PublicMarket Privacy Policy

PublicMarket processes account, business-profile, inquiry, review, subscription, billing, security, and privacy-request information only for declared platform, contractual, security, legal, and support purposes. Precise payment-card data, CVV values, passwords, reset tokens, gateway credentials, webhook secrets, and authentication secrets are not part of PublicMarket's application records.

Personal information may be shared only as necessary with service-provider categories such as payment gateways, hosting and object-storage providers, email delivery services, analytics providers, professional advisers, and lawful authorities. Each provider must receive only the information required for its documented purpose and remain subject to appropriate contractual and security safeguards.

Retention is assigned by data category. Account and business data is kept while the service relationship is active and for a documented closure period. Billing, accounting, fraud-prevention, security, legal-claim, audit, and regulatory records may be retained longer where a legitimate obligation applies. Information is securely deleted or anonymized when its approved retention period expires and no legal hold or other lawful reason remains.

Depending on the applicable legal basis and limitations, data subjects may request access, correction, objection, erasure or blocking, portability, and consent or preference changes through the authenticated Privacy Center. Requests are identity-verified, tracked, and audited. Consent can be withdrawn for optional processing without affecting processing that remains necessary under another lawful basis.

PublicMarket uses role-based access control, least privilege, secure authentication, encryption in transit, protected cookies, request validation, rate limiting, audit records, and incident-response procedures. A centralized incident and personal-data-breach register supports risk assessment, containment, decision records, and required notification workflows, including the applicable 72-hour escalation timeline.

Questions or privacy requests may be submitted through the PublicMarket Contact page or the authenticated Privacy Center. This notice is a product baseline and must be reviewed with the deployed operator's current contact details, processors, retention schedule, and National Privacy Commission obligations before production launch.

Publicly available business information

When a Business Owner registers, creates, claims, manages, or publishes a Business, the owner acknowledges that PublicMarket may, where legally permitted, collect, verify, organize, process, enrich, and display business information lawfully obtained from legitimate public internet sources. These include official business websites, public social media business pages, and public business directories.

Public Business Information means information publicly presented for commercial or business purposes: business names, categories, descriptions, public addresses or service areas, public telephone numbers and business email addresses, operating hours, advertised Products and Services, social/profile links, and other directly business-related information. Images, logos, and branding may be used only where PublicMarket has the legal right or authorization to use them. Public availability does not transfer ownership or waive intellectual-property rights.

Permitted platform purposes include creating and improving Business profiles, verifying information, improving discoverability and PublicMarket Search, helping customers find Products, Services, Businesses and Branches, improving Google and other search-engine visibility, categorization, location accuracy, recommendations, marketplace quality, duplicate and inaccurate listing detection, Business Rankings and discovery, and aggregated analytics and marketplace insights. Search-engine indexing or placement is not guaranteed.

Personal Information concerns an identifiable individual, including a Business Owner. Business contact details can also be personal information, particularly for sole proprietors. Public availability alone is not permission for unrestricted collection or reuse. Personal information processing must have an appropriate lawful basis and purpose, follow the Privacy Policy and applicable data-protection requirements, minimize data, and preserve authorization and security controls. PublicMarket must not scrape, collect, expose, or republish sensitive or unrelated personal information merely because it is accessible online. Private account details, authentication data, payment information, and private customer or owner information must not become public listing content.

Owners can review displayed Business information and correct or update owner-managed fields through their dashboard. Report incorrect externally sourced information, request verification, or request appropriate review or removal through Contact PublicMarket; use the authenticated Privacy Center for personal-data requests. Include the public Business page and disputed field, without sending secrets or unrelated personal details. Where technically practical, PublicMarket will distinguish owner-provided information from publicly sourced or verified information. Conflicts require appropriate verification; externally sourced information must not automatically overwrite authoritative owner-managed data. Requests remain subject to identity/authority checks, applicable rights, and lawful retention duties. Draft, unpublished, and restricted records remain subject to existing publication and access rules.

Account use is also governed by our Terms of Service. Material changes requiring renewed acceptance will be presented for explicit acknowledgement; historical accounts are not automatically treated as having accepted them.