Privacy Policy

1. Who we are

American Penny Power ("we", "us") runs americanpennypower.com, an AI-assisted coin grading, valuation, collecting and marketplace website. Contact: keatrng@gmail.com. Our business mailing address and the state where we are organized are not yet published; we'll add them here.

2. Information we collect

• Account: email address, password (we never see it; our sign-in provider stores only a secure hash), the date you accepted our Terms, sign-in times, and the devices (browser type and IP address) currently signed in.
• Two-step sign-in: if you turn it on, a secret shared with your authenticator app, stored by our sign-in provider.
• Coins and grades: photos you take or upload, notes and weights you enter, the AI grading report, your cabinet, sold ledger, want list and price alerts.
• Purchases and membership: what you bought, amounts, dates, and your membership status. Card details go straight to Stripe; we never see or store your card number.
• Marketplace: listings, photos, messages in reports, orders and shipping status, and payout account status from Stripe Connect.
• Usage: a cookieless page-view log (page, referring website, phone/tablet/desktop, and a random visitor ID kept in your browser so we can count unique visitors). We also remember which link or referral first brought you to the site. We do not store IP addresses or browser fingerprints in this log. To prevent abuse of free grading we store a one-way salted hash of the IP address that sent a grading request.
• Messages you send us (for example the "Sell to us" form).

3. How we use it

• To provide the service: your account, grading, cabinet, purchases, membership and marketplace.
• To keep it safe: fair-use limits, fraud and abuse prevention, security alerts and the device limit.
• To communicate: account emails (confirmations, password resets, receipts, membership notices). We don't send marketing email unless you opt in.
• To improve accuracy: we review grading results in aggregate and may look at individual reports when you ask for human review.

4. AI grading

When you grade a coin, your photos and notes are sent to an AI model provider (Anthropic, through Netlify's AI Gateway) to produce the report. They process it to return a result to us. Prices in reports are calculated by our own price table, not by the AI.

5. Who we share it with

Only the service providers that run the site for us, under their own privacy and security terms:

• Supabase — sign-in, database and private photo storage.
• Netlify — website hosting and server functions.
• Anthropic (via Netlify AI Gateway) — AI analysis of coin photos.
• Stripe — payments, memberships, refunds and marketplace payouts.
• Resend — sending account emails.
• jsDelivr — delivers a code library to your browser.

We may also disclose information if the law requires it, to protect people from harm or fraud, or as part of a sale of the business (you'd be told first). We do not sell or share personal information as those terms are defined in U.S. state privacy laws, and we don't use third-party advertising cookies.

6. Cookies and device storage

We use your browser's local storage to keep you signed in, remember your theme, store guest coins before you sign up, keep a random visitor ID and the link that first brought you here, and count page visits. You can clear all of this by clearing site data in your browser. No advertising or cross-site tracking cookies.

7. How long we keep it

• Account data, cabinet and photos: until you delete them or your account.
• Grading reports: kept with your account; after account deletion they are kept without your name for accuracy statistics.
• Purchase and tax records: as long as tax and accounting law requires.
• Marketplace orders: for the dispute and tax period.
• Security logs: up to 12 months.

8. Your choices and rights

Wherever you live, you can: see and download your data (Account settings → Privacy → Download my data), correct it, delete it (Account settings → Privacy → Delete my account, completed within 30 days), and opt out of any marketing. Residents of California and other states with privacy laws have these rights by law, plus the right not to be discriminated against for using them. We don't sell or share personal information, so there is nothing to opt out of there. To use a right by email, write to keatrng@gmail.com from your account email. You may use an authorized agent; we'll verify the request.

9. Security

Passwords are hashed by our sign-in provider and checked against known breaches; you can turn on two-step sign-in; coin photos are stored privately and shared only through short-lived links; every database table is protected by per-user access rules. No system is perfectly secure, so please use a unique password.

10. Children

The site isn't directed to children under 13 and we don't knowingly collect their information. You must be 18 or older (or the age of majority where you live) to buy, subscribe or use the marketplace. Parents who believe a child gave us information can contact us to delete it.

11. Changes

If we make a material change we'll update the version date at the top and tell signed-in members before it takes effect.