Privacy Policy

Depending on how you use the Services, we may collect the following categories of information:

• Account and business information: names, usernames, email addresses, phone numbers, business names, business contact details, roles, authentication credentials, and account settings.
• Operational information: information submitted by account holders or their authorized users, including customer profiles, identity-document details, loan, transaction, inventory, payment, receipt, compliance, audit, and communication records.
• Payment information: payment and transaction information needed to provide the Services. Card payments are processed through payment service providers; PawnVault does not intentionally store full payment-card numbers or card security codes.
• Device and usage information: IP address, browser and device information, log data, pages or features accessed, timestamps, and diagnostic information generated when the Services are used.
• Communications: information you provide when you request support, send us a message, or otherwise communicate with us.

We use information to provide, operate, secure, maintain, and improve the Services; create and administer accounts; process authorized transactions; provide support; communicate about the Services; prevent fraud, misuse, and security incidents; comply with law and enforce our agreements; and maintain records required for legitimate business purposes.

Where required by applicable law, we process personal information based on one or more lawful grounds, including performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing the Services, and consent where required.

We may disclose information to the following recipients, only as necessary for the purposes described in this policy:

• Authorized users and administrators of the applicable PawnVault account.
• Service providers that help us host, secure, operate, communicate through, analyze, or support the Services, including cloud infrastructure, payment, email, SMS, address-autocomplete, marketplace-integration, and AI service providers (see Section 4).
• Professional advisers, insurers, and auditors subject to appropriate confidentiality obligations.
• Government authorities, law enforcement, or other parties when we believe disclosure is required by law, legal process, or to protect the rights, safety, and security of PawnVault, our customers, or others.
• A successor or prospective successor in connection with a merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to applicable law.

We do not sell personal information or share it for cross-context behavioral advertising. We may sell de-identified data as described in Section 5.

Some PawnVault features use artificial-intelligence services that run on third-party infrastructure. These include the AI import tools (which read the files a store uploads, map and normalize them, and prepare records for review), the market scan and pricing research tools, and the in-app help assistant. These features run only when a store's authorized staff use them.

To provide these features, PawnVault sends the content needed for the request to the following AI service providers, which act as subprocessors:

• OpenAI: receives AI requests (including web-search-assisted market research) and the content of those requests.
• Vercel AI Gateway: relays certain AI requests, including requests to the TypeSafe models used for classification and matching during import, to the model provider. Which route a request takes depends on the feature and on how the service is configured.

The content sent can include store and customer information contained in the uploaded files or the request, such as names, contact details, dates of birth, identity-document details (for example government ID numbers), loan and transaction records, and item descriptions. We send this content only to perform the feature the user requested.

We do not sell this information to AI providers or allow it to be sold. We use it to provide the requested feature, and we do not use it to advertise to individuals. Each provider handles information according to its own terms and privacy practices, including its terms on retention and on use for model training; those terms are subject to change, and we do not control them.

The store that chooses to use these features is responsible for having a lawful basis and any required notices or consents to process its customers' information with them, and for using them in line with the laws that apply to it, including, where applicable, the Gramm-Leach-Bliley Act Safeguards Rule and state privacy and data-security laws. A store that does not want its customer information processed this way should not use the AI features.

PawnVault reserves the right to sell data that has been stripped of identifying information. Before any such sale, we remove or irreversibly alter information that identifies, or could reasonably be used to identify, a person, household, or device. That includes names, contact details, government and account identifiers, precise location, and other direct or indirect identifiers. Data treated this way is de-identified data. It is not personal information.

We may use, license, disclose, and sell de-identified data, including aggregated or statistical data, for any lawful business purpose, such as research, analytics, benchmarking, and product development. We will not attempt to re-identify that data, and we require recipients not to re-identify it or combine it with other information so that it identifies a person, except where the law allows.

This right covers only data from which identifying information has been removed. It does not authorize the sale of personal information that still identifies, or could reasonably be used to identify, an individual.

We use cookies and similar technologies that are necessary to operate the website and Services, remember account and security settings, maintain sessions, and understand performance. You may be able to control cookies through your browser settings, but disabling essential cookies may prevent parts of the Services from working correctly.

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, use, alteration, and disclosure. No system or transmission is completely secure, however, and we cannot guarantee absolute security. Account holders are responsible for maintaining the confidentiality of their credentials, assigning appropriate user permissions, and promptly reporting suspected unauthorized access.

We retain information for as long as reasonably necessary to provide the Services, meet contractual and legal obligations, resolve disputes, enforce agreements, and maintain appropriate business records. Information processed for a PawnVault business customer is retained according to that customer's instructions and applicable law. We may retain de-identified or aggregated information where permitted by law.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information, or to object to or restrict certain processing. You may also have the right to appeal a decision concerning a privacy request. These rights are subject to applicable legal limitations and exceptions.

If your information was submitted to PawnVault by a pawn business, please direct your request to that business first. It controls that information and is best positioned to verify and fulfill your request. PawnVault will assist its business customers with valid requests as required by applicable law and its contractual obligations.

Account holders may update certain account information through the Services. For other privacy requests regarding information PawnVault controls, use the contact details in the applicable agreement, order form, or other account materials for your PawnVault account. We may need to verify your identity and authority before acting on a request.

The Services may be hosted, supported, or accessed from locations outside your state, province, or country. Where we transfer personal information internationally, we will use safeguards required by applicable law.

The Services are business-facing and are not directed to children. We do not knowingly collect personal information from children through our website. If you believe a child has provided personal information to us in violation of applicable law, please have the child's parent or guardian contact the applicable PawnVault business or account administrator.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If a change materially affects how we handle information, we will provide additional notice when required by applicable law.

For questions about this policy or your information, account holders should use the contact details in the applicable agreement, order form, or other account materials for their PawnVault account. Individuals interacting with a pawn business should contact that business directly about its privacy practices and their information.