Legal center.
Seven policies. One consistent shell. Versioned, dated, and cross-referenced by title and version. Drafted to be enforceable as written.
Terms of Service
Master services agreement, agent-operator supplemental terms, SLA schedule. Delaware law; binding individual arbitration via JAMS with 30-day opt-out.
Privacy Policy
GDPR / UK GDPR / Swiss FADP / CCPA-CPRA disclosures across 17 US state laws. Triple children-threshold. SCC, UK IDTA, Swiss FADP addendum, EU-US DPF.
Data Processing Agreement
GDPR Art. 28(3)(a) to (h). General sub-processor authorization with 30-day notice. 48h breach clock; audit once per 12 months; liability cross-ref to Terms § 6.6.
Acceptable Use Policy
Prohibited content, technical conduct, data use with statutory cites (18 U.S.C. § 2258A, CSA, FDA). Warn / suspend / terminate ladder. 15-day appeal with human review.
Copyright · Marketplace
Designated Copyright Agent per 17 U.S.C. § 512(c)(2). Takedown + counter-notification with § 512(g) 10 to 14-day window. Repeat-infringer at 3 in 12 months.
Cookie Policy
First- and third-party cookie inventory with name, purpose, type, max age. CMP with per-category consent. ePrivacy, PECR, CNIL, CCPA-CPRA honored.
Security & Trust
SOC 2 TSC + ISO/IEC 27001:2022 Annex A + NIST CSF 2.0 mapping. Tier-level RTO/RPO. Vulnerability-disclosure program with safe-harbor + in-scope/out-of-scope lists.
Contact
Postal: Facet, LLC · 1 Market St, Suite 100, San Francisco, CA 94105 · direct to the relevant team in the subject line.
Change log
- Bundle v2.0 (2026-04-23). Full rewrite of all seven policies. Each policy states its own version and effective date in its header.
- Bundle v1.x (2026-04-18 to 2026-04-22). Initial bundle.