Privacy Notice
Effective March 1, 2026
This Privacy Notice explains how Market Express LLC collects, uses, and protects information about government agency accounts and procurement transactions on the Government portal.
Government Agency Data Handling
- ✓Agency procurement data is logically isolated from commercial channel data
- ✓Order records retain contract vehicle, CAGE code, and agency identifiers for audit
- ✓No Controlled Unclassified Information (CUI) should be transmitted through the platform
- ✓Data is hosted in the United States on Oracle Cloud Infrastructure
- ✓For FISMA documentation or data handling questionnaires, email security@marketexpres.us
Information We Collect
Account Information
Name, email address, phone number, organization name, billing and shipping addresses
Transaction Data
Order history, payment method tokens, invoices, shipping tracking numbers
Authentication Data
Login timestamps, session tokens, FusionAuth identity references (no passwords stored)
Usage Data
Pages visited, search queries, click events, device type, browser, IP address
Communications
Support tickets, chat transcripts, email correspondence with Market Express
Documents
Onboarding documents you upload (business license, W-9, etc.) — stored encrypted
How We Use Your Information
- ✓Process and fulfill your orders
- ✓Manage your account and authenticate your identity via FusionAuth
- ✓Send transactional emails (order confirmations, shipping updates, invoices)
- ✓Provide customer support and respond to inquiries
- ✓Detect and prevent fraud, abuse, and security incidents
- ✓Comply with legal obligations and respond to lawful requests
- ✓Improve platform features using aggregated, anonymized analytics
Information Sharing
We do not sell your personal information. We share data only as described below:
Payment Processors (Stripe, PayPal)
To process transactions. They receive only necessary payment data per PCI-DSS requirements.
Shipping Carriers (USPS, FedEx, UPS, DHL)
To fulfill and track shipments. They receive name, address, and order details.
FusionAuth
Identity and authentication provider. Stores login credentials and session data.
Cloud Infrastructure (Oracle OCI)
Hosting and data storage. Covered by OCI data processing agreements.
Email Provider (Resend)
Transactional email delivery. Receives recipient address and email content.
Law Enforcement / Legal
When required by law, subpoena, or to protect rights and safety.
Data Retention
- •Account data: retained while your account is active and for 7 years after closure for legal compliance
- •Order and transaction records: 7 years per tax and accounting requirements
- •Support communications: 3 years
- •Usage and analytics data: 13 months rolling window
- •Uploaded documents: retained per document type requirements; you may request deletion
Contact
For privacy questions, data requests, or to exercise your rights:
privacy@marketexpres.us
Market Express LLC · Las Vegas, NV