Privacy Policy

This Privacy Policy (the “Privacy Policy”) explains how Amaze Holding Company, LLC (operating the Amaze Live service through its applicable subsidiary or affiliate, together with its other subsidiaries and affiliates, “Amaze,” “Amaze Live,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you access or use the Amaze Live livestream commerce platform, including our website and applications (the “Service”).

Relationship to the Amaze Privacy Policy. This Privacy Policy is a product-specific notice that supplements the general Amaze Privacy Policy published by Amaze Holding Company, LLC, which applies across the Amaze family of services and brands (including Spring, Teespring, Food Channel, and Fresh Vine Wine). This Privacy Policy describes practices specific to Amaze Live, including live streaming, chat capture, recording consent, host content licensing, and other practices unique to the live-commerce context. To the extent there is any conflict between this Privacy Policy and the Amaze Privacy Policy with respect to activities on Amaze Live, this Privacy Policy governs. For all other activities across the Amaze family of services, the Amaze Privacy Policy continues to apply.

Scope and limits. This Privacy Policy applies only to information we collect through the Service. It does not apply to information collected by third parties, including the third-party retailers (“Merchants”) you may transact with after clicking out of the Service. Their collection and use of your information is governed by their own privacy policies. Some products presented on Amaze Live are sold through Spring storefronts operated by Amaze affiliates. When you transact through Spring, additional information is collected by Spring under Spring’s separate Privacy Policy and under the Amaze Privacy Policy.

Eligibility. The Service is intended for users 18 years of age or older. By using the Service, you represent that you are at least 18 and that you have read, understood, and agreed to this Privacy Policy and our Terms of Service. Please do not use, install, or access the Service if you do not agree to this Privacy Policy. This Privacy Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

Products and features not applicable to Amaze Live. For clarity, the following practices described in the Amaze Privacy Policy are not applicable to the Amaze Live Service at launch:

• Non-fungible tokens / FORJ. Amaze Live does not facilitate the purchase, sale, or transfer of NFTs and does not share Amaze Live user information with FORJ or any other blockchain provider in connection with the Service.
• YouTube API Services. Amaze Live does not currently integrate with the YouTube API or collect information from users’ YouTube accounts. If this changes, we will update this Privacy Policy and obtain any consents required by law.
• Seller campaign performance information. The Amaze Privacy Policy describes “Performance Information” collected for sellers operating campaigns on Spring and related brands. Amaze Live hosts do not use that performance-information framework; host-related analytics are described in this Privacy Policy.

We collect personal information from three sources: information you provide to us directly, information we collect automatically when you use the Service, and information we receive from third parties.

2.1 Categories of personal information we collect

The table below summarizes the categories of personal information we collect, the typical sources, and the primary purposes of collection.

We do not knowingly collect sensitive personal information (as defined under California and other state laws) beyond what is required to operate the Service. We do not collect government-issued identification numbers, precise geolocation, biometric identifiers, health information, or information about racial or ethnic origin, religious beliefs, sexual orientation, or union membership.

2.2 Information you provide

• Account information. Name, display name, email address, hashed password, and date of birth (used to verify 18+ eligibility).
• Profile information. Optional profile photo and bio.
• Content you submit. Chat messages, reactions, comments, and other content you post. If you host a stream, your stream audio and video.
• Communications. Messages to support and feedback you submit.
• Payment information (paid features only). Processed by our third-party payment processor Stripe. We receive a payment confirmation, the last four digits of the card, and billing address; we do not store full payment card numbers.

2.3 Information collected automatically

• Device information. Device type, operating system, browser type and version, device identifiers, screen resolution, and language settings.
• Connection information. IP address, internet service provider, and approximate location derived from your IP address.
• Usage information. Streams you view, duration, chat activity, products clicked, features used, and pages visited.
• Click-out information. When you click a product link in a stream, we record the click. By default, we do not receive information from the destination Merchant about whether you completed a purchase or how much you spent.
• Cookies and similar technologies. See section 6.

