Effective date: August 2026

Scope

This policy covers hopshoplive.com and any HopShop-powered AI avatar or chat widget embedded on a brand's website. If you are a brand client, your use of the HopShop platform is governed by your Master Service Agreement and Data Processing Addendum with HopShop.

Who we are

For information collected through this website, we act as data controller. For data processed through AI avatar sessions on brand websites, we act as data processor on behalf of the brand.

Contact: privacy@hopshoplive.com

What we collect and why

When you submit a contact form or demo request
We collect your name, email address, company name, and any message you include. We use this to respond to your enquiry and follow up on potential business relationships. Legal basis: legitimate interests.

When you book a demo
In addition to the above, we may review your website to prepare a relevant demonstration. Legal basis: legitimate interests.

When you visit hopshoplive.com
Our website host (Wix) may collect standard server log data including your IP address, browser type, device, and pages visited. We do not currently run independent analytics or advertising trackers on this website.

Cookies
We use only essential cookies required for the website to function. We do not currently use advertising, tracking, or non-essential analytics cookies. If this changes, we will update this policy and obtain consent before setting any non-essential cookies.

AI-powered technology

HopShop's products use artificial intelligence to generate responses and power interactive avatar experiences. These are deployed on our clients' platforms, not on this marketing website. AI-generated responses are produced automatically, do not represent the views of HopShop or the brand, and may contain errors. Do not rely on them as professional, medical, legal, or financial advice. Always verify product information directly with the brand before making a purchase decision.

Some avatars are based on real individuals who have licensed their likeness and voice to HopShop. The person depicted is not speaking in real time.

What we collect during avatar conversations

When you interact with an AI avatar or chat widget powered by HopShop on a brand's website, the following data is collected:

• The messages you send during the conversation

• Session metadata: IP address, device type, browser, and session duration

• Products or content you engaged with during the session

This data is collected on behalf of the brand operating the widget. HopShop processes it as a data processor; the brand is the data controller responsible for ensuring a lawful basis exists to offer you this experience.

We do not build a profile of you across sessions or across different brands. Each conversation is stored separately, linked to the brand whose widget you used.

How we use conversation data

We use conversation data to:

• Operate and deliver the live chat experience

• Generate anonymised insight reports for the brand (for example: common questions, product interest trends)

• Improve the quality of the service and your experience

We do not use your conversations to train or fine-tune any AI model — ours or any vendor's. We do not share raw conversation transcripts with the brand. Brands receive insight reports only.

Sub-processors in the avatar experience

To deliver the avatar experience, your data may be processed by the following sub-processors:

• Anam / Tavus — AI avatar rendering

• LiveKit — real-time audio and video infrastructure

• Supabase — data storage

Each sub-processor is contractually bound to process data only as instructed by HopShop and to maintain appropriate security measures.

How long we keep your data

Contact and demo enquiry data is kept for as long as the business relationship is active, or up to 3 years from last contact, then deleted. If you ask us to delete your information sooner, we will do so within 30 days unless we are required by law to retain it.
Conversation transcripts from avatar sessions are retained for 12 months from the date of the session, then permanently deleted. Anonymised insight reports derived from those conversations contain no personal data and are retained as business records.

Who we share data with

We do not sell your personal data. We do not share it for advertising purposes.

We may share it with:

• Our technology infrastructure providers (website hosting, email)

• Professional advisers (lawyers, accountants) where legally required

• Regulators or law enforcement where required by applicable law

• A successor entity in the event of a merger or acquisition, with notice to you

International transfers

HopShop is based in Israel, which is recognised by the European Commission as providing an adequate level of data protection. Where data is transferred to other countries outside the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission or equivalent safeguards.

Your rights - EU and UK residents (GDPR)

If you are in the EU or UK, you have the following rights regarding your personal data:

1. Access - request a copy of the personal data we hold about you

2. Rectification - ask us to correct inaccurate or incomplete data

3. Erasure - ask us to delete your data (the "right to be forgotten"), subject to legal retention obligations

4. Restriction - ask us to pause processing while a dispute is resolved

5. Portability - receive your data in a structured, machine-readable format

6. Objection - object to processing based on legitimate interests

7. Withdrawal of consent - where processing is based on consent, withdraw it at any time without affecting prior processing

8. Lodge a complaint — you have the right to complain to your local data protection authority (in the EU: your national DPA; in the UK: the ICO at ico.org.uk)

To exercise any of these rights: privacy@hopshoplive.com. We will respond within 30 days.

Your rights — California residents (CPRA)

If you are a California resident, you have the right to:

• Know what categories of personal information we collect and why

• Access the specific personal information we hold about you

• Correct inaccurate personal information

• Delete your personal information, subject to legal exceptions

• Non-discrimination — we will not treat you differently for exercising your rights

We do not sell your personal information. We do not share it for cross-context behavioural advertising.

To exercise these rights: privacy@hopshoplive.com. We will respond within 45 days, extendable to 90 days for complex requests.

Security

We implement appropriate technical and organisational measures to protect your personal data. No system is completely immune to security risks. If you believe your data has been compromised, contact privacy@hopshoplive.com immediately.

Children

This website is not directed at anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, contact us and we will delete it.

Changes to this policy

We may update this policy at any time. The effective date above reflects the most recent revision. Continued use of the website after an update constitutes acceptance of the revised policy. For material changes, we will provide advance notice where reasonably practicable.

Contact

All privacy matters: privacy@hopshoplive.com
HopShopLive, Israel