Privacy Policy

1. Who is responsible for your data

FabriTrade decides how your personal data is used for fabritrade.net and the FabriTrade app (we are the “controller”). Contact: support@fabritrade.net.

2. What we collect

Information you give us

• Account: name or business name, email address, password (stored only as a secure scrambled “hash”, never in plain text), whether you buy or sell, and country if you add it.
• Listings: fabric details, prices, photos and other content you post.
• Orders and requests: what you order or sell, quantities, prices, order status, requests for quotes (RFQs) and offers.
• Messages: the chats you send to other users on FabriTrade, and machine translations of them (see section 5).
• Assistant questions: what you type into the AI assistant.
• Waitlist: if you join the waitlist, your email, whether you want to buy or sell, your country, the fabrics you are interested in, your language, and when you agreed to receive updates.
• Swatch requests: if you request a free swatch, your email, and if you add them your name, company, country, the quantity you might order and your note. We use this only to reply about the swatch. Sellers never see your email.
• Seller submissions (“We list it for you”): your shop name, Zalo or phone number, optional email, market or area, fabric details, prices and photos. We use your Zalo or phone number only to confirm and manage your listing. It is never shown publicly. Your shop name, fabric details and photos become public only after you confirm the listing.
• Password reset: if you ask to reset your password, we store a one-time code that expires after 1 hour.
• Support: anything you send to support@fabritrade.net.

Information created when you use FabriTrade

• Safety signals: if a message looks like a scam (for example asking to pay outside FabriTrade, or sharing a phone number or email), we save a flag with the message and the reason.
• Technical data: your IP address is used briefly to limit abuse (for example too many assistant questions); our hosting providers may keep standard server logs.
• Visitor counts: we count how many people visit each page per day. We do this without cookies or trackers: the server makes a one-way scrambled code from your IP address and browser type that changes every day and is kept only in memory, so we can't recognise you on another day. We store only the daily totals.
• On your device: we store your login token, language and some app settings in your browser's local storage so the site works. We do not use advertising or tracking cookies.

If we start using payments, our payment provider will collect payment details directly; we will update this policy first.

3. How we use it

• To create and run your account and let you log in.
• To show your listings, process orders and RFQs, and let you message other users.
• To keep FabriTrade safe: detect scams and abuse, review flagged messages, handle disputes and enforce our Terms.
• To send launch updates to people on the waitlist who asked for them. Every email includes a one-click unsubscribe link.
• To reply to swatch requests and to publish listings sellers send us after they confirm them.
• To send service emails you need: password reset links, swatch request confirmations and, at most once an hour, a note that you have a new message. These are not marketing emails.
• To count visitors (totals only) so we know whether FabriTrade is useful.
• To answer your questions and provide support.
• To run AI features (see section 6).
• To meet legal, tax and accounting duties.

Our legal reasons for this are: to provide the service you asked for (our contract with you); our legitimate interest in keeping the marketplace safe and working; your consent where the law requires it (for example when you sign up and agree to this policy); and legal obligations. You can withdraw consent at any time by deleting your account.

4. Who can see your information

• Other users can see your name or business name, country, “Verified” badge, your listings, and RFQs you post. They cannot see your email address.
• Chats can only be read by you and the other person in the conversation.
• FabriTrade (the platform owner) can see account details and order records, and can read messages that are automatically flagged as possible scams, messages linked to a dispute or a report, and all messages in data backups. We only look at messages to keep users safe, resolve disputes, or when the law requires it. Messages are protected in transit (HTTPS) but are not end-to-end encrypted.
• Authorities: we may share information if the law requires it, or to prevent fraud or protect someone's safety.

We do not sell your personal data and we do not share it with advertisers.

5. Service providers we use

These companies help us run FabriTrade and only process data on our behalf:

• Render (United States): runs our server.
• Upstash (United States): stores the FabriTrade database (accounts, listings, orders, messages).
• Netlify (global): hosts the website pages.
• Google (Gemini API): receives the questions you type into the AI assistant, and public news headlines for AI Price Watch. We use Google's free tier, under which Google may use the text it receives to improve its products. Please don't type personal or confidential information into the assistant.
• Google (Gemini API), chat translation: when the person reading a chat has Translate messages turned on (it's on by default), the text of the messages they receive is sent to Google to be translated, and the translation is stored with the message so it's only translated once. Under Google's free tier, Google may use this text to improve its products. Your name, email and phone number are not sent, only the message text. You can switch translation off at the top of any chat; messages you send may still be translated if the other person has it on, so don't put anything in a chat you wouldn't want translated.
• Resend (United States): sends our service emails (password resets, swatch confirmations, new-message notices). It receives your email address and the email content.
• Cloudinary (United States): stores and serves listing photos. It receives the photos you upload, not your account details.
• Uptime monitoring: a service checks that our server is online. It receives no user data.

6. AI and automated checks

Messages are checked automatically by our own software (not sent to an outside AI) for signs of scams, such as requests to pay outside FabriTrade or sharing contact details. A flag does not punish anyone by itself: a person at FabriTrade reviews flagged items before taking action such as suspending an account. You can contact us to ask about or challenge any decision.

7. International transfers

FabriTrade is used around the world, and our main servers are in the United States. When you use FabriTrade from another country (including Vietnam, China or the European Union), your data is transferred to and stored in the United States. We rely on your consent and on the need to provide the service to you for this transfer, and we choose providers that use industry-standard security.

8. How long we keep it

• Account, listings and messages: while your account is open.
• After you delete your account: we delete or anonymise your data within 30 days, except records we must keep for disputes, fraud prevention, tax or legal reasons (for example order records), which we keep only as long as needed.
• Swatch requests: up to 12 months, then deleted. Ask us any time to delete one sooner.
• Seller submissions that are not published: up to 6 months, then deleted.
• Visitor counts: daily totals for about 4 months; nothing personal is stored.
• Waitlist: until you unsubscribe, or 12 months after our full launch, whichever comes first.
• Backups are overwritten over time.

9. Your rights

Depending on where you live (for example under Vietnam's Personal Data Protection Law, the EU/UK GDPR, or US state privacy laws), you may have the right to:

• know what data we hold about you and get a copy;
• correct wrong data;
• delete your data and account;
• withdraw consent, or object to or limit some uses;
• complain to your local data protection authority.

You can delete your account yourself in the app: open Help and choose Delete my account. To use your other rights, email support@fabritrade.net from the email on your account. We will reply within 30 days, or sooner where the law requires.

10. Security

We use HTTPS encryption in transit, hashed passwords, expiring login sessions, hidden contact details and automatic scam checks. No system is perfectly secure. If a data breach affects you, we will tell you and the authorities as the law requires.

11. Children

FabriTrade is for adults (18+ or the age of majority where you live). We do not knowingly collect data from children. If you think a child has created an account, contact us and we will delete it.

12. Changes

We will post updates here with a new date, and tell you in the app or by email about important changes.

This document is written in English. If we provide a translation, the English version applies where they differ. Questions: support@fabritrade.net