Privacy Policy

1. Who we are

GunSearchAgent is a dealer product: free agent install on your website, store demand dashboard, optional morning insights email, email leads, and optional GSA Pro (Market Pulse + CRM sync). Betsy AI powers the experience. Backend catalog, sessions, and demand services run on GunSearchEngine under the same operator.

2. Data we collect

• Dealer account — work email, name, hashed password, plan, affiliate codes, FFL claim fields you choose to link.
• Agent configuration — store website, allowed origins, branding, embed mode, optional product feed URL, site key.
• Catalog — product rows from feeds you connect (title, price, stock, UPC, link, attributes).
• Shopper interaction — on your site via embed/observe: search intent, filters, coarse geo from edge headers, page/funnel context (path and stage hints—not full host page copies).
• Leads — emails and intent labels when a shopper requests results, watches, or similar features on your agent.
• Billing — Stripe customer/subscription metadata for paid Pro (card data stays with Stripe).
• Technical — login sessions, rate limits, support-session flags, audit of critical account actions.

3. How we use data

• Run your agent, dashboard, leads, and morning insights
• Authenticate you and protect the service from abuse
• Sync catalog and store demand for your seller id
• Build anonymized / aggregated demand analytics for network and Brand Intelligence products (see Sharing)
• Process Pro payments and send transactional email

4. AI processing

Chat and intent understanding may be processed by our AI provider (xAI / Grok) to answer shoppers on your site. Do not instruct shoppers to enter SSNs, full payment cards, or other highly sensitive personal data into chat. Catalog answers are constrained by your feed and policy rules.

5. Sharing

• Your store only — email leads and store-scoped demand in GunSearchAgent are for your account. We do not sell lead lists to other dealers.
• Brand Intelligence — anonymized market demand packages. Never shopper emails, session ids, your store hostname, or product URLs in partner payloads.
• Public Insights — aggregated demand and map counts, not a session dump of your customers.
• CRM you connect — if you enable Klaviyo/Mailchimp sync on Pro, we push leads you own to your connected account.
• Vendors — hosting, database, email (SMTP), payments (Stripe), AI API under their terms.
• Legal — if required by law or to protect rights and safety.

See also: Retailer Data Protection Commitment.

6. Retention (product defaults)

• Detailed search intent events: on the order of ~14 days
• Sync / ops logs: short retention
• Daily demand rollups: longer for multi-day analytics
• Account, agents, and leads: while your account is active unless you request deletion

7. Cookies & similar

We use secure session cookies for portal login. The embed may use browser storage so a conversation continues on your origin. Analytics may use our hosting provider's tools.

8. Your choices & deletion

You can remove the embed, opt out of daily insights, cancel Pro, and request access, correction, or deletion of personal data tied to your dealer email via devops@coriolisagency.com or Coriolis contact. We may verify control of the email address.

9. Security

TLS in transit, hashed passwords, rate limits, scoped support sessions, and access controls on internal APIs. No method is 100% secure.

10. Children

The service is for adults engaged in lawful firearms and ammunition commerce—not directed at children under 13 (or under 16 where applicable).

11. Changes & contact

We may update this policy as the product evolves; the “Last updated” date will change. Questions: devops@coriolisagency.com. Terms of Use.