FACTORYMORE · UPDATED 26 SEPTEMBER 2026
Privacy Policy
About this policy
This policy explains how FactoryMore handles information when you browse industrial content, create an account, represent a company, publish products, send inquiries or use support. It distinguishes public business information from private account and conversation records. The policy also describes controls available in the interface and the circumstances in which an external provider may receive information. Read the relevant feature notice before submitting information about yourself or another person. A public company profile is not an appropriate place for passwords, identity documents, private financial records or confidential negotiation details.
Account and professional information
Registration and onboarding may collect your name, email, phone number, account role, company name, department or position, country, city, sector, employee range, trade-volume range, represented-brand range, best-selling products and how you heard about FactoryMore. The questionnaire varies by buyer, distributor or manufacturer role. Profile photographs and company logos are optional uploads where the interface permits them. Account identifiers, creation dates, verification state, sharing preferences and recorded agreement acceptance support account administration. Information supplied as a range remains the range you selected; it should not be presented as an independently audited business figure.
Public listings and company pages
Published company descriptions, product specifications, media, sector, location and other explicitly public fields may be visible to visitors and search engines. Public content can be copied or cached by third parties outside FactoryMore’s control. Draft, pending and archived records are subject to the platform’s access rules and should not appear as published listings. Removing a listing from FactoryMore does not guarantee immediate removal of an earlier search-engine cache. Do not upload personal information about employees or contacts unless you have an appropriate basis and have informed them of the intended use.
Messages, inquiries and attachments
FactoryMore stores the content, participants, source listing, timestamps and relevant status of messages, product inquiries, RFQs and partnership applications so participants can manage their discussions. Conversation attachments may contain proposals or specifications; only include material needed for that discussion. The contact-sharing prompt allows you to choose which supported professional profile fields accompany your communication, and your saved preference can be changed in Account settings. Information deliberately typed into a message is disclosed as part of that message regardless of the separate profile-field switches. Administrators may access communications for authorised support, moderation, security and operational purposes.
Verification documents
Company-registration and tax documents are private submissions for authorised company review. Uploaded files are encrypted using AES-256-GCM and are not assigned public download URLs. Authenticated access and ownership or administrative authority are required to download them. Tax identifiers and review metadata are stored in the protected database; they are not described as separately field-encrypted. A submission stays pending until an authorised administrator records a decision. Reviewer identity, review time and the decision form part of the audit record. Manual review is not antivirus scanning or an independent guarantee of the business’s future conduct.
Security and contact verification
FactoryMore processes session information, security events, rate-limit records and verification status to protect accounts and reduce abuse. Cloudflare Turnstile evaluates a browser challenge during account creation; the backend validates the resulting token before creating an account. This involves communication with Cloudflare. Phone verification, when requested and configured, uses Vonage Verify V2 for a one-time SMS code. The phone number and verification request are sent to that provider; FactoryMore retains request state but does not store the SMS code. The phone service is not used for marketing, WhatsApp, voice calls or notification SMS.
Payments and memberships
Membership records can include the selected plan, term, activation and expiry dates, payment method preference, agreement version and acceptance time. Where live payment providers are later enabled, the relevant checkout will identify the payment process and information required. The current payment-preference mechanism does not itself collect money or change a plan. Do not send full card numbers, bank login information or wallet recovery phrases through support or member messages. Necessary accounting, reconciliation and dispute records may require retention independently of whether a public profile remains visible.
Visits, analytics and advertising
The platform can record permitted company and product visits, the viewed resource, time, country-level information and relevant referral context to provide business analytics. Optional analytics and advertising measurement are governed by the applicable cookie preference and feature configuration. An identifiable company visit may be based on a signed-in company account or, if separately enabled, an external enrichment service. Such identification is an inference and can be incomplete or inaccurate; it does not reveal every anonymous visitor’s identity. The availability of an analytics feature does not mean every enrichment provider is connected. Contextual sponsored content may be shown independently of optional measurement.
