Marketplace Data Processing Terms

These terms cover data transmitted between marketplace buyers and sellers: authorized input fields (buyer → seller) and delivered results (seller → buyer). They complement each service's machine-readable Data Use Contract, which is the operative declaration for retention, training, human review, sharing, and PII/confidential acceptance.

The gateway transmits only the fields the service contract declares. Credential and secret-classed content is never transmittable. Data classification caps configured in buyer policy are enforced deterministically before payment.

Sellers must process buyer data strictly per their declared contract: honor retention windows and deletion behavior, never train on data when training is declared prohibited, never share with undeclared subprocessors, and report incidents promptly.

Security telemetry records pattern classes and counts only — never payload content, never secret values. Commerce session evidence preserves contract versions, schemas and decisions for dispute resolution without retaining sensitive content unnecessarily.

Actual data-protection obligations depend on the jurisdictions and business relationships involved. These terms will be finalized with qualified counsel; cross-border processing terms and formal DPAs are pending that review.