Collect by purpose. Keep verification scopes separate.

• Current preview: request metadata, security logs and support correspondence.
• Future accounts: name, business contact, organization, role, locale and security/session records.
• Future marketplace work: listings, briefs, proposals, contracts, messages, deliveries, approvals, disputes and audit receipts.
• Social connections: provider account identifiers, approved scopes, metric source, freshness and connection status; no manually entered audience totals.
• Payments: provider references, amount, currency, split, state, invoice/tax fields and reconciliation evidence; no raw card data.

Processing will be limited to providing and securing the requested service, forming and administering contracts, meeting legal/accounting obligations, preventing fraud, resolving disputes and operating support. Consent will be used only where it is the appropriate legal basis and can be withdrawn without rewriting past lawful processing.

Social OAuth proves account control within the granted scope; it is not KYC, age proof or payout eligibility. A legal/payment seller status cannot be purchased as a badge.

iyzico's published Marketplace onboarding requires genuine identity or business, contact, address, tax and bank fields according to submerchant type. FLUMARQ will process only the approved minimum, protect provider keys as secrets, and keep raw identity documents or biometrics outside FLUMARQ unless a later counsel-approved flow explicitly requires them.

Necessary data may be shared with contracted hosting, communications, security, social-network, tax/accounting and payment providers, competent authorities and professional advisers. Country-specific international-transfer notices and safeguards will be published before a new country is enabled.

Retention will be capability-specific: short-lived technical logs, account lifecycle records, contractual and tax retention, dispute evidence and legally required deletion holds will not be merged into one indefinite period.

Applicable rights may include learning whether data is processed, access, correction, deletion, restriction, objection, portability, consent withdrawal and complaint. Send a request to support@flumarq.com or the registered KEP address. We may request proportionate identity confirmation but do not send identity documents until a secure route is provided.