Canu

Privacy Policy

Version 1.1 · Effective October 7, 2026

Canu ("Canu," "we," "us," or "our") operates the wholesale platform for live selling available at canulive.com, including the Canu app for Shopify. This policy explains what information we collect, how we use it, and the choices you have. It applies to live sellers, brands, and merchants who connect their store to Canu.

1. Information We Collect

Account information. Name, email address, business name, state, resale certificate, and the social/live-selling handles you provide at signup.

Order information. Wholesale orders placed on Canu, including products, quantities, prices, payment status, and the shipping name and address you provide for fulfillment.

Connected store data (Shopify app).When a brand connects a Shopify store, we access products, inventory levels, and the orders our platform creates or tracks, including the live seller's name and shipping address on those wholesale orders, so both sides stay in sync. We collect the minimum data needed to run the connection and do not access a store's retail customer list.

Payment information. Payments are processed by Stripe. Card and bank details go directly to Stripe; we never see or store them.

1a. Public Profile Checks, Messages & Cookies

Live-selling handles.When you give us a TikTok, YouTube, Whatnot or other handle, we periodically look up that account's public profile to confirm it exists and to record its public follower count. We read only what the platform shows to anyone; we never log in as you or access private data. Brands may use verified follower counts to decide who can order from a restricted catalog.

Text messages. We send text messages only if you turn them on in Settings and give us a phone number, or, for brands, if you enter a phone number for order alerts. Texts cover order and account events (a quote ready to pay, an order shipped, a new order for your brand), not marketing. Message and data rates may apply. Reply STOP to any text to turn them off, or switch them off in Settings. We send texts only between 9am and 9pm in your state. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. This applies to every text sent by Canu (CANU LLC).

Push notifications. If you allow notifications in your browser, we send the same order and account events as push alerts to that device. Turn them off in your browser or device settings at any time.

Cookies. Canu uses only the cookies it needs to work: one that keeps you signed in, one that remembers that you confirmed your email on the public catalog, and one that remembers your light or dark preference on this device. We do not use advertising cookies, cross-site trackers, session recording, or third-party analytics.

2. How We Use Information

We use this information solely to operate the platform: fulfilling and syncing wholesale orders, pushing draft orders / fulfillment / tracking between Canu and connected stores, processing payments and refunds, sending transactional email (order notifications, invoices), and keeping accounts secure. We do not sell personal information, use it for advertising, or share it with third parties for their own marketing.

3. Sharing

We share data only with the service providers required to run Canu: Stripe (payments), Shopify (store sync, for connected brands), Supabase (database hosting), Vercel (application hosting), and Resend (transactional email), each bound by their own security and privacy obligations. We may also disclose information when required by law.

4. Security

All data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers. Access to production data is limited to authorized administrators. Webhooks between Canu and Shopify are verified with HMAC signatures.

5. Retention & Deletion

We keep order records for as long as needed to operate the platform and meet bookkeeping and legal obligations. When a merchant uninstalls the Canu app from Shopify, the store's connection is deactivated immediately and its connection data and sync mappings are erased in response to Shopify's data-erasure webhooks.

You may request access to, correction of, or deletion of your personal information at any time by emailing team@canulive.com. We honor applicable rights under state privacy laws (including the CCPA) and the GDPR.

6. Changes

If we make material changes to this policy, we will update the version and effective date above and notify account holders by email.

7. Contact

Questions about privacy or data handling: team@canulive.com.