Privacy Policy

This Privacy Policy outlines how AmericanGunTrader.com™ ("AGT", "we", "our", or "us"), operated by AmericanGunTrader.com, collects, uses, stores, and protects your data. Your privacy is important to us, and we are committed to transparency, cybersecurity excellence, and compliance with all applicable laws.

Table of Contents

1. Data Storage & Legal Process
2. Information We Collect
3. How We Use Your Data
4. Who We Share Data With
5. Third-Party Service Providers
6. Cookies and Tracking
7. Data Retention
8. Cybersecurity & Security Monitoring
9. Your Rights
10. Children's Privacy
11. Third-Party & Cross-Border Data Processing
12. Changes to This Policy
13. Contact

1. Data Storage & Legal Process

AGT is operated by AmericanGunTrader.com. User data is stored in secure, access-controlled data centers operated by our infrastructure providers.

As a matter of operational security, we do not disclose the identity, location, or configuration of our hosting providers, data centers, or infrastructure, and we may change providers, facilities, and locations at any time without notice. Nothing in this policy is a representation about where any system or data is physically located.

• All legal demands for user data must be valid, legally binding, and properly served on AmericanGunTrader.com through lawful channels.
• We will not disclose user data to third parties unless compelled by legal process that we are obligated to honor.
• We object to, narrow, or move to quash demands that are overbroad, defective, or improperly served.

2. Information We Collect

We collect various types of information to provide, improve, and secure our services:

2.1 Account & Registration Data

• Identity Information: First name, middle name, last name, username, email address, profile avatar/photo
• Authentication Data: Password (hashed with bcrypt), email verification status, last login timestamp
• Location Information: Street address, city, county, state, postal/ZIP code, and precise geographic coordinates (latitude/longitude) required for location-based features
• Account Metadata: Account creation date, account role, URL slug for public profiles, test user flag (if applicable)

2.2 Vendor & FFL Data (Licensed Dealers)

• Business Information: Legal business name, FFL license number, business phone number
• Verification Documents: Federal FFL license images, state license images, proof of legal business name
• Subscription Data: Subscription type (monthly/yearly), subscription status, payment history, vendor settings

2.3 Payment & Financial Data

• Payment Method: AGT accepts payment via crypto or card, completed through our payment partner's (Shadow Software) secure hosted checkout. AGT itself does not collect, process, or store your full card number, CVV, or bank-account details — the PCI-compliant checkout provider handles card data; we receive only a confirmation and a non-sensitive reference.
• Crypto Transaction Data: When you pay with crypto: the blockchain wallet address you send payment from (your "sender wallet"), the coin used (USDT or USDC), the network you paid on, the on-chain transaction hash, the amount, and the timestamp. Wallet addresses and transaction hashes are public information recorded on the relevant blockchain ledger by design; AGT records them only to match your payment to your invoice.
• Transaction Records: Invoice numbers, payment references, amounts, transaction dates, subscription records, boost purchases, newsletter feature purchases, platform-credit top-ups, and API usage charges.
• Affiliate / Platform Credit Data: Referral relationships, credit-ledger entries, balance history, and referring user IDs.
• No Card Data Stored by AGT: We never store cardholder card numbers, CVV, expiration dates, or bank details on our own systems — that data is collected and held only by our PCI-compliant payment partner during checkout.

2.4 Posts & Listing Data

• Listing Content: Post titles, descriptions, prices, conditions, categories, manufacturers, calibers, weights, images (stored securely on our servers)
• Post Analytics: View counts, boost status, featured dates, newsletter feature status, sale information
• Post Views: IP address of viewers, user IDs (if logged in), user agent (browser/device info), view timestamps (deduplicated: 1 view per user/IP per hour)
• Auction Data: Bid amounts, bidder IDs, auction end times, winning bid status

2.5 Communication Data

• Messages: Message content between users, sender/recipient IDs, IP addresses of senders, geographic data (latitude, longitude, region, city, zipcode), timestamps
• Conversations: Conversation participants, group names, group photos, conversation metadata, last message timestamps
• Attachments: Message files and images (stored securely on our servers)
• Mentions: @username mentions in group messages and comments

2.6 User Interaction Data

• Engagement: Likes on posts/comments, comments on posts, user ratings and reviews
• Social Activity: Group memberships, charity votes, community participation