2.4 Information from third parties

• Sign-in providers. If you create an account or sign in using a third-party identity provider (such as Google), the provider shares basic profile information with us (typically name, email address, and profile image). We do not receive your password.
• Spring. If you transact through a Spring storefront after clicking from Amaze Live, Spring may share with us limited information about the transaction (such as confirmation that a purchase occurred) for analytics and operational purposes.
• Service providers. Vendors that help us operate the Service may provide us with information collected on our behalf, such as analytics data and security threat intelligence.

We use personal information to:

• provide, operate, and maintain the Service, including authentication, content delivery, and customer support;
• verify your eligibility, including age verification and sanctions screening;
• personalize your experience and recommend streams and content;
• communicate with you about the Service, including service announcements, security alerts, and (where you have opted in or as otherwise permitted by law) marketing;
• monitor for, prevent, investigate, and respond to fraud, abuse, and security incidents;
• analyze usage to improve, develop, and test features;
• comply with legal obligations and respond to lawful requests from public authorities;
• enforce our Terms of Service and Community Guidelines; and
• carry out any other purpose disclosed to you at the time we collect the information or as authorized by you.

You may opt out of marketing emails at any time by following the unsubscribe instructions in any marketing message or by adjusting your account settings. You cannot opt out of transactional and service-related messages (such as security alerts, account notices, and policy updates) while you maintain an account.

We share personal information only as described below. We do not rent or sell personal information for money. See section 7 for state-specific framing of “sale” and “share” under privacy laws.

4.1 Service providers

We share information with vendors that perform services on our behalf, including cloud hosting, payment processing, analytics, email delivery, customer support, content moderation, error monitoring, and fraud prevention. These providers are contractually limited to using your information only as needed to perform their services for us and are required to maintain appropriate confidentiality and security.

4.2 Hosts

Hosts can see chat messages and reactions that viewers contribute to their streams in real time. If a stream is recorded, those contributions may appear in the recording. Hosts do not receive account email addresses, IP addresses, or other private account details of viewers.

4.3 Spring and third-party merchants

When you click a product link in a stream, you are directed to the Merchant’s site. We share with the Merchant the information necessary to deliver you to that destination, which may include a referral identifier. The Merchant’s collection and use of your information after the click is governed by the Merchant’s own privacy policy. For products presented through Spring storefronts, additional information may be shared between Amaze and Spring to operate the joint experience, as described in Spring’s Privacy Policy.

4.4 Other users

Some information is visible to other users by design. Your display name, profile photo, and any chat messages or reactions you post in a stream are visible to other viewers and to the host of that stream. Choose what you share accordingly.

4.5 Legal and safety

We may disclose information if we believe in good faith that disclosure is required or permitted by law; to respond to valid legal process (such as subpoenas, court orders, or law enforcement requests); to protect the rights, property, or safety of Amaze Live, our users, or others; to investigate suspected violations of our policies; or in connection with bankruptcy or similar proceedings.

4.6 Corporate transactions

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any choices you may have.

4.7 With your consent

We may share information for other purposes with your consent or at your direction.

4.8 Categories of recipients

In the preceding twelve months we have shared personal information with the following categories of recipients: cloud and infrastructure providers; analytics providers; identity and authentication providers; payment processors; email and communications service providers; content moderation and trust-and-safety providers; security and fraud prevention providers; legal and professional advisors; and, when you click out, Merchants. We disclose categories of recipients rather than the names of individual vendors because our vendor list changes over time; you may request our current subprocessor list by contacting us at privacy@amaze.co.

Public visibility. Streams on Amaze Live are visible to other viewers in real time. Chat messages, reactions, and other interactions you contribute are visible to the host and to other viewers in that stream.

