Last updated: September 27, 2026
1. Scope & Data Roles
This Privacy Policy describes how LapakLive ("we", "our", "platform") collects, stores, processes, and protects personal data when you use our live commerce SaaS platform. In this architecture, merchants act as Data Controllers regarding their store customers and buyers, while LapakLive operates as a Data Processor facilitating comment capture, real-time inventory synchronization, and checkout link generation.
2. Information We Collect
- Merchant Account Information: Full name, business email address, encrypted authentication credentials, store profile, authorized staff details, and subscription preferences.
- Broadcast & Third-Party Credentials: RTMP endpoint URLs and Stream Keys configured by you to simulcast to Facebook, Instagram, YouTube, or TikTok. We never request or store your third-party social media login passwords.
- Buyer Checkout & Order Data: Recipient full name, shipping delivery address, phone/WhatsApp number, purchased item line items, and settlement status. Shipping addresses may be cached locally on the buyer's browser device for streamlined repeat checkout.
- Technical Logs & Telemetry: IP addresses, browser types, interaction logs, and streaming telemetry used for operational stability, network diagnostics, and anti-fraud monitoring.
3. How Information is Used
Collected data is strictly utilized to:
- Power live broadcast simulcasting and real-time keyword comment parsing.
- Lock and reserve shared inventory units across platforms to prevent overselling.
- Transmit transaction data to licensed payment gateways to verify QRIS, Virtual Account, and e-wallet settlements.
- Generate pick-and-pack lists, shipping waybills for courier partners (J&T, SiCepat, JNE), and live session analytics.
4. Storage & Security Architecture
We enforce industry-standard security safeguards including AES-256 encryption at rest and TLS 1.3 encryption in transit. Merchant accounts are strictly isolated using tenant-level boundary partitioning. Stream keys are encrypted in secure configuration vaults and can be rotated or deleted at any time from your studio workspace.
5. Third-Party Integrations & Payment Processing
LapakLive connects with licensed payment gateways for transaction clearing. LapakLive never stores or handles raw payment card numbers or banking PINs. Payment confirmation relies exclusively on cryptographically signed server webhooks.
6. Merchant & Buyer Rights
Merchants and buyers have the right to request access, correction, or deletion of their personal information in accordance with applicable data privacy legislation. Inquiries and data deletion requests may be directed to our dedicated support team.
7. Contact Information
For privacy questions, data requests, or compliance inquiries, please contact our data governance team at [email protected].