Why information is used
Information is used to create and secure accounts, complete requested onboarding, display authorised business listings, deliver conversations and support, administer memberships, review documents, maintain audit records and improve the operation of the platform. The applicable basis may include steps requested before a contract, performance of a contract, a legal obligation, consent or a legitimate interest assessed against the individual’s rights. Optional marketing is not treated as necessary to create an account. Consent and contract acceptance are recorded separately. Information should not be reused for an unrelated purpose without considering the relevant basis and notice requirements.
Service providers and other recipients
Information may be made available to another participant when you choose to contact them, to the public when you publish a listing, and to authorised staff or processors where needed for the requested service. Enabled providers may support hosting, bot protection, email delivery, SMS verification, translation, meeting connections, payments or analytics. Each integration should receive only the information required for its function. Authorities or professional advisers may receive information where a valid legal requirement or necessary claim-handling basis applies. FactoryMore does not promise that all integrations shown in development are live or that every provider operates in the same country.
International processing
Providers and trading partners may process information in countries different from your own. Before an international transfer is enabled, the appropriate transfer rules and safeguards must be assessed for the information and service concerned. These may include adequacy arrangements or contractual safeguards where applicable. A member who sends an inquiry to a business abroad should understand that the intended recipient may handle the shared information under its own responsibilities. This policy does not declare all possible international transfers automatically compliant merely because a provider is widely used.
Retention and deletion
Information should be retained for the purpose for which it is needed, taking into account an active account, unresolved inquiries, disputes, security investigation, legal requirements and recovery needs. Temporary verification records expire and are cleaned up; document files no longer referenced by active records may be removed through controlled cleanup. Backups can retain an earlier state for a limited recovery period and require separate access controls. No single retention period fits every record. Where deletion cannot be completed immediately, the reason and scope should be explained and retained information should be restricted to the continuing purpose. A final operational retention schedule must be maintained before public launch.
Your controls and requests
You can edit supported profile fields and contact-sharing preferences in Account settings, change optional cookie categories through Cookie settings and request assistance through Help Center. Depending on the applicable law and processing, you may request access, correction, deletion, restriction, portability or object to particular processing. You may withdraw optional marketing permission without closing your account. A withdrawal affects future consent-based processing; it does not retrospectively invalidate earlier lawful use. Identity checks may be necessary to avoid disclosing another person’s information. Do not send unnecessary identity documents unless a specific, proportionate request explains why they are needed.
Marketing and service notices
An optional registration choice can record permission to receive information about platform products and services through email, SMS or other electronic messages. Recording this choice does not mean a marketing delivery service is active. Necessary verification codes, security alerts, inquiry notifications or membership notices have a separate operational purpose and must use an appropriate basis. Use an available unsubscribe mechanism or Help Center to withdraw promotional permission. A suppression or withdrawal record may need to remain so the choice can be respected. Marketing preferences do not authorise sharing your contact details with arbitrary third-party advertisers.
Safeguards and your responsibilities
Access controls, authenticated downloads, origin checks, input validation, restricted storage, encryption for private document files and audit records reduce risks. They do not make any internet service immune to error or attack. Use a strong password, keep your device secure and verify unexpected requests for payment or credentials through an independent channel. Report suspected account compromise promptly. Confidential information placed in a public listing cannot be protected as though it were a private document. Security incidents should be assessed and notified where the applicable legal requirements call for notification.
Updates, questions and regulatory rights
Material changes to information handling should be reflected in an updated policy and appropriate notice. Earlier agreement acceptance records are retained as versioned records rather than overwritten by a new page. Use Help Center for privacy questions or requests and identify the relevant account or feature without posting sensitive details publicly. You may also complain to the competent supervisory authority where applicable. This page describes the intended and implemented controls; it is not a certification of compliance. The operating business must complete its jurisdiction-specific legal and provider review before public launch.
Company accounts and individual representatives
A company profile describes a business, but a representative’s name, work email, photograph, telephone number and job position may still be personal information. Public business information is therefore not automatically unrestricted personal information. When you create or manage a profile, provide accurate information and ensure that you are authorised to represent the company. Avoid uploading other employees’ photographs, identification records or contact lists without a proper basis. A company administrator should promptly report changes in responsibility so that former representatives do not retain inappropriate access.
