Retailer Data Protection Commitment

1. What we will not do with your store data

• No sale of customer lists — shopper emails captured through your agent stay for your store. We do not sell them as a product.
• No sharing leads with other dealers — email leads and store-scoped demand in your portal are not exported to competing retailers.
• No Brand Intelligence PII dump of your customers — OEM / Platform Brand Intelligence clients receive anonymized market demand. They do not receive shopper emails, session ids, your store hostname, or product page URLs.
• No public “outing” of your store on Insights — public demand surfaces show aggregated signals, not a competitor CRM feed labeled with your legal name.

2. What we process (and why)

• Account — work email, name, password (hashed), plan flags, so you can log in and manage agents.
• Agent / embed config — website, allowed origins, branding, optional product feed URL, so the widget and dashboard work on your site.
• Catalog fields — when you connect a feed: titles, prices, stock, UPCs, links for inventory search and store demand against your SKUs.
• Shopper intent on your site — search filters, coarse geo (state/region when available), and optional email when a shopper asks for results or alerts — so you get Demand and Leads.
• Billing — if you buy GSA Pro, Stripe processes payment (we do not store full card numbers).

3. Network & anonymized demand (honest scope)

GunSearchAgent runs on the GunSearchEngine platform (same operator). Some features compare your store to anonymized network demand (for example Market Pulse on Pro). That network view is category heat — calibers, brands, types — nota download of other dealers' customer emails or a labeled map of competitor stores for Brand Intelligence partners.

Sites running in observe / brand-sensor mode without a product feed are isolated from network demand aggregates. Your private leads remain store-scoped either way.

4. Who can see store-scoped data

• You — portal users on your GunSearchAgent account.
• Coriolis support — only when needed to operate the service (for example time-limited support login you or GSE admin initiate), under our security practices.
• Infrastructure vendors — hosting, database, email delivery, payments, AI API — under their terms, not as marketing recipients of your lead list.

5. Your controls

• Disable or remove the embed from your site anytime
• Pause or stop morning Daily Search Insights emails
• Manage or export your leads from your own portal
• Cancel paid Pro; request account deletion via contact below

6. Enterprise / high-volume retailers

Standard DPA (self-serve): Sign in to GunSearchAgent → Account → Data Processing Agreement. Review the Standard Retailer DPA, attest authority and ESIGN consent, and click to sign. You get a PDF certificate by email and can re-download anytime. No paper, no back-and-forth for the Standard form.

Custom schedule / security questionnaire: email devops@coriolisagency.com or use Coriolis contact. We work with large multi-store operators under commercial terms that match how the product already isolates leads and anonymizes network demand.

Sign Standard DPA in dashboard →

7. Related

Full detail: Privacy Policy · Terms of Use. GunSearchEngine Brand Intelligence sanitization is also described at gunsearchengine.com/privacy.