Privacy Policy

1.Scope and Who We Serve

ArmedStrong is a business-to-business platform. The Services are designed for and made available to verified business participants — including holders of Federal Firearms Licenses (FFLs), licensed importers and exporters, agency and government buyers, manufacturers, distributors, and qualified institutional users. We do not knowingly market to or collect information from individual consumers seeking to purchase regulated goods.

This Policy applies to information we collect through:

• –our website at armedstrong.com and any subdomains we operate;
• –our buyer and seller platform, including the dashboard, listings, ordering, escrow, and shipment-tracking interfaces;
• –our mobile applications, if and when made available;
• –email, SMS, in-platform messaging, and customer support interactions;
• –investor relations, marketing, and recruiting channels operated by ArmedStrong.

2.Information We Collect

3.Sources of Information

We collect information from the following sources:

• –Directly from you, when you create an account, submit license documentation, place or accept orders, communicate with us, or otherwise interact with the Services.
• –Automatically, through cookies, pixels, server logs, and similar technologies as described in Section 9.
• –From third-party partners, including license-verification services (such as ATF FFL eZ Check), state regulatory databases, sanctions and watchlist providers (including OFAC, BIS Denied Persons, and Entity List data), banking and payment processors, shipping and logistics carriers, identity-verification vendors, and analytics providers.
• –From publicly available sources, including federal and state regulator publications, business registries, and public filings.

4.How We Use Information

We use the information we collect to:

• –operate, maintain, secure, and improve the Services;
• –verify the identity, license status, and eligibility of buyers and sellers, and re-verify on a periodic basis;
• –facilitate, route, document, and settle transactions between licensed counterparties;
• –process payments, escrow, refunds, and disputes through our financial partners;
• –screen counterparties and transactions against applicable sanctions, export-control, and watchlist requirements;
• –provide customer support and respond to your inquiries;
• –send transactional, security, compliance, and program-related communications by email, SMS, or in-platform notification;
• –send marketing and product-update communications to opted-in recipients, with the ability to opt out at any time;
• –monitor for fraud, abuse, prohibited transactions, and security threats, and to enforce our terms;
• –comply with our legal, regulatory, recordkeeping, and reporting obligations under federal and state law, including ATF, ITAR, DDTC, BIS, and state-level requirements;
• –conduct internal analytics, research, and product development;
• –evaluate corporate transactions, financings, and investor relationships.

5.Legal Bases for Processing

We process information on the following bases, as applicable under U.S. federal and state law and, where relevant, under the laws of other jurisdictions:

• –Contractual necessity — to provide the Services you have requested and to fulfill our agreements with you.
• –Legal obligation — to comply with statutes, regulations, court orders, and recordkeeping requirements applicable to firearms commerce, export controls, and financial transactions.
• –Legitimate interests — to operate, secure, and improve our Services; to detect and prevent fraud and abuse; and to support our business operations, where such interests are not overridden by your rights.
• –Consent — for marketing email, SMS messaging, and other activities where consent is required and has been provided. You may withdraw consent at any time.

6.How We Share Information

We share information only as described below. We do not sell personal or business information.

7.Email Communications

We send email for transactional, security, compliance, and operational purposes (such as account verification, transaction confirmations, license-renewal reminders, and security alerts). These messages are not subject to opt-out because they relate to your use of the Services and our regulatory obligations.

We also send marketing and product-update emails to recipients who have opted in or who fall within an established business relationship as permitted by law. You can unsubscribe from marketing email at any time by clicking the unsubscribe link in any marketing message or by contacting privacy@armedstrong.com.

8.SMS and Mobile Messaging

ArmedStrong operates an SMS messaging program governed by the provisions set out in this section.

9.Cookies and Tracking Technologies

We use cookies, pixels, local storage, and similar technologies to:

• –operate the Services and maintain authenticated sessions;
• –remember preferences and settings;
• –measure and improve performance, security, and usability;
• –detect fraud and abuse.

Most browsers allow you to refuse, restrict, or delete cookies through browser settings. Certain features of the Services may not function properly without them. We do not use cookies to facilitate cross-site behavioral advertising on consumer media properties.

10.Analytics and Product Improvement

We use analytics tools to understand how the Services are used, diagnose errors, measure feature adoption, and improve the platform. Analytics data is generally aggregated or pseudonymized and is used for internal purposes. We do not enable analytics partners to use platform data to build profiles for their own advertising purposes.

11.How We Store and Protect Information

ArmedStrong stores information on cloud infrastructure operated by reputable U.S.-based providers. We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, and destruction, including:

• –encryption in transit using TLS;
• –encryption at rest for sensitive fields, including license data and payment-related identifiers;
• –role-based access controls and the principle of least privilege;
• –multi-factor authentication for administrative and platform access;
• –logging, monitoring, and intrusion detection on production systems;
• –vendor due diligence, security questionnaires, and contractual data-protection requirements;
• –secure software development practices, code review, and periodic security testing;
• –incident response procedures and breach notification consistent with applicable law.

No system is perfectly secure. While we work to protect your information, we cannot guarantee absolute security and recommend that you use strong, unique credentials, enable multi-factor authentication, and promptly notify us of any suspected unauthorized access.

12.Data Retention

We retain information for as long as necessary to provide the Services, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

• –Transaction records, license documentation, and compliance logs are retained for the periods required by federal and state firearms, export-control, and financial recordkeeping laws, which may extend beyond the life of your account.
• –Account information is retained while your account is active and for a reasonable period thereafter for legal and operational purposes.
• –SMS consent and opt-out records are retained for compliance and audit purposes for the period required by applicable telecommunications and consumer-protection law.
• –Marketing and analytics data is retained for the period necessary to support the purposes for which it was collected.

When information is no longer needed, we delete, archive, or de-identify it in accordance with our retention schedule.

13.Your Rights and Choices

14.State-Specific Privacy Disclosures

Depending on your state of residence, additional rights may apply. These include, where applicable, rights to:

• –know what personal information we collect, use, and disclose;
• –access a copy of your personal information;
• –correct inaccurate personal information;
• –request deletion of personal information;
• –opt out of certain processing activities, including the “sale” or “sharing” of personal information as defined under California law (we do not sell or share personal information for cross-context behavioral advertising);
• –limit the use and disclosure of sensitive personal information;
• –appeal a denial of your request, where required.

These rights are subject to verification and to exemptions under applicable state law. Many state privacy laws contain B2B exemptions and exemptions for information processed for federal compliance and recordkeeping purposes that may apply to data we hold about you. To exercise your rights, contact privacy@armedstrong.com.

15.International Users

The Services are intended for use in the United States. Information you provide is processed and stored in the United States. If you access the Services from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different data-protection laws than your home jurisdiction.

16.Children’s Privacy

The Services are intended for business users and are not directed to children. We do not knowingly collect information from anyone under 18. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

17.Third-Party Sites and Services

The Services may contain links to third-party websites, applications, or services that are not operated by ArmedStrong. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party before providing information.

18.Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top of the page reflects the most recent revision. Material changes will be communicated through the platform, by email, or by other reasonable means. Continued use of the Services after the effective date of an updated Policy constitutes acceptance of the changes.

19.Contact

Questions, requests, or complaints about this Policy or our data practices?

ArmedStrong, Inc. · Attn: Privacy · privacy@armedstrong.com