Privacy Policy

1. Introduction

MarketConfig (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, store, and safeguard data when you use the MarketConfig platform, including our website, applications, and related services (collectively, the “Platform”).

By accessing or using our Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

We collect the following categories of information to operate and improve our Platform:

2.1 Information You Provide

• Account Information — Name, email address, phone number, and organization details when you create an account or are invited to the Platform.
• Business Information — Business name, address, tax identification number, vendor categories, certifications, and licensing information submitted through vendor onboarding applications.
• Communication Data — Messages, announcements, and communications sent through the Platform’s messaging system.
• Documentation — Business licenses, permits, insurance certificates, and other documents uploaded during onboarding or compliance processes.
• Financial Information — Booth payment records, transaction histories, and billing details processed through the Platform.

2.2 Information Collected Automatically

• Usage Data — Pages visited, features used, actions taken, and timestamps of activity within the Platform.
• Device Information — Browser type, operating system, device type, and screen resolution.
• Log Data — IP addresses, access times, and referring URLs for security monitoring and system performance.

2.3 Information from Third Parties

• Authentication Providers — When you sign in, we receive basic profile information (name, email) from our authentication service to create and maintain your account.
• Organization Administrators — Your organization administrator may provide your contact information when inviting you to the Platform.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Platform Operations — To provide, maintain, and operate the MarketConfig platform, including user authentication, vendor management, market operations, and reporting.
• Vendor Onboarding — To process and review vendor applications, verify business credentials, and manage approval workflows.
• Communications — To send operational notifications, emergency alerts, training reminders, and other messages directly related to your use of the Platform.
• Security & Compliance — To detect and prevent fraud, enforce our terms, monitor for security threats, and maintain audit trails as required by applicable regulations.
• Analytics & Improvement — To analyze usage patterns, generate performance metrics, and improve the Platform’s features and user experience.
• Customer Support — To respond to your inquiries, troubleshoot issues, and provide technical assistance.

4. Data Ownership

Organizations and users retain ownership of their original business documents (licenses, permits, certifications) that are uploaded to the Platform. However, the digital copies stored within the Platform and any derived data remain the property of MarketConfig.

5. No Third-Party Data Sharing

Your data will never be shared with external parties except in the following limited circumstances:

• Service Providers — We use trusted infrastructure providers (hosting, authentication, database services) that process data solely on our behalf and under strict contractual obligations to protect your information.
• Legal Requirements — We may disclose information if required by law, regulation, legal process, or enforceable governmental request.
• Safety & Protection — We may share information when we believe in good faith that disclosure is necessary to protect the rights, safety, or property of MarketConfig, our users, or the public.
• Business Transfers — In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction, subject to the same privacy protections described in this policy.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Role-based access controls with a 5-tier permission hierarchy.
• Regular security audits and vulnerability assessments.
• Secure authentication through our identity management provider.
• Automated audit trails and activity logging for accountability.
• Row-level security policies on all database tables to ensure tenant isolation.

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain certain data as required by applicable laws, to resolve disputes, enforce agreements, or for legitimate business purposes such as maintaining audit records.

When data is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of inaccurate or incomplete personal information.
• Deletion — Request deletion of your personal information, subject to legal retention requirements.
• Portability — Request your data in a structured, machine-readable format.
• Opt-Out — Opt out of non-essential communications at any time.

To exercise any of these rights, please contact us at the email address provided below.

9. Cookies & Tracking

The Platform uses essential cookies and local storage for authentication, session management, and user preferences. We do not use third-party advertising cookies or cross-site tracking technologies.

10. Children’s Privacy

MarketConfig is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify users of material changes by posting a notice on the Platform or sending a direct notification. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: