Facilitrades, LLC ("FaciliTrades," "we," "us," or "our") operates the FaciliTrades platform, an AI-powered peer-to-peer trading network. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.
| Data Type | Examples | Purpose |
|---|---|---|
| Account Information | Email address, username, password hash | Account creation, authentication |
| Profile Information | Display name, profile photo, bio, city or region label, precise location (optional and opt-in) | Platform personalization, nearby discovery |
| Trading Content | Item listings, descriptions, photos, posts | Platform functionality |
| Communications | Messages between users, support inquiries | Trade facilitation, support |
| Transaction Records | Trade proposals, agreements, confirmations | Platform functionality, dispute resolution |
| Payment Information | Billing contact, purchase history, and a payment-processor customer ID. Full card numbers, CVV, and bank credentials are entered directly with our payment processor and never reach FaciliTrades. | Process Ticket and subscription purchases, billing records |
| Data Type | Examples | Purpose |
|---|---|---|
| Device Information | IP address, browser type, operating system, device identifiers | Security, analytics, fraud prevention |
| Usage Data | Pages visited, features used, search queries, timestamps | Platform improvement, AI training |
| Location Data | Approximate location from IP address; if you opt in, precise browser or device coordinates | Regional matching, nearby discovery, fraud prevention |
When you explicitly enable location sharing, we store your precise coordinates to power distance-based discovery. Other users see only the location label you provide or confirm, such as a city or region, and an approximate distance when relevant. We do not publicly expose raw coordinates.
If you later turn location sharing off, the change takes effect immediately: other users stop seeing your city or region on your profile and your listings, and your items and wanted posts no longer appear in other users’ distance-based search results. We continue to store any location you previously entered so you can re-enable sharing without re-entering it. Self-view is never gated — you can always see your own location in your own account. If you want your stored location data permanently removed, use the account deletion flow in Settings to trigger our standard GDPR deletion process.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain platform services | Contract performance |
| Process trades and facilitate exchanges | Contract performance |
| Process Ticket and subscription payments | Contract performance |
| Send transactional notifications | Contract performance |
| Improve AI features (semantic search, listing assistance) | Legitimate interest |
| Prevent fraud and ensure platform security | Legitimate interest |
| Respond to support requests | Contract performance |
| Comply with legal obligations | Legal obligation |
| Send marketing communications (with consent) | Consent |
Our AI features process your data to:
Important: AI processing is designed to improve your experience. You can opt out of non-essential AI features in account settings.
The following information is publicly visible on the platform:
When you engage in trades, the following is shared with your trading partner:
We share data with trusted service providers who assist in operating our platform:
| Provider | Purpose | Data Shared |
|---|---|---|
| Google Cloud Platform | Infrastructure hosting | All platform data (encrypted) |
| Stripe, Inc. | Payment processing for purchases made on the web | Billing email and name, payment method details (entered directly into Stripe), IP address and device data for fraud detection (Stripe Radar), transaction amounts |
| Apple | In-App Purchase processing (iOS app) | Purchase and subscription data necessary to complete App Store transactions |
| Google Play Billing (Android app) | Purchase and subscription data necessary to complete Google Play transactions | |
| Email service provider | Transactional emails | Email address, name |
| Analytics provider | Usage analytics | Anonymized usage data |
| OpenStreetMap / Nominatim | Geocoding (turning city names into coordinates and vice versa) when you set a location in your profile or use “Use my current location” | The text you type in the location picker, or your device coordinates if you opt in. Sent only when you interact with the picker — never in the background. |
All service providers are bound by data processing agreements. Map and location data © OpenStreetMap contributors, available under the Open Database License.
We may disclose information when required by law, court order, or government request, or to:
Child safety reporting.Where we detect or become aware of content that appears to constitute child sexual abuse material (CSAM), U.S. federal law (18 U.S.C. §2258A) requires us to report it — together with the associated content and account information — to the National Center for Missing & Exploited Children (NCMEC) through its CyberTipline, and to preserve that material for the period required by law. This reporting is mandatory and occurs without prior notice to the affected user.
When you purchase Tickets or a subscription, your payment is processed by a third-party processor acting on our behalf, depending on the platform you use:
FaciliTrades retains only the records needed to deliver your purchases and meet legal and tax obligations — a payment-processor customer ID, your subscription status, and transaction history (amounts, dates, and product purchased). You may request deletion of your payment-processor customer ID by contacting info@facilitrades.com; transaction records required for legal or tax compliance may be retained in anonymized form.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | Duration of account | Service provision |
| Closed account data | 30 days after closure | Reactivation period |
| Trade records | 7 years | Legal/tax requirements |
| Support communications | 3 years | Dispute resolution |
| Server logs | 90 days | Security, debugging |
| AI usage logs | 12 months | Billing, service improvement |
| Payment transaction records | 7 years | Legal/tax requirements |
| Payment-processor customer ID | Duration of account + 7 years | Billing continuity, refund processing |
| CSAM evidence (confirmed reports) | 90 days after CyberTipline report; longer only on government request | Legal preservation duty (18 U.S.C. §2258A(h)) |
| Moderation & safety records | 3 years after resolution | Abuse investigation, platform safety |
Upon verified deletion request:
You have the right to:
Additional rights under GDPR:
Additional rights under CCPA:
To exercise your rights, contact us at:
We will respond within 30 days (or sooner as required by applicable law).
We implement appropriate technical and organizational measures:
| Measure | Implementation |
|---|---|
| Encryption in transit | TLS 1.3 for all connections |
| Encryption at rest | GCP default encryption (AES-256) |
| Access controls | Role-based access, principle of least privilege |
| Authentication | JWT tokens, OAuth 2.0, optional MFA |
| Monitoring | Automated threat detection, audit logging |
| Incident response | Documented breach notification procedures |
Your data is stored on Google Cloud Platform servers in the United States (us-east4 region).
For EU/EEA users, transfers are protected by:
FaciliTrades is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of data collected from a child under 13, we will delete it promptly.
Content involving the sexual exploitation of a minor is handled differently from ordinary under-13 data: where we detect apparent child sexual abuse material (CSAM), we do not simply delete it. As required by 18 U.S.C. §2258A we preserve it in a restricted, access-limited store and report it, together with associated account information, to the National Center for Missing & Exploited Children (NCMEC) and cooperate with law enforcement.
Important: FaciliTrades is a non-custodial platform. We do not hold, store, or control:
Users arrange fulfillment directly with each other. We provide matchmaking, agreement structuring, and reputation tracking only.
We may update this Privacy Policy periodically. Changes will be posted with an updated "Last Updated" date. Material changes will be notified via:
Continued use after changes constitutes acceptance.
All Inquiries: info@facilitrades.com
Fenrir Consulting, LLC (50% Founding Member)
Email: info@facilitrades.com