Privacy policy

1. Data controller

Marketplace Factory, 6 rue d’Armaillé, 75017 Paris, SIREN 943 924 639. For any question about your data: contact@marketplacefactory.com.

2. Our role, depending on the data

We are the data controller for the data of website visitors, studio users and our customers (account, subscription, invoicing, correspondence).

For the data of the users of a marketplace created with Marketplace Factory (its buyers, its sellers, their listings and their messages), the data controller is the company that publishes that marketplace; we act as its processor. To exercise your rights over this data, contact that company first: its contact details are on its marketplace.

3. The data we process

• Browsing: visitor identifier, IP address, browser type, pages requested, date and time, technical logs.
• Studio: the sentences you write, your choices, your edits, the text and photos you import, your drafts and your recovery code.
• Account: name, email address, password (stored with irreversible encryption), company, or Google sign-in identifier.
• Subscription and invoicing: plan, billing details, VAT number, payment and invoice history. Card numbers are processed by Stripe and never reach us.
• Correspondence: your messages and our replies.
• Acceptance of the terms: the version of the terms accepted when your account was created, its date, and how it was accepted (checkbox or “Continue with Google” button).
• Professional declaration at purchase: the box ticked before each purchase, its date, the version and language of the text read, the purchase concerned (subscription, plan upgrade, credit top-up) and the payment it is linked to.

4. Why, and on what legal basis

5. How long

• Visitor identifier: 180 days after it is set in your browser; it may be set again when you sign in to your account.
• Proposals and drafts without an account: deleted, with the photos you uploaded to them, 180 days after they were last modified. A draft linked to an account follows the account’s retention period.
• Sign-in code sent by email: ten minutes; only its fingerprint is kept, like the address that asked for it.
• Account and studio data: for the duration of the relationship, then three years after the last activity or the end of the subscription.
• Marketplace data: for the duration of the subscription, then thirty days for export, before deletion.
• Database backups: daily, kept for thirty days (restorable to the minute), then erased.
• What the studio erases (for example drafts, uploaded photos, messages, the artificial intelligence log): a backup copy remains in our storage for about thirty days, inaccessible to the service, then disappears.
• Deleted photos: recoverable for thirty days, then erased.
• Export archives: erased thirty days after they are created.
• Invoices and accounting records: ten years (article L. 123-22 of the French Commercial Code).
• Technical logs: ninety days.
• Measurement of the proposals page: ninety days.
• Cost of artificial intelligence, per customer: thirteen months; the visitor identifier is removed from it after thirty days.
• Job applications and CVs: erased two years after their last activity.
• Quote requests and unsigned quotes: erased three years after their last activity, photos included; a signed quote and its invoices follow the retention of accounting records. The IP address and browser recorded with the signature are erased five years after the quote ends.
• Refused sentences (prohibited activities): six months.
• Correspondence: three years after the last message, even after your account is deleted; in case of a dispute, until it is resolved; a message set aside by our filter against unsolicited sales pitches is erased after thirty days.
• Proof of your acceptance of the terms and of your professional declarations at purchase: for the life of the account, then five years after its deletion, without your name or email address. A declaration that is not followed by any payment is erased after ninety days.
• Shared photo library: photos created for an idea from a universe recipe and a trade’s subject, without your content, serve the next ideas; those created from your content stay in your project.
• Content reports and decisions: twelve months after the decision, then anonymised.

6. Tracking of your activity: presence, sessions, origin and sentences of your creations

When you are signed in, in the studio, in the back office of your marketplace and also on our public pages (blog, pricing…), our team can see that you are there and which step you are at (on the home page, looking at your proposals, in the editor, on the go-live page…), as well as the steps of your creations. This helps us assist you when you write to us, spot a blocking issue, secure the service and improve it.

• What is recorded: on each page you open, and about once a minute while the tab is displayed, your account, the step (the type of page, such as home, proposals or editor, never its address), the draft or site concerned, the country inferred from your connection, the type of device (computer, phone or tablet) and the language.
• Your sessions: the time you signed in, how you signed in (password, code received by email, Google…), the country and type of device, the site when it is the back office of a marketplace, the last sign of activity, then the time and reason the session ended (sign-out, expiry…).
• Your daily activity: the time of your first and last sign of activity, the number of active minutes, the start and end time of each of your visits, the steps you went through, your subscription plan that day, the country and type of device.
• What this tracking does not keep: neither your IP address, nor the full identification of your browser, nor the address or content of your pages. Nothing more is written to your browser: the signal travels over the session that is already open.
• Without an account: your presence is not tracked; none of the above is recorded. Only the sentence of a creation (below) and the steps of that creation may be, with your visitor identifier, which is removed from the steps after thirty days. The technical log of AI calls (below) keeps this identifier for ninety days at most, as well as an identifier derived from the website assistant’s cookie if you write to it.
• At sign-up: we may record where you came from: the referring site (its domain name only, never the full address of the page), the first page you viewed on our site, the source, medium and name of a campaign (utm parameters), the name, never the value, of an ad click identifier, as well as the country, type of device and language at sign-up. This information stays attached to your account for as long as it exists.
• The sentences of your creations: each sentence that starts a creation is also kept separately, for six months at most, with your account identifier and, where applicable, your visitor identifier, and its language. Our team only reads it when needed, to help you or understand a blocking issue, and every reading from our console is logged.
• The technical log of AI calls: each call to artificial intelligence during a creation is recorded there, with the step, the model, its outcome (and, for a moderation refusal, its reason, a short code), its duration, the amount of text processed, its cost, the credits debited for it or the fact that it was free, the creation and the draft concerned and, where applicable, the site, your account and your visitor identifier (without an account, that identifier only); never the text of your requests or the answers. Calls by the website assistant are recorded there too, without an account or draft, under an identifier derived from its cookie; those lines are used only to monitor the cost of AI. It is used to apply the usage caps (per day, per account, per site), which prevent abuse, and to monitor the cost of AI; it is erased after ninety days at most, the assistant’s lines included.

