sign-in times, IP address |
| Store data | Store name, contact phone, address, business information, logo / product images |
| Payment / logistics integrations | Payment provider accounts, logistics provider customer IDs, payout bank account |
| Social platform connections | Facebook Page ID, Instagram account ID, TikTok account name (used for live comment order capture) |
| Usage records | Merchant console operation logs (audit records of product / order changes, etc.) |
| Category | Items |
|---|---|
| Member data | Name, email address, password (stored as a hash), mobile number |
| Delivery data | Recipient name, phone, address, convenience-store pickup code |
| Order data | Items purchased, amounts, payment method, shipping method, order status |
| Comment data | Comments you leave on merchants or products, and their timestamps |
When a merchant connects their Facebook Page or Instagram account in the merchant console, the Service receives the following data through Meta's official webhooks, solely to match comments to that merchant's live-auction orders:
We use the data we collect only for the following explicit and lawful purposes:
Without your prior explicit consent, we will not use your personal data for any purpose beyond the above, and we never sell, rent, or trade your personal data to any third party.
To provide the full Service, we integrate with the following third parties. Each has its own privacy policy, which we encourage you to review:
| Category | Provider | Purpose |
|---|---|---|
| Social platforms | Meta (Facebook, Instagram), TikTok | Merchant Page / account connection, receiving live comments |
| Payments | Payment gateways such as PRESCO, NewebPay, TapPay, LINE Pay, Apple Pay | Credit card, convenience-store payment, mobile payment processing |
| Logistics | Carriers such as T-cat (Black Cat), HCT Logistics, NewebPay Logistics (convenience-store pickup) | Delivery, store pickup, shipment tracking |
| Cloud infrastructure | Google Cloud Platform or equivalent providers | Hosting, database, file storage, CDN |
We transmit only the minimum data necessary for each of these services, and we require providers to handle it in accordance with their privacy policies and applicable law.
The Service uses cookies and LocalStorage to keep you signed in, remember your preferences (such as language), and help analyze site usage. You can disable cookies in your browser settings, but some features (such as sign-in and the shopping cart) will stop working properly.
We protect your data with industry-standard technical and organizational measures, including:
While we work hard to protect your data, no transmission over the internet is 100% secure. If a data breach occurs, we will notify affected users within a reasonable time of becoming aware of it and report to the competent authorities as required by local law.
Under applicable data protection laws (including but not limited to Taiwan's Personal Data Protection Act, the EU GDPR, and Singapore's PDPA), you have the following rights over your personal data:
To exercise any of these rights, email support@inflowlive.com. We will respond within a reasonable period (as a rule, within 30 business days).
If you would like us to delete comment data obtained through Meta platforms (Facebook, Instagram) — including your display name, Page-scoped ID, and comment text — you may use either of the following:
We will complete deletion within 30 days of receiving your request (including backup rotation) and reply to you by email with the result.
The Service is not directed at children under 14. If you are under the legal age in your jurisdiction, please use the Service only with the consent of a parent or guardian. If we discover that we have collected a minor's data without guardian consent, we will delete it immediately.
Our servers and databases may be located in cloud facilities in Taiwan or Southeast Asia. By using the Service, you agree that your data may be transferred to and stored in these regions. We ensure all cross-border transfers are protected by appropriate technical and contractual safeguards.
This policy may be revised as laws or the Service change. When it is, we will update the "Last Updated" date on this page and, where necessary, notify you via in-site notice or email. We encourage you to review this page periodically.
Continuing to use the Service after a revision means you accept the updated policy.
For any questions, comments, or complaints about this policy, contact us at: