1 Introduction
This Privacy Policy explains how Numistify LLC ("Numistify," "we," "us," or "our") collects, uses, and shares information when you use Numistify, a web-based application for cataloging and managing collections of coins, banknotes, and bullion (the "Service"). By using the Service, you agree to the practices described here.
2 What we collect
We collect only what we need to provide the Service:
| Category | Examples |
|---|---|
| Account information | Your email address and authentication credentials, used to create and secure your account. |
| Collection data | The items you catalog and details you enter — such as descriptions, quantities, grades, notes, purchase and sale information, and any images you upload for identification. |
| Subscription & billing | Your plan tier and subscription status. Payment card details are collected and stored by our payment processor, not by us — we never see or store your full card number. |
| Support communications | Messages you send us, including any device or context details you choose to include when reporting an issue. |
| Basic technical data | Limited technical information necessary to operate and secure the Service, such as data your browser sends when you connect. |
3 How we use your information
We use the information we collect to:
- Provide, maintain, and improve the Service;
- Create and secure your account and authenticate you;
- Process subscriptions and payments through our payment processor;
- Provide AI-assisted identification when you request it;
- Respond to your support requests;
- Send you essential account, billing, and transactional messages;
- Detect, prevent, and address technical issues, abuse, or security incidents;
- Comply with legal obligations.
4 AI identification & images
When you use the AI identification feature, the image and related data you submit are sent to our AI processing provider to generate an identification result. We do not use your collection data or images to train AI models.
6 Service providers
We rely on trusted third-party providers to operate the Service. Each processes only the data needed for its function:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and secure storage of your account and collection data. |
| Netlify | Website and application hosting, and serverless functions. |
| Stripe | Payment processing and subscription billing. Stripe collects and stores your payment details and, for certain transactions, acts as merchant of record and handles applicable transaction taxes. |
| Sold through Link, LLC | Stripe's merchant-of-record entity for paid plan purchases. It is the seller of record for the transaction, charges your payment method, issues your receipt, and handles transaction taxes, refunds, and payment disputes. Receipts and card statements may show its name rather than Numistify's. |
| Anthropic | AI processing for the identification feature. Images and related data you submit for identification are processed by Anthropic to return a result. |
| Resend | Delivery of transactional and account-related emails. |
These providers are bound by their own privacy and security commitments. Optional marketplace integrations you choose to connect are also governed by the relevant third party's terms.
7 Optional market-data sharing
The Service may offer an opt-in feature that lets you contribute sale data to help build aggregate market and pricing insights. This feature is off by default — nothing is contributed unless you turn it on.
Availability. This feature is not currently enabled on all accounts. If it is not enabled on yours, no control appears in your settings and no sale data from your collection is contributed. When it becomes available to your account, it will appear in your settings switched off, and nothing is contributed unless you choose to turn it on.
What a contributed record contains. Each record describes a single sale of a single item: the item type, country, year, denomination, whether it is graded, the grade and grading service (or the condition, if ungraded), the price you paid, the price it sold for, the month of sale, and the sales channel. Each record also carries an internal reference used to prevent the same sale being recorded twice. Individual records are stored and used to calculate aggregate figures; they are not published individually.
What a contributed record does not contain. Contributed records do not include your name, your email address, your account identifier, or your notes, storage locations, invoice numbers, or certification numbers.
How we treat contributed data. Other users cannot trace a contributed record back to you. We are able to, however, for as long as your account exists, because the internal reference points to the underlying item in your collection. We therefore treat contributed data as personal data rather than as irreversibly anonymous data, and the rights described in Section 11 apply to it.
Where the feature is available on your account, you can turn it off at any time in your settings. Doing so stops future contributions; records already contributed remain in the dataset. If you delete your account, the underlying items are deleted with it, after which contributed records can no longer be related back to you — see Section 9.
9 Data retention
We retain your account and collection data for as long as your account is active. When you delete items, they are held in a recycle bin for a limited period (up to 30 days, depending on your plan) so you can recover them, after which they are permanently deleted.
Deleting your account. You can delete your account at any time from the settings menu in the app, or by emailing support@numistify.com from the email address associated with your account. We may ask you to verify your identity before acting on an emailed request. When an account is deleted, we delete your collection data, your profile, your scan history, and your error and activity records, and we delete your login credentials from our authentication provider. Deletion is permanent and cannot be undone.
What we keep after deletion. We retain a minimal deletion record containing your account identifier, the email address associated with the account, the plan in effect at the time, whether a subscription was cancelled, and the date of deletion. We keep this record to confirm that a deletion took place, to answer billing or dispute questions afterwards, and to prevent repeated sign-up and deletion being used to evade free-tier limits. We rely on our legitimate interests for this, and we retain it for no longer than is necessary for those purposes. We may also retain records where we are required to do so to comply with legal, tax, or accounting obligations, and our payment processor independently retains transaction records under its own obligations, outside our control.
Contributed market data. If you contributed sale records under Section 7, those records carry no name, email address, or account identifier. They reference the underlying item, so while your account exists we are able to relate them to it; once your account and its items are deleted that link no longer exists and the records cannot be related back to you. They therefore remain part of the aggregate dataset after deletion.
10 Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and reliance on established infrastructure providers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.
If a data breach happens. If we become aware of a security breach that affects your personal information, we will investigate, take steps to address it, and notify you and any relevant authorities where we are required to do so by applicable law. Because we rely on third-party providers to run the Service, a breach could originate with one of them; in that case we will act on the information available to us and notify you as required.
11 Your rights & choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:
- Access and edit your collection data directly in the app;
- Export your data using the built-in export tools;
- Delete your account and associated data from your account settings, or by emailing support@numistify.com from the address associated with your account;
- Opt out of market-data sharing at any time in settings.
To exercise any right or ask a question about your data, contact us at support@numistify.com. We will respond as required by applicable law.
12 California privacy rights
If you are a California resident, you may have rights under the California Consumer Privacy Act (as amended), to the extent it applies to us. These may include the right to know what personal information we collect and how we use it, the right to request access to or deletion of your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are used under California law. Because we do not sell or share personal information in this way, there is no need to opt out of such activity — but if this ever changes, we will update this policy and provide any required opt-out.
To exercise any applicable right, contact us at support@numistify.com. We will verify and respond to your request as required by applicable law.
13 European Economic Area & UK rights
If you are located in the European Economic Area, the United Kingdom, or a similar jurisdiction, you may have rights under the applicable data-protection law (such as the GDPR or UK GDPR), to the extent it applies to us. These may include the rights to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent.
Where these laws apply, we process your personal data on lawful bases that may include: performance of our contract with you (to provide and operate the Service and your account); our legitimate interests (such as securing the Service and preventing abuse); your consent (for example, the optional market-data sharing feature); and compliance with legal obligations.
Your personal data may be processed in the United States and other countries where we or our service providers operate, which may have different data-protection laws than your own. Where required, we take steps intended to ensure your data receives an appropriate level of protection when transferred.
You may also have the right to lodge a complaint with your local data-protection authority. To exercise any applicable right or withdraw consent, contact us at support@numistify.com.
14 Children's privacy
The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact us at support@numistify.com.
15 International users
Numistify is operated from the United States, and your information is processed in the United States and in other countries where our service providers operate. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.
16 Changes to this policy
We may update this Privacy Policy from time to time — for example, if we add new features, service providers, or data practices such as analytics. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. We encourage you to review this policy periodically.
17 Contact
If you have questions about this Privacy Policy or your data, contact us at support@numistify.com.
Numistify LLC · Georgia, USA