1. Information We Collect
Information you provide to us:
- Account information: name, email address, username, password (stored as a salted hash, never in plain text), and optional profile details such as your photo, banner, bio, website, and location.
- Identity and verification information: phone number, date of birth, address, and, for sellers, business details such as store name, business email and phone, and tax identification number, collected to meet know-your-customer (KYC), tax, and anti-fraud obligations.
- Payout information: your PayPal email or bank account details. Bank details are collected and stored by Stripe; we retain only limited references such as the last four digits.
- Listings and content: product photos, titles, descriptions, condition details, size charts, reviews, and any other content you upload.
- Messages: conversations with other users and trade offers. Message content is encrypted at rest on our servers.
- Transaction information: items bought and sold, order details, shipping addresses, prices, and payment status. Card numbers are processed and stored by Stripe, not by MDFLD.
- Imported data: if you connect a Shopify or eBay account, the listing data, images, and access tokens needed to run the import.
- Communications: messages you send to support and your responses to surveys or promotions.
Information we collect automatically:
- Usage and device data: IP address, browser and device type, pages viewed, actions taken, and timestamps, collected through server logs.
- Cookies and similar technologies: session cookies required to keep you signed in and to secure the Services. See Section 5.
- Trust and risk signals: activity patterns we compute to detect fraud, such as trust scores, risk scores, chargeback and return rates, and audit logs of significant account actions.
We use PostHog to measure how the site is used (pages viewed, searches, clicks to partner sites). We do not sell this data.
2. How We Use Your Information
We use the information we collect to:
- Provide and operate the Services, including creating your account, displaying your listings and profile, processing orders and payouts, generating shipping labels, and enabling messaging and trades.
- Verify identities, screen for fraud, enforce our Terms of Service, and keep the marketplace safe, including computing trust and risk scores and maintaining audit logs.
- Assess the authenticity of listed items through manual review and automated analysis.
- Send transactional communications such as order confirmations, shipping updates, security alerts, and account notices, and, with your consent where required, marketing communications you can opt out of at any time.
- Understand how the Services are used so we can improve them, develop new features, and fix problems.
- Comply with legal obligations, including tax reporting, sanctions screening, and responding to lawful requests.
3. Machine Learning and Model Training
MDFLD builds machine learning technology to detect counterfeit items and fraudulent activity. We use product photographs, listing titles, descriptions, and metadata, verification outcomes, and fraud signals collected on the platform to develop, train, evaluate, and improve these models, as well as models that power search, recommendations, and marketplace safety.
Where practical, we de-identify or aggregate data before using it for training, and we design our training pipelines so that trained models do not expose your personal information. We do not use the content of your private messages to train models used for any purpose other than the safety and security of the Services.
Data that has been incorporated into trained models or de-identified datasets may be retained after you delete content or close your account, as described in Section 7. The license you grant us to use uploaded content for these purposes is described in Section 6 of our Terms of Service.
6. Security
We take security seriously and use technical and organizational measures appropriate to the risk, including encryption of data in transit (HTTPS), encryption of private message content at rest, passwords stored with a modern memory-hard hashing algorithm, optional two-factor authentication and passkeys, role-based access controls, audit logging of sensitive actions, and rate limiting on authentication and other sensitive endpoints.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by law. Please use a strong, unique password and enable two-factor authentication.
7. Data Retention
We retain personal information for as long as your account is active and as needed to provide the Services. After you close your account, we delete or de-identify personal information within a reasonable period, except that we retain:
- Transaction, tax, and payout records for as long as required by tax, accounting, and anti-money-laundering laws.
- Information needed to resolve disputes, enforce our agreements, prevent fraud, or comply with legal obligations, including relevant audit logs and fraud signals.
- De-identified or aggregated data, and data already incorporated into trained machine learning models, which no longer identifies you.
8. Your Rights and Choices
Depending on where you live, you may have rights to:
- Access the personal information we hold about you and receive a copy in a portable format.
- Correct inaccurate information. Most account and profile information can be edited directly in your settings.
- Delete your personal information, subject to the retention exceptions in Section 7.
- Object to or restrict certain processing, and withdraw consent where processing is based on consent.
- Opt out of marketing emails using the unsubscribe link in any marketing message. Transactional emails, such as order confirmations and security notices, will still be sent.
- Complain to your local data protection authority if you believe we have processed your information unlawfully.
To exercise any of these rights, email support@mdfld.co from the address associated with your account. We will verify your identity before acting on a request and respond within the time required by applicable law. We do not discriminate against you for exercising your rights.
9. Children
The Services are intended for users 18 and older. We do not knowingly collect personal information from anyone under 18, and we do not knowingly allow them to transact. If you believe a minor has provided us personal information, contact support@mdfld.co and we will delete it.
10. International Users
MDFLD is operated from the United States, and information we collect is processed and stored in the United States, where privacy laws may differ from those in your country. If you use the Services from outside the United States, you understand that your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses.
11. Additional Disclosures for US State Privacy Laws
Residents of states with comprehensive privacy laws (such as California, Colorado, Connecticut, Texas, and Virginia) have the rights described in Section 8. For those laws: we collect the categories of information described in Section 1; we use them for the purposes in Sections 2 and 3; we disclose them to the service providers and recipients in Section 4; we do not sell personal information and do not share it for cross-context behavioral advertising; and we do not use or disclose sensitive personal information for purposes other than providing the Services and meeting legal obligations.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect, and we will update the effective date above. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your information, email support@mdfld.co. MDFLD LLC, Atlanta, Georgia, USA.
Questions? Contact us at support@mdfld.co.