Skip to main content

    Privacy Policy

    Last Updated: 7 June 2026

    This Privacy Policy describes how LiveFox ("we", "us", "our") collects and processes personal data when you use the LiveFox platform ("the Service").

    We are based in the United Kingdom and process data in accordance with UK GDPR, EU GDPR (where applicable), and U.S. privacy regulations including the California Consumer Privacy Act (CCPA), as amended by the CPRA.

    1. Who This Policy Applies To

    This policy applies to:

    • Organisers creating accounts to run events
    • Admin, Moderator and Instructor users invited by organisers
    • Attendees who participate without creating accounts

    2. Data We Collect

    Organisers and Invited Users

    • Name
    • Email address
    • Login credentials
    • Organisation details and settings

    Attendees

    Attendees may enter their name into free-text fields. We also collect:

    • Event interactions
    • Poll/quiz answers
    • Device, browser and IP address
    • Usage analytics

    Where the organiser enables it, we also collect an email address, free-text responses, and interaction data (for example coordinates from pin-image or scatter-plot questions).

    Payment Information

    Handled securely by Stripe. We do not store full card details.

    Automatically Collected

    • Device details
    • Browser type
    • Cookies and authentication data

    3. How We Use Data

    To:

    • Operate and deliver the Service
    • Authenticate organiser accounts
    • Generate analytics and event results
    • Process subscriptions and billing
    • Secure the platform and prevent fraud

    We do not sell personal data or use it for advertising.

    4. Use of Artificial Intelligence

    LiveFox provides AI-powered features to assist organisers with event engagement, including generating quiz questions, summarising engagement data, suggesting content, and analysing sentiment.

    AI Inputs

    When users use AI features, LiveFox may process:

    • Text prompts submitted by organisers
    • Event interaction data (such as poll responses and participation metrics)
    • Free-text responses submitted by attendees

    Users should not submit sensitive personal data, confidential information, or regulated data into AI features.

    AI Outputs

    AI-generated content is created automatically and may be inaccurate, incomplete, or subjective. AI outputs are provided to support event engagement and analysis and do not constitute professional advice.

    Data Processing and Training

    AI inputs and outputs are processed solely to provide AI functionality within the Service.

    LiveFox does not use organiser or attendee data to train public or third-party AI models.

    Lawful Basis

    Processing of data for AI features is based on legitimate interests in providing and improving platform functionality, and performance of a contract for organiser accounts.

    5. Legal Basis (UK & EU Users)

    We rely on:

    • Contractual necessity
    • Legitimate interests
    • Legal compliance

    6. Your Privacy Rights (Global)

    Depending on where you live, you may have rights to:

    • Access your data
    • Request correction
    • Request deletion
    • Object to processing
    • Data portability

    Contact: support@golivefox.com

    7. CCPA & U.S. Users

    For California residents, you have additional rights under CCPA/CPRA:

    You may request:

    • The categories of personal data we have collected
    • The specific personal data collected about you
    • The categories of sources of personal data
    • Deletion of your personal data (with some exceptions)
    • That your information not be sold or shared

    "Do Not Sell or Share"

    LiveFox does not sell personal data.

    We may share data only for:

    • Hosting
    • Analytics
    • Payment processing
    • Security

    To exercise rights:

    Email: support@golivefox.com

    You will not be discriminated against for exercising CCPA rights.

    Sensitive personal information

    You also have the right to limit the use and disclosure of sensitive personal information under CPRA. LiveFox does not collect or use sensitive PI for purposes that would trigger this right, so no action is required from you.

    8. Controller vs. Processor

    LiveFox is the data controller of organiser account data.

    For attendee data submitted during events, organisers act as the data controller, and LiveFox is the data processor.

    Organisers decide what data is collected from attendees.

    9. User-Generated Content

    Users should avoid submitting sensitive data. We are not responsible for content users submit.

    10. Where Data Is Stored & International Transfers

    Customer data is hosted in the European Union by default (AWS, eu-central-1 / Frankfurt) via our infrastructure provider. EU and UK customer data does not leave the EU/EEA for storage.

    A small number of sub-processors are based in the United States (for example, our email and AI providers). Where personal data is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (2021) and, for UK transfers, the UK International Data Transfer Addendum.

    A dedicated US-hosted deployment is available for enterprise customers with US data-residency requirements. Contact us for details.

    The full list of sub-processors and their hosting regions is published on our Sub-processors page.

    11. Data Sharing

    We may share data with the sub-processors listed on our Sub-processors page, covering categories such as:

    • Hosting and database infrastructure
    • Payment processing (Stripe)
    • Transactional email delivery
    • AI model providers (under zero-retention terms)

    Never with advertisers or data brokers.

    12. Retention

    We retain personal data only for as long as needed to deliver the service and meet our legal obligations:

    Data categoryRetention period
    Organiser account & profileUntil the account is deleted, then purged within 30 days.
    Quiz and session contentRetained for the life of the organisation, until the organiser deletes it.
    Attendee responses & analyticsRetained with the parent session; deleted when the session or organisation is deleted.
    Server & access logsUp to 90 days.
    Support tickets24 months from last activity.
    Billing records (invoices)7 years (UK statutory retention).
    BackupsRolling 30 days; deleted data is purged from backups within that window.

    Organisers can export or delete their data at any time from Profile Settings, or by emailing support.

    13. Law Enforcement & Government Requests

    We only disclose personal data in response to a valid, legally binding request from a competent authority. Where we are legally permitted, we will notify the affected customer before disclosure so they can seek a protective order. We do not provide direct or bulk access to customer data to any government or third party.

    14. Children

    LiveFox is not directed at children under 16. Where the Service is used in a school or other educational setting, the school (acting as data controller) is responsible for obtaining any required parental consent and for limiting collection of personal data from minors.

    15. Contact

    For privacy inquiries: support@golivefox.com

    16. Changes

    Updates will be reflected by the date above. Material changes will be communicated to organisation account owners by email.

    Cookie Notice (summary)

    We use cookies and similar technologies (localStorage) only to:

    • Authenticate organisers and keep sessions active
    • Run live sessions and remember preferences
    • Measure aggregate usage of our marketing pages

    We do not use cookies for advertising or cross-site tracking.

    For the full cookie-by-cookie breakdown with durations, see our Cookie Policy.