2.7 Security & Monitoring Data

• Security Events: Failed login attempts, suspicious activity detection, automated threat prevention, session security violations, and other security-related events
• Event Details: IP addresses, user agents (browser/device), request metadata, severity levels, timestamps
• Session Data: Session IDs, activity tracking, security bindings
• Retention: Security events retained for limited periods as needed for investigation and compliance

2.8 Technical & Device Data

• Browser & Device: User agent strings (browser, OS, device type), IP addresses (with Cloudflare header support), device type (desktop/mobile)
• Mobile App: Firebase Cloud Messaging (FCM) tokens for push notifications (Android app only)
• Location Services: IP-based geolocation, timezone detection, distance calculations for nearby listings

2.9 Analytics & Usage Data

• Landing Page Analytics: Session IDs, variant IDs (A/B testing), event types (page views, CTA clicks, section views), referrer URLs, conversion tracking
• Newsletter Tracking: Email opens, link clicks, bounces, spam complaints, unsubscribes, IP addresses, user agents, URLs clicked
• API Usage: API endpoints accessed, request/response times, IP addresses, user agents, billable usage tracking
• UTM Parameters: Marketing attribution data (utm_source, utm_medium, utm_campaign) for guest users only

2.10 Marketing & Referral Data

• Affiliate Program: Referral links, referral relationships, commission tracking, payout records
• Newsletter Subscriptions: Email addresses, subscription status, delivery status, engagement metrics

We do not collect: Sensitive personal information (race, religion, political affiliation, health data) unless explicitly provided by you for support or legal compliance. We do not track your activity across other websites.

3. How We Use Your Data

We use your data for the following purposes:

3.1 Service Delivery & Platform Operation

• Authenticate user accounts and manage login sessions
• Display your listings and profile to other users
• Enable messaging between buyers and sellers
• Process auction bids and determine winners
• Calculate distances for location-based searches
• Deliver email and push notifications
• Generate invoices and process payments

3.2 Security & Fraud Prevention

• Detect and block malicious activity, bots, and automated threats
• Monitor for common web application attacks and vulnerabilities
• Track failed login attempts and implement progressive account protection measures
• Implement session security to prevent unauthorized access
• Scan file uploads for security threats
• Identify and redact contact information to prevent off-platform scams
• Use CAPTCHA challenges to distinguish humans from bots
• Log security events for investigation and compliance

3.3 Content Moderation & Compliance

• Review new listings for prohibited items and misleading content
• Verify FFL (Federal Firearms License) documentation for vendor accounts
• Ensure compliance with ATF regulations and firearm laws
• Detect and remove spam, fraudulent listings, and abuse
• Enforce Terms of Service and community guidelines

3.4 Payment & Billing

• Process vendor subscriptions, post boosts, and newsletter features
• Calculate and process affiliate commissions (15% lifetime recurring)
• Track billable API usage and generate monthly invoices
• Generate PDF invoices and maintain transaction records (7-year retention for tax compliance)

3.5 Communication & Support

• Send transactional emails (account verification, password resets, auction notifications, bid confirmations)
• Deliver weekly newsletters with featured listings (opt-in)
• Send push notifications via Firebase Cloud Messaging (Android app)
• Respond to support requests and resolve disputes

3.6 Analytics & Improvement

• Track post views to show popular listings (deduplicated: 1 view per user/IP per hour)
• Measure landing page conversion rates with A/B testing
• Monitor newsletter engagement (opens, clicks, bounces, unsubscribes)
• Analyze API usage patterns for billing and optimization
• Collect UTM parameters for marketing attribution (guest users only)
• Generate platform statistics and performance reports

3.7 AI & Content Generation

• Generate blog posts about firearms industry news using OpenAI GPT-3.5 Turbo (no user PII sent)
• Create newsletter summaries using Google Gemini API (public content only)

3.8 Legal Obligations

• Comply with applicable data protection laws and court orders
• Maintain records for tax purposes (7 years)
• Respond to valid legal requests properly served on AmericanGunTrader.com
• Enforce our Terms of Service and resolve legal disputes

We NEVER sell, rent, or share your data with advertisers or third parties for profiling, ad targeting, or data brokering. We will not accept money in exchange for your data. Data is only shared with trusted service providers as necessary to operate the platform (detailed in section 5 below).

