Privacy Policy

We collect the information you provide directly to us, including:

• Contact details — name, email address, and phone number (for sellers and buyer members).
• Listing details — firearm make, model, caliber, condition, photos, and your asking price.
• Verification documents — your Firearm Safety Certificate (FSC) and any uploaded identification, including expiry dates.
• Payment details — billing email for Stripe checkout. Card data is handled entirely by Stripe and never stored on our servers.
• Messages — the content of in-app messages between buyers and sellers regarding a listing.

We use your information to:

• Create, display, and manage your listings and membership;
• Verify seller and buyer eligibility under California firearm law;
• Facilitate communication between buyers and sellers through in-app messaging;
• Process listing fees and membership subscriptions through Stripe;
• Investigate complaints and enforce our Terms of Use; and
• Comply with applicable legal obligations.

We do not sell your personal information. We share it only as necessary to operate the platform:

• Stripe — to process listing fees and membership payments;
• FFL transfer sites — only as needed to coordinate an in-person transfer you have initiated;
• Other users — limited listing and in-app message content, as part of the marketplace; and
• Legal authorities — where required by law or to investigate fraud, prohibited persons, or safety concerns.

Sellers' direct contact information is not displayed publicly. Verified buyers contact sellers through in-app messaging.

We retain listing records for as long as needed to operate the marketplace and comply with legal recordkeeping obligations. Verification document scans (FSC, military ID, or CCW images) are stored in access-controlled private storage and are viewable only by platform administrators through short-lived, expiring links. Under our retention policy, the stored scan itself is automatically deleted once your verification is approved, or 90 days after submission if it was not approved. We keep only the verification outcome and document expiry date on file. Requesting account deletion also removes your verification records.

Under the California Consumer Privacy Act (CCPA), you may have the right to request access to, deletion of, or correction of your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us using the information below.

We use reasonable administrative and technical safeguards to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Payment card data is handled exclusively by Stripe under its PCI-compliant infrastructure.

Questions about this policy or requests to exercise your privacy rights can be sent to the platform administrator. To report a listing or user concern, you can also file a complaint.