Privacy Policy

We collect the minimum information required to operate a verified marketplace, match buyers to credentialed shops, and protect both sides of a transaction.

Account information

• Name, email, phone number, role (Buyer or Vendor), company name, and login credentials.
• Billing and payout information processed by our payment processor (Stripe). We do not store full card numbers on our servers.

Business and verification data (Vendors)

• Legal entity name, state of registration, EIN, and address.
• Equipment list, capability declarations, certifications, and an AI-generated capability profile that you confirm.
• Signage photo, recorded video walkthrough, and virtual inspection artifacts gathered during verification.
• For Premium Certified shops: notes and findings from the independent consultant review.

Job & RFQ data (Buyers and Vendors)

• RFQ fields (material, thickness, tolerances, quantities, certifications, lead time, delivery location).
• Quotes, messages, acceptance events, ratings, and Data Room access logs.

Usage data

• Device and browser information, IP address, pages visited, referrers, and approximate location derived from IP.

We use the information we collect to:

• Provide the Platform: create accounts, structure RFQs, match Buyers with verified Vendors, process payments, and operate the Data Room.
• Run the 8-step verification stack and maintain ongoing trust signals (ratings, response SLAs, capacity status).
• Detect fraud, abuse, and off-Platform circumvention; preserve evidence required to enforce platform protections.
• Send transactional communications (RFQ matches, quote events, acceptance receipts, Data Room notifications) and, with consent, product updates.
• Comply with legal, accounting, tax, and regulatory obligations.

We use AI for two narrow purposes, both auditable by our operators:

Capability matching

A model converts each Vendor's equipment list into a structured capability profile, and converts each Buyer's RFQ into the same schema, so the Platform can rank a small set of relevant shops for each opportunity. The model is never given customer drawings, DXF, DWG, STEP, or other technical files — those live exclusively in the Data Room and are only accessible to humans bound by the standing NDA.

Internal fraud scoring

During Vendor verification, we run an internal fraud score that reviews the shop's public business presence — LinkedIn, Facebook, Google Business, and the website declared during signup — and cross-checks it against the registered legal entity. The fraud score is for internal use only. It is never displayed to Buyers, Vendors, or the public, and is reviewed by a human operator before any verification decision.

We share information only as needed to operate the Platform:

• Anonymous handles only are shown to the counterparty before acceptance (e.g., FabShop-447). Legal identity and contact information are revealed only after the Buyer accepts a quote and pays the engagement fee.
• Service providers processing payments, hosting infrastructure, email delivery, analytics, and verification subtasks under written confidentiality and security obligations.
• Legal and safety: when required by valid legal process, to enforce our Terms, or to protect rights, property, or the safety of users or the public.
• Successor entities in connection with a merger, acquisition, or sale of substantially all assets of RH Held Trust's Fabmaster business.

We do not sell personal information and we do not share it with third parties for their independent advertising.

Files uploaded to a job-specific Data Room (drawings, DXF/DWG/STEP, specifications, BOMs) are stored under access controls that the Buyer manages. View-only access is the default; downloads require explicit Buyer permission per file.

Every NDA acceptance and every Data Room access event is logged with timestamp, user identity, IP address, file name, and action (view, download, print attempt). These logs are stored permanently and linked to the job. They are accessible to the Buyer, the Vendor party to that job, and Fabmaster operators investigating a dispute.

We use first-party cookies and similar technologies to keep you signed in, remember preferences, secure the Platform, and measure aggregate usage. You can control cookies through your browser settings; disabling essential cookies will impair sign-in and session continuity.

We use industry-standard technical and organizational safeguards, including encryption in transit, encryption at rest for sensitive fields, principle-of-least-privilege access controls, audit logging, and regular review of operator access. No system is perfectly secure; you are responsible for keeping your credentials confidential and for promptly reporting any suspected compromise.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal information; to object to or restrict certain processing; and to withdraw consent. To exercise these rights, contact privacy@fabmaster.ai. We will respond within the timeframe required by applicable law.

You may unsubscribe from product email at any time using the link in those messages. Transactional communications related to active jobs cannot be disabled while the job is in progress.

We retain account, verification, transaction, and Data Room access records for as long as the account is active and for a reasonable period thereafter to comply with legal, tax, accounting, and dispute-resolution obligations, and to enforce the off-Platform prohibition. Logs of NDA acceptance and Data Room access events are retained permanently, linked to the job.

Privacy questions: privacy@fabmaster.ai. General questions: hello@fabmaster.ai. Mail: Fabmaster c/o RH Held Trust, Wilmington, Delaware, USA.