PRIVACY POLICY

Last updated: March 13, 2026

OVERVIEW

CAPS Armory LLC ("we," "us," "our") operates the CAPS Armory mobile application and employee web portal. This policy explains how we collect, use, and protect your personal information.

INFORMATION WE COLLECT

When you create an account, we collect:

Full name
Email address
Phone number
Date of birth

When you use the app, we may also process:

DROS (Dealer Record of Sale) transaction data associated with your account
Appointment bookings and history
AI legal assistant queries and responses
DROS scan images submitted for AI text extraction
Push notification tokens for delivery of status updates

INFORMATION STORED ON YOUR DEVICE

Your Firearm Safety Certificate (FSC) number is stored exclusively on your device using encrypted storage (SecureStore). It is never transmitted to our servers.

HOW WE USE YOUR INFORMATION

To manage your DROS transactions and provide real-time status updates
To schedule and manage appointments
To process DROS scan images for text extraction via AI
To send push notifications about DROS status changes and pickup readiness
To respond to AI legal assistant queries

THIRD-PARTY SERVICES

We use the following third-party services to operate the app:

Supabase — Database and authentication (US-West region, encrypted at rest)
Expo Push Notifications — Delivery of status update notifications
AI Providers (Anthropic Claude, Google Gemini) — Text extraction from DROS scan images and legal information queries. Images and queries are processed for extraction only and are not retained or used for model training.

DATA SHARING

We do not sell, rent, or trade your personal information to any third party. Data is shared only with the third-party services listed above, solely for the purposes described in this policy.

DATA STORAGE AND SECURITY

Your data is stored in Supabase (US-West region) with encryption at rest. Access is controlled through row-level security policies. Employee access is restricted by role and requires active authentication.

ACCOUNT DELETION

Important — Federal Retention Requirement: Under ATF regulations (27 CFR 478.125), CAPS Armory is legally required to retain records of all firearm transactions indefinitely. Account deletion removes your login credentials and personal contact information, but transaction records (including DROS entries and A&D book data) are retained as required by federal law. This exemption applies to all data deletion requests, including those made under CCPA.

You may delete your account at any time from the app (Profile → Delete Account). This permanently removes your account and all associated data from our systems. You may also request deletion by emailing [email protected].

CHANGES TO THIS POLICY

We may update this privacy policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the app after changes constitutes acceptance.

CONTACT

For questions about this privacy policy or your data:

Email: [email protected]
CAPS Armory LLC
Monterey Park, CA 91754