Effective September 2, 2026 · Founder preview

Privacy policy

This policy describes how Marketplace Pilot processes information when sellers prepare and optimize listings, import buyer conversations, request AI assistance, monitor performance, or connect supported services.

1. Scope and roles

Marketplace Pilot operates the service and generally determines how account, security, usage, and subscription information is processed. A seller determines what listing and buyer-conversation information to submit and is responsible for having authority to provide it. Depending on the final offering and applicable law, Marketplace Pilot may act as a service provider or processor for that seller. The final legal entity and business address must be inserted before public enrollment.

2. Information processed

• Account and workspace: name, email, profile image, authentication identifiers, membership, preferences, and support communications.
• Listings and media: titles, descriptions, photos, videos, category, condition, location, price, confidential pricing floor, barcode or VIN, inventory, and product facts.
• Buyer and lead information: names or profile labels, seller-imported conversation text, offers, appointments, follow-up status, drafts, and transaction outcomes.
• Performance and experiments: views, saves, inquiries, sales, revenue, listing changes, comparisons, and optimization history.
• Connected services: authorized identifiers, permissions, status, and encrypted access tokens. An eligible Facebook Page connection may provide its name, ID, approved permissions, and Page Messenger text; it does not provide general personal Marketplace inbox access.
• Technical information: request metadata available to hosting and security systems, device/browser information, timestamps, errors, and audit or security events.
• Billing: plan, subscription status, and provider identifiers. A payment processor, when enabled, processes card details; Marketplace Pilot should not store complete card numbers.
• Waitlist: an email address entered in the home-page waitlist form is collected through our site’s form host (Netlify) and used only to tell you when Marketplace Pilot opens. To have it deleted, email support@marketplacepilot.app.

3. Sources

Information comes from sellers, authorized team members, chosen integrations, buyers whose messages a seller imports or receives through an approved channel, and service or security providers. Product-identification and comparable-listing providers may return information for seller-submitted identifiers or searches.

4. Uses and legal bases

Information is used to provide and secure accounts; create listing packages; store seller rules; analyze performance; prepare seller-reviewed replies and follow-ups; facilitate scheduling; operate authorized integrations; provide support; prevent abuse; comply with law; and improve reliability. Where applicable, processing is based on the service contract, legitimate interests in operating and securing the product, consent for optional integrations or communications, and legal obligations. Jurisdiction-specific legal bases must be documented before international availability.

5. AI processing

When a seller invokes an AI feature, the minimum information reasonably needed may be sent to the configured AI provider. Outputs can be inaccurate. Seller approval and the AI Messaging Policy govern sales drafts. Buyer conversations are not sold or used by Marketplace Pilot for behavioral advertising.

6. Disclosure and subprocessors

Information may be disclosed to providers performing hosting, authentication, storage, AI processing, communications, analytics, support, security, and payments; to an integration at the seller’s direction; in a safeguarded corporate transaction; or when reasonably necessary for law, rights, safety, fraud, or abuse. Marketplace Pilot does not sell personal information. See Subprocessors.

7. Browser extension

The extension runs only after the seller clicks. It can read selected text or the visible conversation panel in the active tab, show a preview, and copy approved text locally. It has no background worker or standing Facebook host permission and does not collect Facebook passwords, cookies, tokens, or browsing history. See the Extension Disclosure.

8. Retention

During the founder preview, workspace data remains available while the account is active or until deleted using an available control. Disconnecting Meta deletes the stored Page connection token and pending webhook events for that connection. Security, fraud, dispute, tax, billing, backup, and legal records may remain where reasonably necessary or required. Before external enrollment, Marketplace Pilot must approve and enforce a category-by-category schedule for buyer messages, media, inactive workspaces, backups, and logs.

9. Privacy rights

Depending on location and law, individuals may request access, correction, deletion, portability, restriction, objection, or disclosure information, and may appeal certain decisions. Requests will be verified proportionately without unlawful discrimination. Signed-in sellers can download a workspace export and schedule workspace deletion from Account. See Data Controls. Individual-record correction and deletion, a monitored privacy contact, and jurisdiction-specific request operations remain launch gates.

10. Security and international processing

Current safeguards include authenticated and tenant-scoped workspaces, HTTPS, encrypted Meta tokens, signed webhook validation, least-privilege permissions, and seller approval gates. No system is completely secure. Vendors may process information in the United States or disclosed locations; required transfer mechanisms and data-processing agreements must be confirmed before international availability.

11. Children, changes, and contact

The service is intended for adults and is not directed to children under 13. A higher age may apply by jurisdiction or marketplace. Material changes will receive a new date and appropriate notice. The operator’s legal name, postal address, and monitored privacy contact are required before public enrollment.