Privacy notice

This notice explains how Magwell Systems LLC handles personal information through the Magwell website, dealer operations service, support channels, and related services. Magwell is a United States business-to-business platform intended for licensed dealers and their authorized personnel, not a consumer firearms marketplace.

Magwell acts as a business responsible for account, website, billing-administration, and support information. When a dealer uses Magwell to process its own customer, employee, catalog, order, or operational information, the dealer determines why that information is processed and Magwell acts on the dealer's instructions.

Depending on the services enabled, we may handle:

• Account and business contact details, including name, email, organization, role, and store assignment.
• Dealer configuration, catalog, inventory, receiving, storefront, customer-request, order, fulfillment, and audit records.
• Information submitted in support communications and service feedback.
• Subscription and payment-status information, transaction references, and billing contact details. Payment-card details are collected by the payment processor, not stored by Magwell.
• Connection metadata and data a dealer directs Magwell to exchange with an enabled third-party provider.
• Device, browser, approximate network, cookie, security, diagnostic, and service-usage information.

Magwell is not designed to store Form 4473 answers, optional Social Security numbers, government identification images, background-check payloads, or official acquisition and disposition records unless a separately approved service expressly says otherwise.

We receive information from account holders and their organizations, dealer personnel, storefront visitors who submit an enabled request, providers a dealer chooses to connect, identity and payment providers, support communications, and ordinary website or service operation. Dealers are responsible for having authority to provide information they place in Magwell.

We use information to:

• Provide, secure, maintain, support, and improve the service.
• Authenticate users, enforce organization and store access, and prevent abuse.
• Operate dealer-directed catalog, inventory, storefront, order, fulfillment, review, and connection workflows.
• Administer subscriptions, reconcile provider outcomes, and keep required business and audit records.
• Diagnose failures, measure performance, communicate service information, and comply with law.

We do not sell personal information or use it for cross-context behavioral advertising.

We disclose information only as reasonably needed to:

• Cloud hosting, database, security, analytics, identity, communication, payment, and support service providers working for Magwell.
• Distributors, shipping providers, accounting systems, marketplaces, and other connections a dealer authorizes.
• The dealer organization that controls the workspace and its authorized users.
• Professional advisers, transaction participants, regulators, courts, or law enforcement where legally required or reasonably necessary to protect rights and safety.

Current and planned service providers include Vercel, Supabase, WorkOS, Sentry, Resend, and Payroc. A named provider is used only when its owning service path is enabled.

Magwell uses cookies and similar storage needed for security, authentication, preferences, and reliable service operation. We also use privacy-limited performance and error telemetry to understand page health and diagnose failures. We do not use advertising cookies. Your browser may let you restrict storage, but required security or authentication features may not work without it.

We retain information for the period reasonably needed to provide the service, fulfill the purposes described here, maintain security and audit evidence, resolve disputes, and meet legal or contractual obligations. Retention varies by record type. We delete or deidentify information when it is no longer needed, subject to backups, required records, fraud prevention, and a dealer's instructions for dealer-controlled data.

We use administrative, technical, and organizational safeguards designed for the nature of the information we handle, including restricted server-side access, encrypted transport, scoped authorization, provider-managed identity controls, logging limits, and recovery procedures. No system is completely secure, and we cannot guarantee that unauthorized access or loss will never occur.

Depending on where you live and the law that applies, you may request access, correction, deletion, portability, or information about our handling of your personal information. You may also have a right to appeal a decision or to receive equal service after exercising a right. Send requests to privacy@magwellsystems.com. We may verify your identity and authority before acting. Dealer customers should direct requests about dealer-controlled data to the dealer first; we assist the dealer as required.

Magwell is a business service and is not directed to children or individuals under 18. We do not knowingly collect personal information from children through the public Magwell website. Contact us if you believe a child provided information to Magwell improperly.

We may update this notice as the service, providers, or legal requirements change. We will publish the revised notice with a new effective date and provide additional notice when required. Material changes do not retroactively authorize an incompatible use of personal information.