Retention: live presence clears itself within a few minutes; the session log is kept for ninety days after the end of each session; daily activity is kept for thirteen months, then detached from your account; the steps of your creations, thirteen months, then detached from your account; the technical log of AI calls, ninety days at most; the origin of your sign-up, as long as the account exists; the sentences of creations, six months. Deleting your account erases its presence, its sessions and its activity, and detaches the steps of its creations from it. The sentences of creations are not erased with the account: they expire after six months. The technical log of AI calls is not erased with the account either: it expires after ninety days at most.

Legal basis: our legitimate interest in operating, securing and improving the service and in assisting you. Only the members of our team who need it have access, and their consultations from our console are logged. You can object to this tracking by writing to contact@marketplacefactory.com. For your account, we then stop recording your presence, your daily activity and the sentences of your creations, and erase the daily activity already recorded; the steps and cost of your creations, past and future, and the origin of your sign-up are detached from your account; sentences already kept expire after six months at most. Only two logs continue to be kept, on compelling grounds: the session log, for the security of your account (spotting a sign-in that is not yours), and the technical log of AI calls, which keeps your account with each step and its cost for ninety days at most, for the usage caps that prevent abuse. Your credit wallet (purchases, debits, refunds) and your invoices are not part of this tracking: they fall under your contract and our accounting obligations; the technical log of AI calls only repeats, for each call, the credits debited.

7. Who has access: our subprocessors

Your data is accessible only to the members of our team who need it, and to the following providers, who act on our instructions and under contract:

8. Content from other companies

Some features make your browser load content directly from another company. That company then receives your IP address and technical information (browser type, page you came from), and its own privacy policy applies:

• OpenFreeMap: map backgrounds, when a map is displayed (example tours, website previews).
• Unsplash: mood photos, when you hover over or open “Filters” in the home page box, and in the studio after you send your sentence.

The details are on the Cookies page.

9. Transfers outside the European Union

Some providers process data in the United States. These transfers are governed by the European Commission’s standard contractual clauses or, for certified companies, by the EU–US Data Privacy Framework. We send our artificial intelligence providers only what the requested task needs: your sentence, the text to edit, the description of a photo — never your account or payment data.

10. Security

Encrypted connections, irreversibly encrypted passwords, separation of each marketplace’s data, restricted and logged access, daily backups kept for thirty days: we take technical and organizational measures suited to the risks. In the event of a data breach posing a risk, we notify the CNIL (the French data protection authority) and, where necessary, the people concerned.

To protect email sign-up from automated abuse, Cloudflare Turnstile invisibly checks that the request really comes from a browser: technical browser signals are analysed at the time of the request, for this check only.

11. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, as well as the right to set instructions for what happens to your data after your death. Write to contact@marketplacefactory.com; we reply within one month, and may ask you to prove your identity if in doubt.

From your account, you can also download your data and delete your account yourself. A deleted account is anonymised immediately, with a few exceptions, including refused sentences (prohibited activities) and the sentences of creations, which expire after six months, and the technical log of AI calls, which expires after ninety days at most (sections “How long” and “Tracking of your activity”). Your correspondence with our team is kept for three years after the last message. Accounting records are kept, without your name, for their statutory period.

If you believe your rights are not being respected, you can lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr.

12. Cookies

We set cookies so that the service and the features you use can work; no cookie is set solely for audience measurement, nor for advertising. When you are signed in, your account cookies and, in the back office of your marketplace, its session cookie are also used for the tracking of your activity (section “Tracking of your activity”): it is based on our legitimate interest, and you can object to it. The measurement of the proposals page, with no lasting identifier, uses no cookies and no browser storage. The full list of the cookies of our website and the studio, with their duration, is on the Cookies page. You can refuse this measurement there (“Don’t count my actions”): a cookie then keeps your refusal.

13. Changes

We may update this policy, in particular if we change providers. The date of the last update appears at the top of the page; our customers are notified by email of any significant change, and of any new sub-processor for their marketplace’s data.