FFL-Bro Privacy Policy

Effective Date: January 30, 2026

Introduction

FFL-BRO (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our FFL-BRO ERP Suite platform, website, and related services (collectively, the “Services”).

By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Services.

Information We Collect

Information You Provide Directly

We collect information you voluntarily provide when you:

• Create an Account: Name, email address, phone number, business name, FFL license number, and business address
• Use Our Services: Transaction records, inventory data, customer information entered into the system, and Form 4473 data
• Contact Us: Any information you include in support requests, feedback, or inquiries
• Subscribe: Billing information and payment details processed through secure third-party payment processors

Information Collected Automatically

When you access our Services, we may automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed)
• Usage information (features used, actions taken within the platform)
• Cookies and similar tracking technologies

ATF Compliance Data

As an FFL software provider, our platform stores ATF-regulated information including:

• Acquisition and Disposition (A&D) records
• ATF Form 4473 transaction records
• NICS background check transaction numbers
• Multiple sale reports

This data is stored in compliance with ATF Ruling 2016-1 and ATF Ruling 2016-2 and is accessible only to authorized users and ATF personnel during lawful compliance inspections.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and manage your account
• Ensure ATF regulatory compliance
• Respond to your inquiries and provide customer support
• Send administrative communications (service updates, security alerts)
• Analyze usage patterns to enhance user experience
• Protect against fraud, unauthorized access, and illegal activity
• Comply with legal obligations

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information.

We may share your information only in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third parties who assist in operating our Services (hosting providers, payment processors), bound by confidentiality agreements
• Legal Compliance: When required by law, such as responding to valid ATF inspection requests, subpoenas, or court orders
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to users
• Protection of Rights: To protect the rights, property, or safety of FFL-BRO, our users, or others

Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL/TLS encryption for data transmission
• Encrypted data storage at rest
• Daily automated backups with redundant storage
• Role-based access controls
• Regular security audits and vulnerability assessments
• All servers located in the United States

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical standards.

Data Retention

We retain your information for as long as your account is active or as needed to provide Services. ATF compliance data (A&D records, Form 4473s) is retained according to federal requirements:

• Form 4473: Minimum 20 years
• Acquisition records: Permanently
• Disposition records: 20 years

Upon account termination, you may request export of your data. ATF-regulated records must be surrendered to ATF upon going out of business, as required by federal law.

Your Rights and Choices

Depending on your location, you may have rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of personal information (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Request export of your data in a machine-readable format

To exercise these rights, contact us at privacy@ffl-bro.com.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and login status
• Remember your preferences
• Analyze usage and improve our Services
• Provide security features

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our Services.

Third-Party Links

Our Services may contain links to third-party websites (distributor portals, payment processors). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Children’s Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on our website and updating the “Effective Date.” Continued use of our Services after changes constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

FFL-BRO