Legal
Privacy Policy
Last updated: April 12, 2026
Marktplace is built for sellers, not advertisers. We collect only what is necessary to operate your storefront and never sell your personal data.
Contents
Overview
Marktplace (“we”, “us”, or “our”) operates a storefront hosting platform that helps Facebook Marketplace sellers create branded, searchable product pages. This Privacy Policy explains what information we collect when you use Marktplace, how we use it, and the choices you have.
By signing in or using Marktplace, you agree to this policy. If you do not agree, please do not use the service.
Information We Collect
Account information (via Google OAuth)
When you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service. We do not receive your Google password or any payment information. We store only what is necessary to identify your account and display your seller profile.
Store and product data
Information you enter while setting up your storefront — including your store name, URL slug, description, Facebook Page username, product titles, descriptions, prices, conditions, categories, and images — is stored so we can display your public storefront to buyers.
Product images
Images you upload are stored on Cloudflare R2 object storage. Only the public URL to each image is stored in our database. We do not analyse or process the visual contents of your images.
Usage and technical data
We collect standard server logs (IP address, browser type, referring URL, pages visited) and track product view counts on your storefront to power your seller analytics. We do not use third-party advertising trackers or cross-site tracking pixels.
Session data
When you are signed in, a session token is stored in your browser via an HTTP-only cookie so you remain authenticated between page loads. Sessions expire automatically after a period of inactivity.
How We Use Your Information
- Display your public storefront and product listings to buyers
- Authenticate your account and maintain your login session
- Generate your seller analytics (view counts, catalog growth trends)
- Enforce multi-tenant data isolation so each seller accesses only their own store
- Respond to support requests you send to us
- Improve the platform based on aggregate, anonymised usage patterns
- Send transactional communications such as security notices — we do not send marketing email without your explicit consent
Information Sharing
We do not sell, rent, or trade your personal information to third parties. We share data only in the following limited circumstances:
- Public storefront data (store name, product listings, images) is displayed publicly at your /store/[slug] URL — this is the core function of the service and what you opt into by publishing listings
- Your Facebook Page username is used to construct m.me/ links for buyers; we do not communicate with Facebook's API on your behalf
- Infrastructure providers — Neon (PostgreSQL hosting), Cloudflare R2 (image storage), and Upstash (rate limiting) — process data solely to operate the platform under data processing agreements
- If required by law, valid court order, or to protect the safety of users or the public
Data Retention
We retain your account and store data for as long as your account is active. If you delete your account, we delete your personal information, store settings, and product listings within 30 days, except where retention is required by applicable law. Product images stored in Cloudflare R2 are also deleted when you delete your account or remove an image from a listing.
Your Rights
Depending on where you are located, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your account and all associated data
- Export your store and product data in a portable format
- Object to or restrict certain types of processing
To exercise any of these rights, contact us at privacy@marktplace.app. We will respond within 30 days.
Security
We implement industry-standard security measures including HTTPS encryption in transit, HTTP-only session cookies, multi-tenant database isolation (every query is scoped to your store), and rate limiting on all authenticated endpoints.
No system is completely secure. If you discover a security vulnerability, please report it responsibly to security@marktplace.app before disclosing it publicly.
Third-Party Links
Marktplace generates Facebook Messenger links (m.me/...) that open in a new tab. Once you leave Marktplace and interact with Facebook Messenger, your activity is governed solely by Meta's Privacy Policy. We have no control over and assume no responsibility for third-party sites or services.
Children's Privacy
Marktplace is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you via email or a notice on the dashboard. Continued use of Marktplace after changes constitutes your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, please reach out:
Email privacy@marktplace.app