Information visible before and after contact
A published profile or product can be viewed by visitors who are not signed in. Information submitted in an inquiry or conversation is handled separately from public listing content. The contact-sharing choice determines which supported profile fields accompany a contact request; review those choices before sending. The recipient can retain information already received, even if you later change your sharing preferences. Changing a preference does not recall screenshots, email notifications or exported correspondence held by another business. Use the smallest amount of information necessary for the discussion.
Message attachments and technical specifications
You may attach product requirements, drawings, quotations or other business files to supported conversations. Those files can contain personal information or confidential commercial material that is not obvious from the filename. Check the document, its properties and any embedded comments before sending it. FactoryMore uses access controls for private attachments, but the intended recipient may be able to download and use a copy. Do not use a conversation to transmit passwords, authentication codes, payment credentials, unrelated identity documents or sensitive personal histories.
Company verification records
Company registration and tax documents are submitted for a separate verification review. They are not ordinary public media and are not intended to become downloadable marketing assets. Access is restricted to authorised review and administrative functions. Review outcomes, timestamps and responsible reviewers form part of the audit record. Acceptance of a document is not a statement that every claim made by the business is true. Manual document review must not be described as antivirus scanning, and files should still be treated cautiously by the people authorised to review them.
External measurement and recording tools
When enabled for production and allowed by your analytics preference, Google Analytics can receive general page-type and successful-action events. FactoryMore’s event payloads exclude message bodies, entered search text, account identifiers and contact details. Microsoft Clarity is restricted to eligible public browsing, with page content masking and additional exclusions for signed-in or sensitive screens. These providers also process technical connection information needed to deliver their services. Their availability and settings can change; consent controls and deployment configuration determine whether the integrations are active.
Meeting services and connected accounts
If you connect a supported meeting provider, the platform may use the permissions granted during that provider’s authorisation flow to create a requested meeting. Meeting details can include the selected time, participant email addresses, title and joining link. Review the provider’s permission screen and privacy information before connecting. Provider tokens should remain in protected server-side storage. If you paste a meeting link instead, participants receive that link without a need to connect your account. Disconnecting a provider does not necessarily delete meetings or invitations already created there.
Support access and internal review
Authorised administrators can review support requests and relevant account, listing or communication records to operate the service, resolve problems and investigate misuse. Such access should be limited to a legitimate operational purpose. A member conversation is not a public forum, but it should not be assumed to be inaccessible to platform administration. If you report another member, the investigation may require examination of the reported exchange and associated records. Details should be disclosed to other participants only to the extent needed to address the matter or meet a legal requirement.
Search engines, cached copies and third-party links
Public listings and editorial pages may be indexed by search engines or linked from independent websites. Removing a listing from FactoryMore does not instantly remove cached or independently retained copies elsewhere. Where relevant, use the search engine’s own removal procedure as well as the platform’s reporting channel. A link to a manufacturer website, meeting service or social network takes you into a separate service with its own information practices. FactoryMore cannot apply its account preferences to an independent website merely because that website was reached through a profile.
Security incidents and protective restrictions
Unexpected sign-ins, suspicious uploads or other activity may be investigated using relevant security records. Temporary restrictions can be necessary to protect the affected account or other users. If you suspect an account has been compromised, stop sharing sensitive information and contact Help Center with the minimum details needed to identify the issue. Incident handling should preserve evidence while limiting unnecessary access. Where notification obligations apply, the affected people and authorities must be informed under the applicable rules; this policy does not guarantee that every technical issue is a legally reportable personal-data breach.
Policy changes and practical implementation
This notice should be read with the controls available in the version of FactoryMore you are using. Material changes to purposes, recipients or optional integrations require an appropriate updated notice and, where required, a fresh choice. A change in wording does not by itself create permission to reuse information for an unrelated purpose. You can ask Help Center to clarify which feature processed your information and how to exercise an available right. Operational retention periods, provider arrangements and required operator disclosures must be established for the live service.