4. Who We Share Data With

We share data with the following categories of third parties:

4.1 Publicly Visible Information

The following information is publicly accessible to all platform visitors and users:

• User Profiles: Username, avatar, city/state (not full address), user ratings, account creation date, vendor status
• Post Listings: Item titles, descriptions, prices, images, city/state location, auction status
• Comments: Public comments on posts and blog articles
• User Ratings: Ratings and reviews left by other users

4.2 Other Platform Users

When you interact with other users on the platform, they may see:

• Your username, avatar, and public profile information
• Messages you send them (private, not visible to other users)
• Your auction bids (visible to post owner only)
• Your location (city/state level, not full address)

4.3 Service Providers (Third-Party Integrations)

We share limited data with trusted third-party service providers to operate the platform:

• Shadow Software (Payment Processing): Payments are completed through our parent company's secure hosted checkout, which accepts crypto or card. We share the amount, invoice reference, and your email with the checkout to process the payment; AGT does not itself collect or store your full card or bank details.
• Public Blockchain (Crypto Settlement): When you pay with crypto (USDT/USDC, on the network you choose at checkout), your wallet address and the transaction are recorded on that blockchain's public ledger — this is inherent to how cryptocurrency works and is outside AGT's control. Your sender wallet address and transaction hash are stored to reconcile the invoice.
• Firebase Cloud Messaging: Device tokens, notification content, user IDs - for Android app push notifications only
• Google reCAPTCHA: IP addresses, user agents, challenge responses - for bot detection and spam prevention
• OpenAI API: Post titles and descriptions (no user PII) - for blog content generation
• Google Gemini API: Newsletter content and public post data (no user PII) - for AI-generated summaries

4.4 Law Enforcement & Legal Authorities

We may disclose data when legally required:

• Valid court orders issued by a court with proper jurisdiction over AmericanGunTrader.com
• Legal process that is legally binding and properly served on AmericanGunTrader.com
• ATF compliance requests (FFL verification records)
• We will NOT disclose data in response to informal requests, voluntary demands, or process we are not legally obligated to honor

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity. You will be notified via email and a prominent notice on the platform.

4.6 Payment Finality

Cryptocurrency transactions are, by design, final and irreversible once confirmed on the blockchain — for a crypto payment there is no card network, issuing bank, or chargeback mechanism involved.

• No chargebacks on crypto: Because crypto payments cannot be reversed or charged back, AGT does not share crypto payment data with card networks, acquiring banks, or debt-collection agencies — none are involved in a crypto transaction.
• Public ledger: Your wallet address and transaction are permanently recorded on that blockchain's public ledger. This is inherent to all blockchain payments and is not something AGT can alter or delete.
• Refunds: All sales are final (see Terms of Service §5.7). Any crypto refund that AGT elects to grant at its sole discretion is sent as a new on-chain transfer to the wallet you paid from.

We NEVER sell, rent, or share your data with:

• Advertisers or marketing companies
• Data brokers or aggregators
• Social media platforms (except login via Google OAuth, which you control)
• Any entity for profiling, ad targeting, or behavioral tracking

5. Third-Party Service Providers

We use trusted third-party services to operate the platform. Below is a comprehensive list of all external integrations:

5.1 Payment Services

Shadow Software (Hosted Checkout)

• Method: Payments are completed through our parent company's PCI-compliant hosted checkout, which accepts crypto or card.
• Purpose: Process vendor subscriptions, post boosts, newsletter features, guest article submissions, platform-credit top-ups, and other advertising service charges
• Data Shared: The amount, invoice reference, and your email. Full card numbers, CVV, and bank details are collected and held only by the checkout provider — never stored on AGT servers.

Cryptocurrency (USDT / USDC)

• Settlement Network: Crypto payments settle in USDT or USDC stablecoins on the public blockchain network you choose at checkout. Wallet addresses and transaction hashes are publicly visible on that blockchain by design.
• Data Stored Locally on AGT Servers: Your sender wallet address, the coin used (USDT/USDC), the on-chain transaction hash, the amount, and invoice references. No card or bank data is stored on AGT servers.
• Finality: Crypto transactions are irreversible once confirmed. There are no chargebacks on a crypto payment and therefore no downstream sharing with card networks or debt collectors.

