Do Not Sell or Share
My Personal Information

Why this page exists

California law (the California Consumer Privacy Act / California Privacy Rights Act, "CCPA/CPRA") requires certain businesses to provide a clearly labeled "Do Not Sell or Share My Personal Information" link on their homepage. Several other states have enacted similar laws (Virginia, Colorado, Connecticut, Utah, Montana, and more).

Even though we don't sell or share personal information, we provide this page so that California residents and others with similar rights can easily verify that fact and understand their options.

Our commitment

Gun Transfer America Inc. commits that we:

• Do not sell any personal information to any third party for monetary or other valuable consideration.
• Do not share personal information for cross-context behavioral advertising (i.e., targeted advertising based on personal information we collect about you across sites we don't operate).
• Do not use personal information to train AI or machine learning models.
• Do not disclose firearm-related data, serial numbers, or vault contents to manufacturers, insurers, data brokers, gun-control organizations, or any government registry.
• Do not build profiles of you to sell insights, scores, or aggregated data to third parties.

These commitments are also reflected in our Privacy Policy and Security page.

What we do share — and with whom

For full transparency, we do share specific personal information in limited circumstances, all under contractual protections that prevent downstream sale:

• Payment processor (Authorize.net): receives billing name, address, and payment token to process your subscription. Does not receive your firearm data.
• Hosting provider (Bluehost): hosts our databases and servers. Data is encrypted at rest; hosting provider cannot read it.
• Email delivery: sends transactional emails from our domain. Sees only the envelope (recipient, subject, timestamp).
• Legal process: we disclose data only in response to valid, court-issued legal process directed at a specific account, and only to the extent required. See our Security page for the full approach.

None of these count as "selling" or "sharing for behavioral advertising" under CCPA/CPRA definitions.

Your right to submit a request anyway

You have the right to submit a formal "Do Not Sell or Share" request even though no action is required. If you'd like written confirmation that we have no sales to stop, or if you want to verify your specific account, you can submit a request in any of these ways:

• Email: legal@gunvault.co with subject line "Do Not Sell Request"
• Contact form: gunvault.co/contact/ — choose "Legal / Privacy" as the topic

We will respond within 15 business days to confirm our no-sale status and provide any additional details about your account you request.

Authorized agents

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of their authority (such as a signed permission letter) and proof of your identity. We may deny requests from agents who cannot provide adequate verification.

Non-discrimination

We will not discriminate against you for exercising any privacy right. Specifically, we will not deny you service, charge different prices, reduce the quality of service, or suggest anything of the sort because you submitted a request.

Global Privacy Control

Gun Vault recognizes the Global Privacy Control (GPC) browser signal as a valid opt-out preference. Because we do not sell or share personal information in the first place, enabling GPC has no additional effect on our handling of your data — you are already opted out.

Other privacy rights

Depending on where you live, you may have additional rights including the right to know what we collect, the right to delete, the right to correct inaccurate data, and the right to limit use of sensitive personal information. See the Privacy Policy Section 7 for the full list and how to exercise each.

Questions

For questions about this policy or to exercise any privacy right, email legal@gunvault.co with "Privacy Request" in the subject line.