Skip to content
ArmorY
Get startedDashboard
Legal

Privacy Policy

Privacy Policy

Effective date: <<YYYY-MM-DD>>

This Privacy Policy describes how <<Operator Legal Name>> ("we," "us") at <<https://armory.example.com>> collects, uses, and shares information about you when you use the ArmorY platform (the "Platform"). It is incorporated into and forms part of our Terms of Service.

1. What we collect

We collect only the information needed to operate the Platform.

1.1 Information you provide

  • Account information. Your Google account email address and the basic profile fields Google releases on sign-in (name, profile photo URL).
  • Profile information. Anything you choose to add to your profile — display name, contact email, phone number.
  • Listings and offers. The text, photos, videos, prices, and other content you post.
  • Messages. The content of messages you send to other users on the Platform.

1.2 Information collected automatically

  • Authentication tokens. A session token tied to your account, stored in a cookie or local storage. Used to keep you signed in.
  • Server logs. IP address, request method, request path, response status, user agent, and timestamp for each request your browser makes to the Platform. Retained for up to thirty (30) days for operational and security purposes.
  • Error reports. When the Platform encounters an error, technical details (stack trace, request URL, user identifier) are sent to <<Sentry / your error-tracking provider>> to help us fix bugs.

1.3 What we do not collect

  • We do not use third-party advertising or analytics trackers.
  • We do not track your activity across other websites.
  • We do not sell your personal information.

2. How we use information

We use the information we collect to:

  1. Operate the Platform (display listings, deliver messages, authenticate you, prevent abuse).
  2. Communicate with you about your account, your listings, your offers, and changes to the Platform.
  3. Investigate and respond to security incidents, suspected violations of the Terms of Service, and legal requests.
  4. Comply with applicable law.

3. How we share information

3.1 With other users

When you list an item, the listing content (item description, photos, videos, asking price, status) is publicly visible to anyone who visits the shop's URL. Your shop's display name and bio are public.

When you submit an offer, your display name is shown to the seller.

When an offer is accepted, the contact email address you have set on your profile is released to the other party so the two of you can communicate off-Platform. Be deliberate about what email address you put on your profile.

3.2 With service providers

We use the following third-party service providers, each of which is contractually bound to use the data only to provide their service to us:

  • Google Identity Services — handles sign-in. Google receives a request from your browser when you click "Sign in with Google."
  • <<Cloudflare>> — fronts the Platform's public URL. Cloudflare sees your IP address and the requests you make.
  • <<SendGrid>> (Phase 2) — sends transactional emails (offer notifications, status changes). SendGrid sees your email address and the email body.
  • <<Sentry>> (if enabled) — error tracking. May see request details and a user identifier when an error occurs.

We do not sell, rent, or trade your personal information to anyone for their own marketing purposes.

3.3 For legal reasons

We may disclose information when we believe in good faith that disclosure is necessary to (a) comply with a legally valid request from law enforcement or a court order, (b) protect the safety of any person, (c) investigate fraud or violations of the Terms of Service, or (d) defend our legal rights.

4. How long we keep information

  • Account information — for as long as your account is active, and for a reasonable period after closure to handle disputes, fulfill legal obligations, and back up against data loss.
  • Listings and offers — retained indefinitely as part of the Platform's record. Sold listings are kept for the operator's business records.
  • Messages — retained indefinitely while either party's account is active. May be deleted on account closure.
  • Server logs — up to thirty (30) days.
  • Backups — up to thirty (30) days for routine operational backups.

5. Your choices

You can:

  • Update your profile — change your display name, contact email, phone number, and profile photo at any time in settings.
  • Withdraw your offers — cancel any pending offer you've submitted.
  • Remove your listings — withdraw or delete listings at any time.
  • Close your account — request account closure by emailing <<[email protected]>>. Closure removes your profile, listings, and unsent offers from public view. Some content (e.g., messages already delivered to other users, log entries) cannot be retroactively unsent.

If you are a resident of California, the EU, the UK, or another jurisdiction with data-protection laws, you may have additional rights (access, deletion, portability, objection). Contact us at the address above to exercise those rights. We will respond within the timeframe required by applicable law.

[REVIEW: GDPR / CCPA / VCDPA-specific rights and procedures should be drafted with attorney input if the Platform serves users in those jurisdictions.]

6. Children

The Platform is not intended for anyone under eighteen (18). We do not knowingly collect information from anyone under eighteen. If you believe a minor has created an account, contact us and we will delete the account.

7. Security

We use reasonable technical and organizational measures to protect the information we collect, including HTTPS for all traffic, hashed authentication tokens, and access controls on production data. No system is perfectly secure. We cannot guarantee that an unauthorized party will never access your information.

8. International users

The Platform is operated from the United States. If you access it from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data-protection rules than your home country. By using the Platform you consent to that transfer.

9. Changes

We may update this policy at any time. Material changes will be communicated by in-app notice or email at least seven (7) days before they take effect. The "Effective date" at the top reflects the latest revision.

10. Contact

Questions about this policy, or to exercise any privacy right described above, contact <<[email protected]>>.

This document is currently a working draft. Items in <<angle brackets>> and items marked [REVIEW] are placeholders pending operator and attorney review.