Privacy Policy

Last updated July 9, 2026

This Privacy Policy explains what information Trinity Sunfire LLC ("Sunfire Exchange," "we," "us") collects through the Sunfire Exchange website and application (the "Service"), how we use it, and the choices you have.

1. Information We Collect

Information you give us

  • Account details: name, email address, shop name, password (stored as a salted hash, never in plain text).
  • Listing content: titles, descriptions, prices, cost basis, condition, photos you upload, and sourcing notes.
  • Business data you choose to log: sourcing trips, mileage, bundles, payouts, and buyer messages you paste in for AI drafting.
  • Payment information: handled entirely by Stripe. We receive a subscription status and the last four digits of your card for your reference — we never receive or store your full card number.
  • Support messages you send through the in-app chat widget.

Information collected automatically

  • Basic usage analytics (pages visited, feature usage) via PostHog, to understand what to improve.
  • Standard server logs (IP address, browser type, timestamps) for security and debugging.
  • A push-notification subscription token, only if you opt in to push notifications.

2. How We Use Your Information

  • To provide the Service: store your listings, run AI features, calculate fees/P&L/mileage, and process billing.
  • To send account-related email (welcome, trial-ending reminders, weekly summaries, AI daily digests) via Resend.
  • To improve the product based on aggregate, anonymized usage patterns.
  • To detect fraud, abuse, or security issues.

We do not sell your personal information, and we do not use your listing content to train third-party AI models beyond the single request needed to generate your suggestion.

3. Who We Share Data With (Subprocessors)

We use the following service providers to operate Sunfire Exchange. Each only receives the data it needs to do its job:

  • Supabase — database, authentication, and file storage.
  • Stripe — subscription billing and payment processing.
  • Anthropic (Claude API) — generates AI suggestions (pricing, descriptions, photo notes, message drafts). Listing text and photos you submit for AI processing are sent to Anthropic for that single request.
  • Resend — delivers transactional email.
  • PostHog — product usage analytics.
  • OpenStreetMap / Nominatim — free geocoding for the sourcing-location map, if you enter a location.
  • UPCitemdb — public barcode/product lookups, if you use the barcode scanner.
  • Vercel — application hosting.

We may also disclose information if required by law, subpoena, or to protect the rights and safety of Sunfire Exchange or our users.

4. Data Retention

We retain your account and listing data for as long as your account is active. If you delete your account, we delete your personal data and listings within 30 days, except where we're required to retain records (for example, billing records for tax or accounting purposes).

5. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update or delete most of your data directly from Settings, or email info@sunfireexchange.com to make a request. We will respond within a reasonable time and in accordance with applicable law (including GDPR and CCPA where they apply to you).

6. Security

We use industry-standard safeguards: encrypted connections (HTTPS/TLS) everywhere, encryption at rest for stored data, hashed passwords, and database-level row security policies so your data is only ever queryable by your own account. See our Security page for details. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

8. Cookies

We use essential cookies to keep you logged in, and analytics cookies (PostHog) to understand product usage. You can control cookies through your browser settings.

9. Changes to This Policy

We may update this policy from time to time. We'll post the revised version here with an updated date; material changes will also be emailed to active account holders where required by law.

10. Contact

Questions about this policy or your data? Email info@sunfireexchange.com.

This page is a general-purpose template and not a substitute for advice from a licensed attorney familiar with privacy law in your jurisdiction (e.g., GDPR, CCPA).