Recording is host-controlled. Hosts may, at their option, choose to have their stream recorded. When a stream is being recorded, a visual indicator is displayed in the stream interface. By participating in a stream where the recording indicator is displayed, you acknowledge and consent to the recording of your chat contributions and any reactions you submit.

Two-party-consent jurisdictions. Some U.S. states require that all parties to a recorded communication consent to the recording. By continuing to participate in a stream after the visual recording indicator is displayed, you consent to the recording for purposes of those laws. If you do not consent, do not contribute chat messages or reactions while the recording indicator is on.

What recordings may capture. A recording may capture the host’s audio and video; the products and links displayed during the stream; viewer chat messages; viewer display names; viewer reactions; and the order in which contributions occurred. Recordings do not capture viewer audio or video.

Use of recordings. Recordings may be replayed on the Service, embedded in other content on the Service, used to operate automated content-moderation systems, and otherwise used as described in our Terms of Service. As stated in section 3, recordings are not used to train AI models.

Limits on removal. Once a stream is recorded, individual contributions may not be removable from the recording without removing the recording itself. We will use commercially reasonable efforts to honor specific deletion requests where technically feasible.

What we use. We and our service providers use cookies, web beacons, pixel tags, local storage, and similar technologies (collectively, “cookies”) to operate the Service, remember preferences, analyze usage, and — where applicable — deliver and measure marketing.

Categories. Cookies on the Service fall into the following categories:

• Strictly necessary — required to operate the Service, including authentication, security, and basic functionality. These cannot be disabled.
• Functionality — remember your preferences, such as language and display options.
• Analytics — help us understand how the Service is used so we can improve it.
• Marketing — if used, help us measure the effectiveness of marketing campaigns and, in some cases, deliver targeted advertising.

Your choices. When you first visit the Service, we present a cookie preferences banner that lets you accept or reject non-essential cookies. You can change your preferences at any time through amaze.live/cookie-preferences.

Browser-based signals. We honor opt-out preference signals sent by your browser, including Global Privacy Control (GPC), where required by applicable law. When we detect a GPC signal from your browser, we treat it as a valid request to opt out of “sale” and “sharing” of personal information for the browser and device from which the signal is sent. We do not currently respond to “Do Not Track” signals because there is no consensus standard for how to interpret them.

We do not sell personal information for monetary consideration. However, some uses of online advertising and analytics cookies may qualify as a “sale” or “share” of personal information under the California Consumer Privacy Act (as amended by the CPRA) and certain other state privacy laws even when no money changes hands.

If we use marketing pixels or similar technologies that qualify as a “sale” or “share” under applicable law, we will:

• treat browser-based opt-out preference signals, including GPC, as a valid opt-out request for that browser and device;
• provide a clear and conspicuous “Do Not Sell or Share My Personal Information” link, available at amaze.live/do-not-sell; and
• honor opt-out requests within the timelines required by applicable law.

We do not “sell” or “share” personal information of any consumer we know to be under 16. Because the Service is 18+, we do not knowingly process the personal information of consumers under 18 at all (see section 11).

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including providing the Service, complying with legal obligations, resolving disputes, enforcing our agreements, and protecting our rights. Retention periods vary by data type and are guided by the following principles:

• Necessity. We retain personal information only while it remains necessary for an articulated purpose.
• Legal obligations. We retain personal information for the period required by tax, accounting, anti-fraud, anti-money-laundering, intellectual property, and other applicable laws.
• Account lifecycle. Account information is retained while your account is active. After deletion or extended inactivity, we retain a limited subset of account information for fraud prevention, dispute resolution, and backup purposes for a reasonable period.
• Logs and analytics. Server logs, security event data, and analytics data are retained in identifiable form for a limited period and are then aggregated, de-identified, or deleted.
• Stream content and recordings. Chat messages and reactions are retained for the duration of the relevant stream and any associated recording. Recordings are retained according to host settings and our retention defaults.
• Backups. Information in backup systems is retained on rolling cycles and is overwritten in the ordinary course.

