Valutazione ArmiPrivacy Policy — Valutazione Armi
Last updated: September 28, 2026 · Version 1
1. Data controller
Ferre Consulting & Digital LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, limited liability company registered in the State of Wyoming (USA), email: info@valutazionearmi.it. EU representative under Art. 27 GDPR: Armeria LR di De Pasquale Luigi, Via Spezia 9, 43044 Collecchio (PR), Italy — email: info@valutazionearmi.it.
2. Data we process
| Category | Data | Source |
|---|---|---|
| Account | email address, password (stored only in hashed form), chosen country, date of age confirmation, version and date of acceptance of Terms and Policy | you, at sign-up |
| Valuations | firearm type, make, model, caliber, stated condition; estimate result; notes from our expert | you, when you request a valuation |
| Inventory (Professional plan only) | item description, purchase and sale prices and dates, notes | you |
| Purchases | pseudonymous user ID, product purchased, dates, subscription status, transaction IDs | Apple / Google via RevenueCat |
| Technical data | IP address, request timestamps, device type, error logs | collected automatically by our providers for security and operation |
We never ask for or store: firearm serial numbers, firearm licence or permit data, identity documents, photos, payment card or bank details (handled by Apple and Google), GPS location, address-book contacts.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Account management; valuations, history, inventory and data export | performance of contract (Art. 6(1)(b)) |
| Purchases, subscriptions, refunds | performance of contract (Art. 6(1)(b)); legal tax obligations (Art. 6(1)(c)) |
| Age check and proof of acceptance of the Terms | contract and legitimate interest (Art. 6(1)(b),(f)) |
| Security and abuse/fraud prevention (usage limits, logs) | legitimate interest (Art. 6(1)(f)) |
| Improving estimate accuracy using aggregated, anonymous data | legitimate interest (Art. 6(1)(f)) |
We do not use your data for advertising, we do not sell it and we do not profile you for marketing.
4. AI-assisted estimates (countries other than Italy)
Outside Italy, an estimate may be calculated by searching public web listings through an artificial-intelligence service (Anthropic). Only the firearm data (type, make, model, caliber, country, currency) is sent, never your email or anything that identifies you. Estimates are indicative and have no legal effect on you (not an automated decision under Art. 22 GDPR).
5. Recipients
Only service providers acting as processors (Art. 28 GDPR):
- Supabase Inc. — database, authentication and service emails; data hosted in the European Union (Frankfurt, Germany).
- RevenueCat Inc. (USA) — technical management of in-app purchases.
- Apple Inc. / Google LLC — payment collection and app distribution (independent controllers for their own processing).
- Anthropic PBC (USA) — only for the AI estimates in section 4, without personal data.
- [Email provider, if any, e.g. Resend / Brevo].
Transfers to the United States rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
6. Retention
- Account, valuations and inventory: while your account is active; deleted immediately and permanently when you delete your account.
- Payment records: as long as required by tax law (up to 10 years).
- Technical logs: up to 90 days, unless needed to investigate abuse.
- Aggregated, anonymous price data (not linked to you): indefinitely.
7. Your rights
You can access your data and get a copy (in the app: Account → Download a copy of my data), rectify it, erase it (Account → Delete account), restrict or object to processing, request portability and withdraw consent. Write to info@valutazionearmi.it; we reply within 30 days. You may also lodge a complaint with your data protection authority (in Italy: Garante per la protezione dei dati personali, www.garanteprivacy.it). California residents: we do not sell or share personal information.
8. Minors
The service is for adults aged 18 or over only. We do not knowingly collect data from minors and delete it if we become aware of it.
9. Security
Encrypted connections (HTTPS), passwords stored only in hashed form, per-user access restrictions enforced by the database, service keys kept on servers only.
10. Changes
If we change this Policy materially, the app will ask you to accept it again before continuing.