Privacy Policy

This Privacy Policy explains how BullionTree (“BullionTree,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website, buyer marketplace, dealer portal, admin tools, mobile app, or any related service (collectively, the “Service”). By using the Service, you agree to the practices described here.

1. Information We Collect

We collect information in a few different ways:

• Information you provide directly:such as your name, email address, phone number, ZIP code or state, and details about the metal purchase you're requesting quotes for (metal type, budget, timing, and similar preferences). If you create an account (as a buyer, dealer, or affiliate), we also collect the account details you provide, such as a password (stored as a one-way hash, never in plain text) and, for dealers, business information used for verification and billing.
• Information collected automatically:such as your approximate location (derived from your IP address, used to default your state on the quote form), device and browser information, pages viewed, and general usage activity, including how you interact with pages on our website and dealer portal (session recording). We use cookies and similar local-storage technology for this, described further in Section 4.
• Information from optional features:such as a phone number you choose to verify (via a one-time SMS code) to strengthen your request, or two-factor authentication data (an authenticator app code or SMS code) if you enable it on a dealer, admin, or consumer account.
• Information from third parties:such as confirmation from our payment processor that a dealer subscription payment succeeded, or attribution details (like which affiliate or marketing link referred you) when you arrive via a referral link.

2. How We Use Information

• To operate the marketplace: matching your quote request to relevant dealers and routing it to them.
• To communicate with you: quote confirmations, dealer responses, account and security notifications, and (only if you opt in) marketing updates.
• To verify identity and prevent fraud or abuse, including bot-protection checks on public forms and consistency checks on high-intent requests.
• To operate accounts and billing: authenticating logins, processing dealer subscription payments, and maintaining audit records.
• To improve the Service: understanding how the Service is used so we can fix problems and build better features.
• To comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We do not sell your personal information. We share information only in these circumstances:

• With dealers you request quotes from:a dealer only receives your contact information after they've responded to your request with a quote, or, for shadow/prospective dealers, an anonymized summary with no contact details.
• With service providers who help us operate the Service under contract, including: Postmark (transactional email delivery), Twilio (SMS verification codes), Stripe (dealer subscription billing), Google reCAPTCHA (bot protection on public forms), Google Analytics (usage analytics), Inspectlet (session recording on our website and dealer portal), and, only if you've opted in to marketing communications on a lead-magnet form, HubSpot (marketing contact management).
• For legal reasons:if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of BullionTree, our users, or the public.
• In a business transfer:if BullionTree is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Cookies and Similar Technologies

We use cookies and browser local storage to keep you signed in, remember your preferences (like a previously selected state or ZIP code), attribute how you found BullionTree (such as a referral or marketing link), and measure usage through Google Analytics. You can control cookies through your browser settings; disabling them may affect how parts of the Service function.

Session recording. On our website and dealer portal we use Inspectlet to record how visitors use our pages (mouse movements, clicks, scrolling, and the pages visited) so we can see where the Service is confusing or broken and improve it. Recordings are set up to exclude personal and sensitive details: what you type into fields such as your email address, phone number, ZIP code, notes, and passwords, along with verification codes and the buyer contact details shown to dealers, is masked in your browser and is not sent to Inspectlet. Recordings are used only by BullionTree to improve the Service.

5. Data Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated personal information at any time by contacting us (Section 8).

6. Your Choices

• Marketing emails:every marketing email includes an unsubscribe link. Opting out of marketing does not affect transactional emails (like quote confirmations) needed to operate the Service.
• Analytics and session recording:if your browser sends a Global Privacy Control (GPC) signal, we do not load Google Analytics or Inspectlet for you at all.
• Phone verification:verifying your phone number is always optional and never required to submit a quote request.
• Account deletion:in the BullionTree mobile app, go to Profile → Delete Account to delete your account and its data immediately. You can also request deletion without the app; see Delete Your Account. Deletion is subject to any legal retention requirements.

7. Security

We use reasonable technical and organizational safeguards to protect your information, including encryption in transit, hashed passwords, and optional two-factor authentication for account holders. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the “Last updated” date above and, where appropriate, provide additional notice.

10. Contact Us

Questions about this Privacy Policy or your information? Contact us at support@bulliontree.com.