Privacy Policy
GunSpec.io is a product of Buun Group ("Buun Group," "we," "us," or "our"), an Australian company. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our firearms specification database and API services.
By accessing or using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please do not use the Services.
01Information We Collect
We collect information that you provide directly to us when creating an account, including your email address and subscription tier selection.
We automatically collect certain technical information when you interact with our Services, including: IP address, browser type and version, device information, API request logs (endpoint, timestamp, response status), and usage patterns.
We do not collect or store payment card information directly. All payment processing is handled by our third-party payment processor, Stripe.
02How We Use Your Information
We use the information we collect to: (a) provide, maintain, and improve the Services; (b) process transactions and send related information; (c) monitor and enforce rate limits and subscription quotas; (d) detect, prevent, and address technical issues, fraud, and abuse; (e) send you technical notices, updates, and administrative messages; (f) respond to your comments, questions, and support requests.
03API Usage Data
We log API requests for operational purposes, including rate limit enforcement, abuse detection, performance monitoring, and debugging. API request logs include the endpoint called, request timestamp, response status code, and your API key identifier.
We do not log the full content of API responses. API usage logs are retained for 90 days and then automatically deleted.
Aggregate, anonymized usage statistics may be retained indefinitely for analytics and service improvement purposes.
05Data Sharing
We do not sell your personal information. We may share your information with: (a) Buun Group, our parent company, for operational and billing purposes; (b) service providers who perform services on our behalf (e.g., Stripe for payment processing, Cloudflare for hosting and security); (c) law enforcement or government authorities when required by law or to protect our rights; (d) other parties in connection with a merger, acquisition, or sale of assets.
All third-party service providers are contractually obligated to protect your information and use it only for the purposes for which it was shared.
06AI & Machine Learning
We do not use your personal information, API requests, support tickets, data reports, webhook configuration or seller listings to train, fine-tune or evaluate any machine-learning model, whether ours or a third party's, and we do not sell, license or share your data with any AI provider for that purpose.
Where a model runs on our platform, it reads publicly available web pages and our own catalog records, for example to sort industry news or to check a published specification against a manufacturer's page. It never reads data you have sent us.
A current inventory of what we collect and where models run is published in our developer documentation.
07Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/HTTPS), secure API key storage, and access controls.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
08Data Retention
We retain your account information for as long as your account is active or as needed to provide the Services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it by law or for legitimate business purposes.
API usage logs are retained for 90 days. Billing records are retained for 7 years as required by applicable tax and accounting regulations.
09Your Rights
Depending on your location, you may have certain rights regarding your personal information, including: the right to access your data, the right to correct inaccurate data, the right to delete your data, the right to data portability, and the right to object to or restrict certain processing.
For Australian users, your rights are protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
For users in the European Economic Area (EEA), we process your data under the legal bases of contract performance, legitimate interests, and consent where applicable. You have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, please contact us at legal@buungroup.com.
10Children's Privacy
The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
11International Data Transfers
Buun Group is based in Australia. Your information may be transferred to and processed in countries other than your country of residence, including Australia and the United States, where our servers and service providers are located. These countries may have data protection laws that differ from your country.
We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by the European Commission where applicable, and compliance with the Australian Privacy Principles for cross-border disclosures.
12Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Services after any changes constitutes your acceptance of the revised policy.
13Contact
GunSpec.io is owned and operated by Buun Group. If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at legal@buungroup.com or visit https://buungroup.com.