Privacy Policy
This policy explains how MB Variantai (“Soldcast”, “we”), the operator of the live-commerce service at https://soldcast.live, processes personal data. We are the data controller for the data described below. Questions: privacy@soldcast.live.
This is a template covering the required disclosures. Review it with legal counsel and complete the registration details on our Imprint before public launch.
Who this applies to
Soldcast serves two groups: sellers, who create an account to run live sales, and buyers, who interact via a seller’s Facebook or YouTube live stream and may place an order and pay through our checkout.
Data we collect
- Seller account data: name, email, password (hashed), business name, and legal/billing details you provide.
- Connected platform data: when a seller connects Facebook or YouTube, we store access tokens (encrypted at rest) and page/channel identifiers needed to run their broadcast and read live comments.
- Buyer data from live streams:public comments a buyer posts on a seller’s live stream, together with the platform-provided display name and user id, when they are needed to create and manage an order.
- Order & checkout data: ordered items, totals, and the contact and shipping details a buyer enters at checkout (name, email, phone, address) so the seller can fulfil and receipt the order.
- Technical data: IP address and basic request metadata, used for security and rate limiting.
We do not store card or bank details. Payments are processed by our payment provider (Paysera) on their systems.
Why we process it, and our legal basis
- To provide the service (run streams, ingest comments, create and fulfil orders, take payment) — performance of a contract.
- Security, fraud and abuse prevention (rate limiting, token encryption) — legitimate interests.
- Legal compliance (invoicing, accounting, tax) — legal obligation.
Who we share it with
- The seller whose live sale a buyer participates in (for their own orders).
- Paysera — payment processing; Meta / Google — the Facebook and YouTube APIs used to run the broadcast and read comments; infrastructure providers (hosting and database) that process data on our behalf under contract.
Some providers may process data outside the EEA; where they do, appropriate safeguards (such as Standard Contractual Clauses) apply.
How long we keep it
Account and order data are kept for the life of the account and as long as required for accounting/tax law, then deleted or anonymised. Encrypted platform tokens are deleted when a seller disconnects the platform or closes their account.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, or object to processing. To exercise any right, email privacy@soldcast.live. You may also lodge a complaint with your local supervisory authority (in Lithuania, the State Data Protection Inspectorate / VDAI).
Deleting your data
Buyers and sellers may request deletion at any time via privacy@soldcast.live. If you interacted through Facebook, you can also trigger deletion of the data we hold about you from that platform — see our Data Deletion instructions. We honour Facebook’s data-deletion callback automatically.
Cookies
We use only strictly necessary cookies to keep sellers signed in. We do not use advertising or third-party tracking cookies.
Children
The service is not directed to children under 16, and we do not knowingly collect their data.
Changes
We may update this policy; material changes will be reflected by the date below and, for sellers, communicated by email.
Contact
MB Variantai, Lithuania — privacy@soldcast.live.