Privacy Policy for MergeTrade
Effective Date: July 6, 2026
This Privacy Policy explains how MergeTrade, operated by Shapley ("MergeTrade", "we", "us", or "our"), collects, uses, shares, stores, and deletes personal information when you use our websites, software applications, APIs, and related services that link to this Privacy Policy (collectively, the "Services").
By using the Services, you acknowledge that we process personal information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Services.
1. Personal Information We Collect
We collect information that you provide to us, information generated when you use the Services, and information that you authorize third-party platforms, including Meta, to provide to us.
Account and profile information. When you create or manage a MergeTrade account, we may collect information such as your name, username, email address, profile image, account identifiers, login method, and account settings.
Content and activity information. Depending on how you use the Services, we may collect information you submit or create, such as trade-related content, item lists, preferences, saved records, connected account information, messages to us, support requests, and other information you choose to provide.
Meta Platform Data. If you connect or authorize MergeTrade through Facebook, Instagram, Pages, Business Manager, Ad Accounts, or other Meta products, we may receive and process Meta Platform Data depending on the permissions you grant. This may include your Facebook app-scoped user ID, name, profile picture, email address, access tokens, permission scopes, Page IDs, Instagram account identifiers, Business IDs, Ad Account IDs, asset names, asset metadata, and other data that you authorize MergeTrade to access through Meta's platform.
Technical and usage information. When you access the Services, we may automatically collect technical information such as IP address, device type, operating system, browser type, language settings, referring pages, pages viewed, timestamps, diagnostic logs, crash data, feature usage, approximate location derived from IP address, and cookie or similar technology identifiers.
Communications. If you contact us, we may collect your contact details and the content of your message so that we can respond and provide support.
2. How We Use Personal Information
We use personal information for the following purposes:
- To provide, operate, maintain, and improve the Services.
- To create, authenticate, and secure user accounts.
- To provide features that rely on user-submitted content or connected third-party accounts.
- To connect to Meta products and process Meta Platform Data only as authorized by the permissions you grant and as described in this Privacy Policy.
- To display, manage, analyze, or synchronize authorized Facebook, Instagram, Page, Business, Ad Account, or other Meta asset information where you have granted access.
- To respond to support requests, questions, and feedback.
- To detect, prevent, and respond to fraud, abuse, security incidents, policy violations, or technical issues.
- To comply with legal obligations, enforce our terms, and protect the rights, safety, and property of MergeTrade, our users, and others.
- To generate aggregated or de-identified statistics that do not identify individual users.
We do not use Meta Platform Data for purposes that are unrelated to the Services, and we do not sell Meta Platform Data.
3. How We Share Personal Information
We may share personal information in the following limited circumstances:
Service providers. We may share information with vendors that provide hosting, storage, analytics, customer support, security, communications, and other services on our behalf. These providers are authorized to process information only as needed to provide services to us and according to our instructions.
Connected platforms. When you connect Meta or another third-party platform, we may exchange information with that platform as necessary to provide the authorized feature, comply with platform rules, or process your request.
Legal and safety reasons. We may disclose information if required by law or if we believe disclosure is necessary to comply with legal process, protect rights or safety, investigate fraud or abuse, or enforce our agreements.
Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards.
With your direction or consent. We may share information when you direct us to do so or give us permission.
We do not sell personal information.
4. Cookies and Similar Technologies
We may use cookies, local storage, analytics tools, and similar technologies to operate the Services, remember settings, understand usage, improve performance, detect security issues, and provide a better user experience. You can control cookies through your browser settings, but disabling cookies may affect some features of the Services.
5. Data Retention
We retain personal information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, maintain security, prevent fraud or abuse, and enforce our agreements.
When information is no longer needed, we will delete, de-identify, or aggregate it in accordance with applicable law and our operational requirements. Backup copies may remain for a limited period before being overwritten.
6. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information that we process about you. You may also have the right to withdraw consent where processing is based on consent.
You may update some account information in the Services. You may also contact us at support@shapley.cc to request access, correction, or deletion of your personal information.
To protect user data, we may need to verify your identity or authority before fulfilling a request. If we cannot verify a request, we may ask for additional information or decline the request as required or permitted by law.
7. Data Deletion Rights for All Users and Meta Platform Data
All users who can access MergeTrade may request deletion of their personal data. This includes registered users, users who use Facebook Login, users who access MergeTrade without a registered account, and any Facebook, Instagram, Page, Business, Ad Account, or other Meta asset users whose data may be processed through permissions granted to MergeTrade.
Meta Platform Data we may process includes, depending on the permissions you grant, identifiers such as your Facebook app-scoped user ID, name, profile picture, email address, access tokens, permission scopes, Page IDs, Instagram account identifiers, Business IDs, Ad Account IDs, asset names, asset metadata, and other data that you authorize MergeTrade to access through Meta's platform.
You may request deletion in any of the following ways:
- In the MergeTrade app: go to Settings > Account > Delete Account, if this option is available in your version of the app.
- By email: send a request to support@shapley.cc with any identifier we can use to locate your data, such as your MergeTrade account email, app user ID, Facebook user ID, Instagram username, Page ID, Business ID, Ad Account ID, or a screenshot of the connected account or asset.
- From Facebook: go to Settings & Privacy > Settings > Apps and Websites, remove MergeTrade, then use the available option to send a data deletion request.
When we receive a deletion request, we will delete or de-identify personal data and Meta Platform Data associated with the requesting user or authorized asset from our active systems, revoke related access where applicable, and instruct relevant service providers to delete the data they process on our behalf. We will process deletion requests within 48 hours unless a longer period is required by law, fraud prevention, security, accounting, dispute resolution, or other legitimate obligations.
If a request is submitted through Meta's data deletion request flow, MergeTrade will process the request according to Meta's requirements. Where Meta's technical tools require a response, we will provide a confirmation code and a status URL where the user can check the status of the request.
8. Meta Platform Data Restrictions
We process Meta Platform Data only for the purposes described in this Privacy Policy and only as permitted by the permissions you grant, Meta's Platform Terms, applicable developer policies, and applicable law. We do not sell Meta Platform Data, transfer it for unrelated advertising purposes, or use it for purposes that are inconsistent with this Privacy Policy.
9. Children's Privacy
The Services are not directed to children under 13 years old, and we do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information to us, please contact us at support@shapley.cc, and we will take appropriate steps to delete the information.
10. Security
We use commercially reasonable technical, administrative, and organizational measures designed to protect personal information from unauthorized access, loss, misuse, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International Transfers
We may process and store personal information in countries other than the country where you live. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.
12. California Privacy Notice
California residents may have rights to know, access, correct, delete, and opt out of certain sharing of personal information, as provided by applicable law. We do not sell personal information. To exercise California privacy rights, contact us at support@shapley.cc.
In the preceding 12 months, we may have collected the categories of personal information described in Section 1, used them for the purposes described in Section 2, and disclosed them to the categories of recipients described in Section 3.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will post the updated version on this page and update the effective date if appropriate. Your continued use of the Services after an updated Privacy Policy is posted means that you acknowledge the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, or if you want to submit a privacy or deletion request, please contact us at support@shapley.cc.