5.2 Communication Services

Email Delivery (Self-Hosted)

• Purpose: Send transactional emails (account verification, password resets, auction notifications) and weekly newsletters
• Infrastructure: Sent directly from AGT's own mail servers — not routed through a third-party email delivery vendor, so message content and recipient data are not shared outside AmericanGunTrader.com
• Rate Limiting: Sends are throttled platform-wide to protect deliverability and prevent abuse
• Tracking: Newsletter opens and clicks (opt-in only)

Firebase Cloud Messaging (Push Notifications)

• Purpose: Deliver push notifications to Android mobile app users
• Data Shared: Device FCM tokens, notification titles/body, user IDs, deep link URLs
• What Firebase DOES NOT Use: Firebase Auth, Firestore, Realtime Database, Firebase Storage (all disabled)
• Privacy Note: Only FCM messaging is active; all other Firebase services disabled
• Privacy Policy: https://firebase.google.com/support/privacy

5.3 AI Services

OpenAI API (GPT-4o Mini)

• Purpose: Generate blog posts and newsletter summaries (fallback)
• Data Shared: Post titles, descriptions, public content only (NO user PII, emails, or personal data)
• Model: gpt-4o-mini with temperature 0.7, max tokens 150-2000
• Privacy Policy: https://openai.com/policies/privacy-policy

Google Gemini API (Gemini Pro)

• Purpose: Generate newsletter summaries (primary, OpenAI as fallback)
• Data Shared: Newsletter content (post titles, descriptions, blog excerpts) - public content only, no user PII
• Configuration: Temperature 0.7, max output tokens 150
• Privacy Policy: https://ai.google.dev/gemini-api/terms

5.4 Security Services

Google reCAPTCHA v3

• Purpose: Bot detection and spam prevention (login, registration, forms)
• Data Shared: CAPTCHA response token, IP address, user agent
• Triggered: After 3 failed login attempts, suspicious form submissions
• Score Threshold: 0.5 (higher = more human)
• Privacy Policy: https://policies.google.com/privacy

hCaptcha (Alternative CAPTCHA)

• Purpose: Privacy-focused CAPTCHA alternative (available but not primary)
• Privacy Policy: https://www.hcaptcha.com/privacy

5.5 Geolocation Services

MaxMind GeoLite2 (Local Database)

• Purpose: IP-based geolocation for security and location features
• Processing: Local database file (NO external API calls, privacy-friendly)
• Data: IP addresses converted to geographic coordinates locally

5.6 Authentication Services

Google OAuth 2.0

• Purpose: Social login via Google accounts (optional)
• Data Received: Google user ID, email address, display name, profile picture URL
• Data Storage: Links Google ID to user account, stores email/name, downloads profile picture
• User Control: You can revoke access anytime via Google Account settings
• Privacy Policy: https://policies.google.com/privacy

5.7 Image & Media Services

Spatie Image Optimizer (Local Processing)

• Purpose: Image compression and optimization
• Processing: Fully local (jpegoptim, pngquant, optipng, svgo, gifsicle, cwebp)
• Privacy Note: No external services; all image processing done on our servers

5.8 What We DO NOT Use

We explicitly DO NOT use the following:

• Google Analytics: We use our own internal analytics system instead
• Facebook Pixel: No tracking for ad networks
• Third-Party Advertising Networks: We do not display ads or track users for advertisers
• Data Brokers: We never share data with data aggregation companies
• Social Media Trackers: No Facebook, Twitter, or LinkedIn tracking scripts

6. Cookies and Tracking

We use cookies and local storage for essential platform functionality:

6.1 Essential Cookies (Required)

• american_gun_trader_session: Session ID for authentication and state management (httpOnly, secure, sameSite=strict)
• XSRF-TOKEN: CSRF protection token to prevent cross-site request forgery
• Duration: 120 minutes (configurable, extends with activity)
• Encryption: All cookies encrypted via Laravel encryption middleware

6.2 Analytics Cookies (Internal Only)

• Session ID: For landing page visitor tracking (A/B testing, conversion rates)
• Variant ID: For A/B test variant assignment
• Storage: All analytics data stored in our database (not shared with third parties)

6.3 Third-Party Cookies

• Google reCAPTCHA: May set cookies for bot detection (only when CAPTCHA triggered)
• Google OAuth: May set cookies during social login (only if you use Google login)

6.4 What We DO NOT Track

• Your activity across other websites (no cross-site tracking)
• Your search history outside our platform
• Your browser fingerprint for ad targeting
• Third-party advertising cookies

6.5 No Behavioral Ad Cohorts

We do not participate in browser-based behavioral advertising cohorts. Google's Federated Learning of Cohorts (FLoC) — the technology that grouped users into advertising cohorts based on browsing history — was cancelled by Google in 2022 and no longer runs in Chrome, so the interest-cohort opt-out header it required is now obsolete. Our position is unchanged: we do not support behavioral advertising technologies, and we send a locked-down Permissions-Policy header that disables sensitive browser features (geolocation, microphone, camera, and payment) on our site.

