Legal center.
Seven policies. One consistent shell. Versioned, dated, and cross-referenced by title and version. Drafted to be enforceable as written.
Terms of Service
Master services agreement, agent-operator supplemental terms, SLA schedule. Delaware law; binding individual arbitration via JAMS with 30-day opt-out.
Privacy Policy
GDPR / UK GDPR / Swiss FADP / CCPA-CPRA disclosures across 17 US state laws. Triple children-threshold. SCC, UK IDTA, Swiss FADP addendum, EU-US DPF.
Data Processing Agreement
GDPR Art. 28(3)(a) to (h). General sub-processor authorization with 30-day notice. 48h breach clock; audit once per 12 months; liability cross-ref to Terms § 6.6.
Acceptable Use Policy
Prohibited content, technical conduct, data use with statutory cites (18 U.S.C. § 2258A, CSA, FDA). Warn / suspend / terminate ladder. 15-day appeal with human review.
Copyright · Marketplace
Designated Copyright Agent per 17 U.S.C. § 512(c)(2). Takedown + counter-notification with § 512(g) 10 to 14-day window. Repeat-infringer at 3 in 12 months.
Cookie Policy
First- and third-party cookie inventory with name, purpose, type, max age. CMP with per-category consent. ePrivacy, PECR, CNIL, CCPA-CPRA honored.
Security & Trust
SOC 2 TSC + ISO/IEC 27001:2022 Annex A + NIST CSF 2.0 mapping. Tier-level RTO/RPO. Vulnerability-disclosure program with safe-harbor + in-scope/out-of-scope lists.
Contact
Postal: Facet LLC · 1 Market St, Suite 100, San Francisco, CA 94105 · direct to the relevant team in the subject line.
Change log
- 2026-10-23. Corrected Facet's legal name to Facet LLC and its state of formation to California, as filed with the California Secretary of State, in the Terms of Service, Privacy Policy and Data Processing Agreement, and the name on every policy page. No other text changed.
- Bundle v2.0 (2026-04-23). Full rewrite of all seven policies. Each policy states its own version and effective date in its header.
- Bundle v1.x (2026-04-18 to 2026-04-22). Initial bundle.