When retention is no longer required, we delete or de-identify the information using appropriate methods.

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction. Our program is informed by recognized industry frameworks, including SOC 2 and PCI DSS where applicable, and includes encryption in transit and at rest for sensitive data, access controls, logging and monitoring, vulnerability management, and incident response.

No system is perfectly secure. We cannot guarantee the security of your information, and you transmit information to us at your own risk. If we become aware of a security incident affecting your personal information, we will notify you and applicable authorities as required by law and our security incident response plan.

Amaze Live is operated from the United States and is currently offered only to users located in the United States. Information we collect is processed in the United States and in other countries where our service providers operate. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have data-protection laws different from those in your country. We do not currently offer the Service in the European Economic Area, the United Kingdom, or Switzerland and have not implemented EU/UK-specific transfer mechanisms. If we begin offering the Service in those jurisdictions, we will update this Privacy Policy to describe applicable transfer safeguards and rights.

The Service is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will terminate the account and delete the associated information consistent with applicable law. If you believe someone under 18 has provided personal information through the Service, please contact us at privacy@amaze.co.

Because the Service is 18+, the Children’s Online Privacy Protection Act (“COPPA”) and analogous laws targeting under-13 audiences do not apply to the Service in the ordinary course.

This section describes the privacy rights available to residents of U.S. states with comprehensive privacy laws. Some rights are available only in some states. To exercise a right, see section 13.

12.1 Rights available across covered U.S. states

Depending on your state of residence, you may have some or all of the following rights:

• Right to know / access. Confirm whether we process personal information about you and obtain a copy of that information.
• Right to correct. Request correction of inaccurate personal information.
• Right to delete. Request deletion of personal information we have collected from you, subject to legal exceptions.
• Right to portability. Obtain a copy of personal information you provided to us in a portable, machine-readable format where technically feasible.
• Right to opt out of “sale” or “share.” Direct us not to “sell” or “share” your personal information (including for cross-context behavioral advertising). See section 7.
• Right to opt out of targeted advertising. Direct us not to process your personal information for targeted advertising.
• Right to opt out of profiling. Direct us not to engage in profiling that produces legal or similarly significant effects about you. We do not currently engage in such profiling.
• Right to limit use of sensitive personal information. (California, Connecticut, Texas, and certain other states.) Direct us to limit the use and disclosure of your sensitive personal information to certain purposes. We do not currently collect sensitive personal information beyond what is necessary to operate the Service.
• Right to non-discrimination. Exercise these rights without receiving discriminatory treatment or reduced service quality.
• Right to appeal. If we deny a request, you may appeal as described in section 13.4.

12.2 State-specific notes

• California (CCPA, as amended by CPRA). Categories of personal information collected, sources, purposes, and categories of recipients are described in sections 2, 3, and 4. We do not knowingly sell or share personal information of consumers under 16. California residents may designate an authorized agent (see section 13.3).
• Virginia, Colorado, Connecticut, Texas, Montana, Oregon, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Iowa. Comparable rights apply under each state’s comprehensive privacy law, subject to state-specific exemptions and thresholds.
• Utah. Comparable rights apply, except that Utah does not currently provide a right to correct.
• Florida (Florida Digital Bill of Rights). Comparable rights apply to consumers whose personal information is controlled or processed by entities that meet the FDBR’s applicability thresholds.
• Oklahoma (Oklahoma Consumer Data Privacy Act, signed March 20, 2026; effective January 1, 2027). Comparable rights will apply to Oklahoma residents beginning on the effective date. We will update this Privacy Policy as needed to align with OCDPA requirements before that date.

12.3 Sensitive data, profiling, and automated decisions

We do not use personal information for automated decisions that produce legal or similarly significant effects without meaningful human involvement. If we begin to do so, we will update this Privacy Policy and provide any disclosures and opt-out rights required by law.