• What this means: Your activity on our platform is not used to categorize you into advertising cohorts
• Why: We prioritize your privacy and do not support behavioral advertising technologies

Cookie Control: You can disable cookies in your browser settings, but essential cookies are required for platform functionality (login, CSRF protection). Disabling cookies will prevent you from logging in.

7. Data Retention

We retain data for different periods depending on type and purpose:

7.1 Active User Data

• User Accounts: Retained as long as the account is active (soft deletes preserve data for 180 days post-deletion)
• Posts & Listings: Retained indefinitely (soft deletes allow recovery)
• Messages & Conversations: Retained indefinitely (soft deletes for messages)
• Comments & Ratings: Retained indefinitely for auditability

7.2 Financial & Transaction Data

• Invoices & Payment Records: 7 years (tax and legal compliance requirements)
• Subscription History: 7 years
• Affiliate Payouts: 7 years

7.3 Security & Monitoring Data

• Security Events: Retained for investigation and compliance purposes
• Blocked IPs: Duration varies based on severity (temporary or permanent)
• Failed Login Attempts: Temporary retention for security enforcement
• Session Data: Retained for duration of active session plus brief period
• First-session replays: Up to 30 days. Older replays are deleted sooner when stored replays reach 72 GB.

7.4 Analytics & Usage Data

• Post Views: Indefinite (for analytics)
• Landing Page Analytics: Indefinite (anonymized visitor tracking)
• Newsletter Events: Indefinite (opens, clicks, bounces, complaints)
• API Request Logs: 90 days
• UTM Analytics: Indefinite (guest users only)

7.5 Content & Media

• User-Uploaded Images: Retained until account deletion or manual removal
• FFL Documents: Retained indefinitely for regulatory compliance
• Message Attachments: Retained until conversation deleted

7.6 Account Deletion

You may request account deletion at any time by submitting a support request. Upon deletion:

• Account soft deleted (180-day retention for legal/security obligations)
• Profile avatar deleted from storage
• All sessions cleared
• Stored crypto wallet addresses and transaction references disassociated from your account (on-chain records remain on the public blockchain, which AGT cannot delete)
• Posts and messages soft deleted
• Financial records retained for 7 years (legal requirement)
• Security logs retained as required for investigation and compliance
• Analytics data may be retained in anonymized form

8. Cybersecurity & Security Monitoring

We implement comprehensive, multi-layered security protection to safeguard user data and platform integrity:

8.1 Infrastructure Security

• Encryption: All connections use HTTPS with industry-standard encryption
• Security Headers: Industry-standard security headers to protect against common attacks
• DDoS Protection: Infrastructure monitoring and protection against distributed attacks
• Encrypted Backups: Regular off-site encrypted backups for disaster recovery
• Access Control: Role-based access control with granular permissions

8.2 Application Security

• Threat Detection: Multi-layered automated systems detect and block malicious activity
• Web Application Firewall: Protects against automated attacks and security scanning
• Input Validation: All user input validated and sanitized to prevent injection attacks
• Account Protection: Progressive security measures for failed login attempts including CAPTCHA and temporary account restrictions
• Session Security: Secure session management with automatic timeout and security bindings
• Bot Detection: Multiple methods to distinguish legitimate users from automated bots
• File Upload Security: All uploads validated and scanned for security threats
• Content Filtering: Automated detection and removal of prohibited content
• Rate Limiting: Prevents abuse through request throttling

8.3 Security Monitoring & Logging

• Event Logging: Comprehensive logging of security-related events
• Threat Analysis: Continuous monitoring and analysis of suspicious activity
• Severity Classification: Events classified by risk level for appropriate response
• Admin Tools: Security monitoring dashboard for threat assessment
• Data Retention: Security logs retained for investigation and compliance

8.4 Data Protection

• Password Security: Industry-standard password hashing with salt
• Cookie Protection: All cookies encrypted and secured
• CSRF Protection: Token-based protection against cross-site request forgery
• Database Security: Secure queries and data access controls

8.5 Incident Response

• Automated Response: Immediate automated blocking of detected threats
• Progressive Enforcement: Escalating security measures based on behavior patterns
• Admin Oversight: Manual review capabilities for complex situations
• Continuous Improvement: Ongoing security updates and enhancements

9. Your Rights

AGT extends the following data protection rights to all users, regardless of where you live:

9.1 Right to Access

• Request a copy of all personal data we hold about you
• Receive data in a structured, machine-readable format (JSON or CSV)
• Access your invoice history, security events (for your account), active sessions, and API usage logs

9.2 Right to Rectification

• Correct inaccurate or incomplete personal information via account settings
• Update your profile, address, payment methods, and vendor settings at any time

9.3 Right to Erasure (Right to be Forgotten)

• Request complete account deletion by submitting a support request
• Account soft deleted for 180 days, then permanently deleted
• Financial records retained for 7 years (legal requirement)
• Security logs retained as required for investigation and compliance
• Images deleted from storage

9.4 Right to Restriction of Processing

• Request temporary suspension of data processing in certain circumstances
• Disable newsletter subscriptions, push notifications, and marketing emails

9.5 Right to Data Portability

• Export your data in JSON or CSV format
• Transfer your data to another service (upon request)

9.6 Right to Object

• Object to processing for direct marketing purposes (opt-out of newsletters)
• Object to automated decision-making (we do not use automated profiling)

9.7 Right to Lodge a Complaint

• Raise any privacy concern with us directly at [email protected] — we investigate every complaint we receive
• If you are not satisfied with our response, you may lodge a complaint with the data protection or consumer protection authority for your jurisdiction, including your state Attorney General or the U.S. Federal Trade Commission (reportfraud.ftc.gov)

9.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:

• Email: [email protected]
• We will respond within 30 days of your request
• We may require identity verification before processing requests

10. Children's Privacy

AGT is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

• Age Requirement: You must be at least 18 years old (or 21+ for handgun purchases, per state law) to use the platform
• Age Verification: Honor system (stated in Terms of Service during registration)
• Underage Accounts: Any accounts identified as underage will be immediately deleted
• Parent Notification: If you believe a child has created an account, contact [email protected]

11. Third-Party & Cross-Border Data Processing

We use third-party service providers to operate the platform. These providers may process data in facilities located in multiple countries, and the data described below is shared with them for the stated purpose only:

11.1 Payment, Email, and AI Providers

• Public blockchain networks (decentralized, global): Crypto payment settlement — wallet addresses and transaction hashes are recorded on a public, borderless blockchain ledger by design; there is no single jurisdiction or processor
• Shadow Software (payment processing): Secure hosted checkout — the amount, invoice reference, and your email are shared to process payment; full card details are held only by the PCI-compliant checkout provider
• OpenAI: AI content generation (public content only, no user PII)

Email delivery (transactional and newsletter) is handled directly by AmericanGunTrader.com's own mail servers, not a third-party vendor, so it does not involve cross-border processing by an external email provider.

11.2 Data Transfers to Google (Multi-Region)

• Firebase Cloud Messaging: Push notifications (Android app only)
• Google reCAPTCHA: Bot detection
• Google Gemini API: AI summaries (public content only)

11.3 Safeguards for Third-Party Processing

• All service providers are GDPR-compliant or use Standard Contractual Clauses (SCCs)
• Data minimization: Only necessary data shared with each service
• Encryption in transit (HTTPS/TLS) and at rest
• No user PII sent to AI services (OpenAI, Google Gemini)

12. Changes to This Policy

We may update this Privacy Policy at any time to reflect changes in our practices or for legal compliance.

• Notification: Significant changes will be announced via email and a prominent banner on the platform
• Effective Date: Changes become effective immediately upon posting (or date specified in update)
• Latest Version: The current version is always available at https://americanguntrader.com/privacy-policy
• Review: We recommend reviewing this policy periodically

13. Contact

For privacy concerns, data access requests, account deletion, or legal matters, contact:

Email: [email protected]
Support: Submit a support request

Company: AmericanGunTrader.com
Website: americanguntrader.com
7901 4th St N STE 300
Saint Petersburg, FL 33702
United States

Data Protection Officer: For data protection inquiries, contact [email protected]