We use personal data to provide and protect CoinDealerPro. We do not sell personal data. We do not share personal data for cross-context behavioral advertising.

Privacy requests: admin@coindealerpro.com

1. Roles

We are the controller for account, billing, website, and direct-relationship data.

When you enter personal information about your contacts, personnel, consignors, customers, vendors, or other people, you decide why that personal information is used. We process that personal information on your instructions as your service provider.

2. Information we collect

Information you provide

Account and identity: name, email address, authentication information, two-factor and other security settings, login history, organization, role, workspace, invitations, and preferences.
Business records your users enter: inventory and certification details, photographs, contacts, addresses, phone numbers, notes, documents, transactions, grading workflows, and similar operational records.
Banking information: bank account and routing numbers, check details, and signature images, when check features are used.
Connected accounts: eBay authorization credentials, and listing, order, and buyer contact information exchanged with eBay when a user connects an account.
Imports: files users upload for import and import review records.
Optional attachments your users choose to upload. Do not upload Social Security numbers, complete payment-card numbers, or account passwords.
Billing: plan, subscription status, billing contact, Stripe identifiers, and limited transaction metadata. Stripe receives payment-card details directly.
Communications: support requests, sales inquiries, demo requests (first name, last name, email, phone, and your answer about what you hope to fix or improve), security reports, and feedback.

Information collected automatically

IP address, device and browser information, timestamps, requested pages, error and diagnostic data, session and security events, and activity needed to operate and protect the service.
Authentication and preference cookies needed to keep users signed in, remember settings, and prevent abuse.

Information from third parties

Subscription and payment status from Stripe.
Certification, coin, image, population, or reference information returned by an authorized grading-data provider when a user runs a lookup.
Precious-metals reference rates from market-data providers. Those requests are designed not to include customer personal data.
Listings, orders, and buyer information from eBay when a user connects an eBay account.
Address suggestions from Google when a user types an address.
Demo-form contents sent to Attio, including first name, last name, email, phone, and your answer about what you hope to fix or improve.
Appointment details you enter on Google Calendar when you book a demo.

3. How we use information

Provide, maintain, and support the service.
Authenticate users, apply permissions, isolate organizations and workspaces, and detect misuse.
Process subscriptions and administer accounts.
Send transactional messages such as confirmations, authentication codes, invitations, and account notices.
Perform user-requested certification and reference lookups through authorized connections.
Process files a user submits for AI-assisted import. That content is sent to OpenAI only for the import and is not used to train OpenAI models.
Monitor reliability, investigate incidents, and preserve audit evidence.
Comply with law, enforce agreements, prevent fraud, and protect rights and safety.
Respond to sales and access requests.

We do not use a customer’s contact database to market CoinDealerPro.

4. Legal bases

Where a legal basis is required, we rely on performance of a contract, legitimate interests in operating and securing a business service, compliance with legal obligations, and consent where we specifically ask for it.

5. How we disclose information

We disclose information only as reasonably necessary:

Inside your organization, according to membership, workspace, role, and permissions your administrators set.
To service providers that host, store, deliver email, process payment, deliver the website, suggest addresses, process AI-assisted imports, or support listed integrations. Current providers are on the Subprocessors page.
At your direction, when a user connects an account such as eBay, starts checkout, runs a provider lookup, starts an AI-assisted import, or exports information.
When required by law or reasonably necessary to protect customers, the service, providers, or others.
In a merger, financing, acquisition, reorganization, or sale, subject to confidentiality and any required notice.

We do not sell personal data. We do not share personal data for cross-context behavioral advertising. We do not disclose Customer Data to data brokers.

6. Provider integrations

Certification lookups are designed to send only the identifier and parameters needed for the request. Provider credentials are designed to stay server-side. We do not intend to send your contact lists, transaction documents, payment details, or private notes to a grading or metal-price provider.

AI-assisted import is the exception. When a user starts an import, the submitted file contents and samples, which may include contact and transaction records, are sent to OpenAI to process that import.

Address autocomplete sends the address text a user types to Google. Google’s use of that information is described in the Google Privacy Policy.

Facts a user confirms can become part of that customer’s inventory or grading record. Provider terms still apply.

7. Retention

Cancellation does not automatically delete Customer Data. We may delete Customer Data after the paid term ends, and you may request deletion at admin@coindealerpro.com. Uploaded files, including from incomplete imports, may be retained. Copies may persist in backups for a period, and we may retain information as needed for legal, billing, security, or dispute purposes.

We do not guarantee post-term storage of Customer Data, and backup copies are not a customer archive.

You should delete sensitive attachments when you no longer need them.

8. Security

We use measures such as encrypted connections, including to the database; server-side authorization; role-based permissions; organization and workspace boundaries; optional two-factor authentication; password hashing, strength rules, and checks against known compromised passwords; login rate limiting; audit records for material actions; signed billing webhooks; automated vulnerability and dependency scanning; and separate, encrypted backups with tested restores.

Record fields that do not need to be searched are encrypted before storage with separately managed keys. Banking details, authentication secrets, eBay credentials, and buyer contact information receive additional encryption. Searchable fields are protected by authentication and access controls.

No system is completely secure. You are responsible for user administration, credential protection, device security, correct permissions, and lawful handling of exports.

9. Location of processing

The application is hosted on Amazon Web Services in the United States. Some providers may process information in other countries.

10. Your privacy rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; or appeal a denied request. You may also complain to a privacy regulator. We will not discriminate against you for exercising a privacy right.

If your information was entered by a CoinDealerPro customer, contact that customer first. That customer controls the record. We will assist that customer as required.

We may need to verify identity and authority. Because we do not sell personal data or share it for cross-context behavioral advertising, we do not offer a sale or share opt-out. If that changes, we will update this policy and provide required choices.

California residents may request the categories of personal information we collected, the business or commercial purposes, the categories of sources, the categories of third parties to whom we disclose it, and a copy of specific pieces, subject to verification. Submit those requests to admin@coindealerpro.com.

11. Cookies

See the Cookie Policy. The public website does not use advertising cookies and does not use Google Analytics, Meta, LinkedIn, or similar advertising pixels. Demo requests are submitted to our website and stored in Attio. Booking a time happens on Google Calendar.

12. Children

Account owners and billing customers must be 18 or older. We may process account information for authorized users 13 through 17. We do not knowingly create accounts for or collect personal information from children under 13, and we do not market to children. Email admin@coindealerpro.com if you believe a child under 13 provided data to us.

13. Changes and contact

We may update this policy. We will post the effective date and give additional notice when required.

Privacy requests and questions: admin@coindealerpro.com

Do not email passwords, complete payment-card details, or government-identification images to that address unless we ask for a specific file in a support case.