12.4 Consumer health data and other state-specific categories

Washington’s My Health My Data Act, the Nevada consumer health data law, and Connecticut’s analogous provisions create heightened obligations for “consumer health data.” Amaze Live does not knowingly collect consumer health data through the Service.

12.5 Notice of financial incentives

We do not offer financial incentives or price differences in exchange for the collection, sale, or retention of personal information.

13.1 Submission channels

You may submit a privacy rights request by any of the following channels:

• Email. Send a request to privacy@amaze.co with the subject line “Amaze Live — Privacy Request.” This is the primary intake channel at launch and is monitored daily.
• Toll-free phone (California requests). Call (800) 871-4753 during business hours. This number is operated by Amaze Holding Company and is also referenced in the Amaze Privacy Policy.
• Online request form. Use the request form maintained by Amaze Holding Company at forms.gle/UFteXrxeU8BHvNBt6. When you submit an Amaze Live-related request through this form, please include “Amaze Live” in the description field so we can route your request appropriately.
• Account deletion. You can delete your Amaze Live account at any time through your account settings. Account deletion is processed separately from the state-specific deletion-request workflow described below. To request deletion of all personal information beyond what is removed when an account is closed, please submit a request through one of the channels above.

We are working to publish a dedicated self-service privacy request portal at amaze.live/privacy-requests. Until that portal is live, the channels above are the primary intake mechanisms.

To opt out of “sale” or “sharing” for marketing purposes, use the “Do Not Sell or Share My Personal Information” link at amaze.live/do-not-sell or send a Global Privacy Control signal from your browser.

13.2 Verification

We will take reasonable steps to verify your identity before responding to a privacy rights request. We typically do this by asking you to confirm information already associated with your account. We will not require you to create an account in order to make a request. If we cannot verify your identity, we may deny the request and will let you know why.

13.3 Authorized agents

You may use an authorized agent to submit a request on your behalf. The agent must provide proof of authorization, and we may require you to verify your identity directly and confirm that you authorized the agent to act on your behalf.

13.4 Response timelines and appeals

We will respond to your request within the timelines required by applicable law, generally within 45 days of receiving a verifiable request, with one extension of up to an additional 45 days where reasonably necessary. We will inform you in writing of any extension. If we deny your request, we will explain why. If you reside in a state that provides an appeal mechanism (including Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Iowa, and — starting January 1, 2027 — Oklahoma), you may appeal a denial by emailing privacy@amaze.co with the subject line “Privacy Appeal.” We will respond to your appeal within the timeline required by applicable law, generally within 60 days. If your appeal is denied, you may contact your state attorney general.

13.5 Limitations

Making a request does not guarantee complete removal of personal information, and there may be circumstances in which the law does not require or permit us to fulfill your request (for example, where we must retain certain information for legal, security, or fraud-prevention reasons). Where this is the case, we will inform you in our response.

Access and update. You can access and update your account information at any time through your account settings.

Account deletion. You can delete your account at any time through your account settings or by contacting us at privacy@amaze.co. After deletion, we may retain certain information as required by law, for legitimate business purposes such as fraud prevention, or where information has been incorporated into recordings or other users’ content.

Communications preferences. You can opt out of marketing emails by following the unsubscribe instructions in any marketing email or by adjusting your account settings. We may continue to send transactional and service-related messages regardless of marketing preferences.

Cookies. Manage cookie preferences as described in section 6.

Push and in-app notifications. If our applications send push notifications, you can control them through your device settings.

We may update this Privacy Policy from time to time. The “Last Updated” date at the top reflects when the most recent changes took effect. If we make material changes, we will notify you by email at the address associated with your account, by a prominent in-Service notice, or by other reasonable means before the changes take effect. Your continued use of the Service after the effective date of any updated Privacy Policy constitutes acceptance of the updated terms.

If you have questions about this Privacy Policy or our privacy practices, contact us at: