1. INTRODUCTION

SLVR is an online marketplace for collectible coins and bullion, operated by SLVR Partners LLC ("SLVR," "we," "us"). This policy explains what personal information we collect when you use slvr.ag and our related services (the "Services"), why we collect it, who we send it to, how long we keep it, and what you can do about it.

It covers the marketplace, SLVR token balances, payouts to your bank, collector-to-collector swaps and trades, seller tools including eBay listing sync, and the emails we send you. It does not cover other companies whose sites you reach from SLVR; when you leave SLVR, that site’s own policy applies.

SLVR is offered only in the United States, to people in the United States, and this policy is written for US law. We do not offer the Services anywhere else and do not market them outside the US.

Questions, comments, or privacy requests: help@slvr.ag.

2. WHO MAY USE SLVR

To create an account you must be at least 18 years old and located in the United States with a US address. When you sign up, you confirm both, and we check the country your connection appears to originate from. We store that country with your account.

We do not ask for your date of birth and we do not run a third-party age check. We rely on your confirmation. If we learn an account holder is under 18, we close the account (see section 14).

3. INFORMATION WE COLLECT

a) Information you give us directly

Account and identity.

• Name, username, member number, and email address
• Your password, which is hashed by our authentication provider. We never see or store it in readable form.
• Phone number
• Shipping address and billing address
• Profile picture and profile background image
• Your confirmation that you are 18 or older and a US resident

Business and tax information, if you sell as a business or apply for dealer status.

• Organization name
• EIN (federal employer identification number)
• Sales tax ID
• Resale certificate, and any supporting business documents you upload for dealer verification

Payout and payment information.

• Bank account details for cash withdrawals: account holder name, bank name, account type, account number, and routing number. We encrypt the account number, routing number, holder name, and bank name at rest and show you only a masked version.
• The legal address associated with that bank account. When you sell SLVR tokens, we save a copy of that address with the payout the sale creates.
• Card and ACH details for buying SLVR tokens go directly to Stripe on Stripe-hosted pages. We do not receive or store your full card number or your online banking credentials.

Listings, content, and activity.

• Listing photographs and the text of your listings: titles, descriptions, prices, grades, certification numbers, and coin details
• URLs you paste when you ask us to import a listing
• Swap and trade posts, offers, and counteroffers
• Messages you send to other members through SLVR
• Your orders, purchases, sales, token buys and sells, and payouts to your bank

Support and disputes.

• Support conversation contents: the tickets and bug reports you open, every message in them, the page you were on when you submitted, the order a ticket relates to, and our replies
• Dispute evidence: the photographs you upload to support or contest an order dispute

Legal consent records. Each time you accept the Terms of Service, this Privacy Policy, the Buyer and Seller Agreement, or an integration addendum, we record which document and version you accepted, a cryptographic hash of the document text you were shown, the time, your IP address, and your browser user agent. When you create an account we write a fourth record, for the Prohibited Items Policy. That policy has no acceptance step of its own — the Terms and the Buyer and Seller Agreement incorporate it, and that is what binds you to it — so the record captures the version and hash of it in force at that moment rather than text you were shown. This is how we can prove later exactly what you agreed to.

b) Information we collect automatically

• Device information. When you sign in with your password we record a random device identifier stored in a cookie on that browser, a readable device label derived from your user agent (for example, Safari on iPhone), the user agent string itself, your IP address, and an approximate city, region, and country derived from that IP by our host. We keep this so we can email you when a device we have not seen before signs in to your account.
• Session information. The cookies described in section 9.
• Error and performance data. When something breaks, Sentry receives an error report that can include the page you were on, your browser, and technical context about the failure.
• Product analytics. PostHog records page views and in-product events. After you sign in we associate those events with your user ID, username, member number, and tier. We do not send your email address to PostHog. PostHog is loaded through a first-party path on our own domain.
• Aggregate traffic measurement. Vercel Analytics, provided by our host, measures page traffic.
• Abuse prevention. We count requests against an identifier such as your IP address or user ID in Upstash Redis to enforce rate limits.

c) Information we receive from third parties

• eBay. If you connect an eBay seller account, we receive your listing data through eBay APIs: titles, descriptions, photographs, prices, quantities, and listing status, plus the access tokens needed to keep the connection working. The eBay Sync Addendum describes this in more detail.
• Stripe. Stripe tells us whether a token purchase succeeded or failed and sends us the related transaction identifiers, refunds, and chargeback notices.
• Shippo. Shipping rates, label details, and carrier tracking and delivery events for your shipments.
• Public pages you point us at. When you give us a URL to import, we fetch that page and receive whatever is published on it.

4. HOW WE USE IT

• Create your account, sign you in, and keep your session secure
• Show your listings, username, profile, and seller store to other members and to the public marketplace
• Run purchases, sales, swaps, and trades, and move the coins and funds between the two sides
• Process token purchases through Stripe, apply your balances, and send the proceeds of a token sale to your bank account
• Produce shipping labels, rates, and tracking, and show delivery status to both sides of an order
• Extract structured coin details from content you submit for a listing (section 5)
• Send transactional email: receipts, order and shipping updates, dispute notices, new-device sign-in alerts, password resets, and legal notices
• Send marketing email unless you have opted out
• Answer support requests and decide order disputes
• Detect and investigate fraud, chargebacks, prohibited items, and violations of our Terms, and enforce them
• Meet tax, accounting, record-keeping, and other legal obligations
• Measure how the product is used, find bugs, and improve it

We do not sell your personal information. We do not share it for cross-context behavioral advertising or targeted advertising. We do not run ad networks, advertising pixels, or cross-site trackers on SLVR, and we do not disclose your personal information to anyone for their own direct marketing.

5. AI AND AUTOMATED PROCESSING

When you build a listing by uploading photographs, pasting text, or giving us a URL, we send that content to third-party services that read it and return structured coin details such as name, year, grade, certification number, composition, and weight. This is a real disclosure of your content to companies outside SLVR, so we want to be specific about it.

What we send, and to whom.

• Google (Gemini API). The photographs, text, or page content you submitted, together with our extraction prompt. Images are sent to a Gemini vision model; text and page content go to a Gemini text model.
• Firecrawl. The URL you gave us, so Firecrawl can fetch that page and return its text and HTML to us. Firecrawl may cache the fetched page.
• Residential proxy providers, where configured. Some import fetches are routed through a commercial proxy network so the source site answers us normally. Where SLVR has that routing switched on, the URL you submitted and the page fetched from it pass through that provider. See section 6.

What we do not send. Extraction does not include your name, email address, phone number, shipping or billing address, bank account details, EIN, sales tax ID, or balances. Note that anything you have written into the photograph or the page itself goes with it.

Model training. What Google and Firecrawl may do with content we send them is governed by their own terms and privacy policies, not by ours. We do not have a commitment from either provider that content submitted through SLVR is excluded from training or improving their models, and we cannot make that promise on their behalf. Treat anything you put into the listing importer as content a third-party AI provider will receive.

These tools do not decide anything about you. They propose listing fields, which you review and edit before publishing.

Three eligibility checks are automatic, and they are the exception to everything else in this section. Each one runs without a person looking at it, and each one can only refuse. None of them approves an account, grants you anything, decides a claim, or releases money.

• Where your connection appears to be. When you sign up, we compare the country your connection appears to originate from against the countries SLVR is offered in, which today is the United States only. A signup from anywhere else is refused automatically, and so is one where we cannot tell what country the connection came from.
• Your confirmation that you are 18 or older and a US resident. If that confirmation is not given, the account is not created. Nothing checks the answer itself — as section 2 says, we rely on what you tell us. What is automatic is the refusal when the confirmation is missing.
• A shipping address outside the United States. When you save a shipping address, an address that does not state a United States country is refused before it is checked any further.

Apart from those three checks, we do not use automated processing to decide anything about you — not who wins a dispute, not whether a payout is released, and nothing else with a legal or similarly significant effect. A person at SLVR makes those decisions. If you believe one of the three checks above has reached the wrong answer about you, write to help@slvr.ag.

6. SERVICE PROVIDERS

These are the companies that process personal information for us. They act on our instructions and receive only what they need for the purpose listed.

Other recipients, depending on how you use SLVR

The providers above run SLVR for every member. The recipients below receive information only when a particular feature is used, and some of them are chosen by another member rather than by us. They are listed here because information genuinely leaves SLVR to reach them.

• CAC Marketplace. A seller who syncs listings can send them to CAC Marketplace as well as to eBay. CAC then receives that listing content: title, description, year, mint mark, grade, grading service and certification number, photographs, price, and coin attributes such as weight, diameter, and composition. The listing is created under the seller’s own CAC dealer credentials.
• Endpoints a seller configures. A dealer can register a webhook URL on a server they control. When you buy a coin that dealer also lists elsewhere, we notify that URL so the item can be pulled from their other channels. The notification contains the coin, the sale price, the time, the SLVR order identifier, and an internal account identifier for the buyer. It does not contain your name, email address, phone number, or shipping address. The destination is a server the dealer chose, not one we operate, and once the notification arrives, what happens to it is governed by that dealer.
• Shipping carriers. To move a package, the carrier you or the seller selects through Shippo — USPS, UPS, FedEx, and others available there — receives the sender and recipient name and street address printed on the label, plus the parcel details. Where a shipment is insured, the insurer also receives a description of the contents and the declared value. This is inherent to shipping a physical coin.
• Residential proxy providers, where configured. SLVR can route outbound page fetches for listing import through a commercial residential proxy network. The providers wired up for this are Bright Data and Smartproxy. This routing is enabled by configuration and is inactive unless credentials for one of them are set; where it is active, the URL a member submitted and the page fetched from it pass through that provider. No account, payment, or contact information is sent through it.

We may add or replace a provider as the product changes. When we do, we will update this section. Each provider handles the information it receives under its own security and privacy terms, and some of them may process or store data outside the United States under those terms. We also disclose personal information to professional advisors such as our lawyers and accountants, under confidentiality obligations.

7. SHARING FOR OTHER REASONS

Other members. SLVR is a marketplace, so some of your information reaches the person on the other side of a transaction, and some of it is public.

• Your username, member number, profile picture, listings, and seller store page are visible to anyone who can see the marketplace, including people who are not signed in.
• When an order, swap, or trade is created, each side receives what is needed to complete it: the other member’s name, shipping address, email address, and phone number, together with the tracking information for the shipment. That is what it takes to print a label and sort out a problem. Section 6 of the Buyer and Seller Agreement limits the other member to using those details for the order and nothing else.
• Messages you send another member are visible to that member.
• If you buy from a dealer who lists the same coin on other platforms, an internal identifier for you and the details of the sale may be sent to that dealer’s own systems so the item can be delisted elsewhere. Section 6 describes exactly what is in that notification and what is not.

Legal process. We disclose personal information when we are required to by law or legal process, including subpoenas, court orders, search warrants, and valid law enforcement or regulatory requests. Where we are permitted to tell you, we will.

Fraud, safety, and enforcement. We disclose personal information to investigate or prevent fraud, chargebacks, money laundering, theft, prohibited items, and threats to the safety of members or the public, and to enforce our Terms. If you dispute a charge, we may give your card issuer or bank the information they need to investigate the claim.

Acquisition. If SLVR is acquired, merges, or sells substantially all of its assets, member information may be one of the assets transferred, and may be disclosed to a prospective buyer and its advisors under confidentiality. If that happens, this policy continues to apply to your information until you are given notice of a new one.

8. ADMINISTRATIVE ACCESS

SLVR administrators can sign in to the Services as you. We use this to reproduce a problem you have reported, to help you finish something you are stuck on, and to investigate fraud or a disputed transaction. It does not require your permission, and we do not notify you when it happens. We are telling you plainly because you should know it is possible.

What it takes, and what it is limited by:

• It requires an authenticated administrator account plus a separate administrative password that is held only by SLVR and is not derived from your credentials. Your password is not revealed to the administrator.
• Every time an administrator starts a session as a member, we write a record to our admin audit log containing the administrator’s identity, the account accessed, the timestamp, the IP address, and the browser used.
• The administrative session is time-limited and expires automatically.
• While signed in as you, an administrator sees what you would see, including your orders, balances, listings, settings, and messages.
• While signed in as you, an administrator is blocked from changing your password, adding a bank account, changing a bank account, deleting a bank account, selling SLVR tokens, and checking out on the marketplace. Selling is the one on that list that moves money off the platform — a sale sends the proceeds to your bank — so blocking it blocks the payout too. Those actions are refused by the system, not merely discouraged by policy.

Separately from signing in as a member, SLVR personnel and our database provider can reach stored data directly. We limit that access to the people who need it to operate the marketplace, provide support, investigate abuse, or meet a legal obligation.

9. SECURITY AND SESSION HANDLING

10. HOW LONG WE KEEP IT

We keep personal information only as long as we need it for the purpose we collected it for, or as long as the law requires. In practice:

• Account profile (name, username, email, phone, addresses, profile images, organization name, EIN, sales tax ID, resale certificate): kept while your account is open, then erased or replaced with a placeholder when the account is purged at the end of the deletion window in section 13.
• Saved bank accounts, device history, and legal consent records: deleted when your account is purged.
• Orders, token purchases and sales, payouts, and the underlying ledger: retained for at least seven years after the transaction to meet tax, accounting, and anti-fraud obligations. These records survive account deletion. Where the system allows it, they are kept against a placeholder rather than your name.
• Support conversations and dispute records, including dispute evidence photographs: kept while the matter is open and for up to three years after it is resolved, or longer if it relates to a claim.
• Admin audit logs, including the record of any administrative sign-in as a member: retained for at least two years, because they are our accountability record.
• Error reports (Sentry) and product analytics (PostHog): retained under those providers’ retention settings for our account, and not used to build a profile of you outside SLVR.
• Anything under legal hold: kept until the matter is closed, then returned to the schedule above.

Where we must keep a record, we minimize or anonymize it if we practically can.

11. YOUR CHOICES

Email. Some email you cannot turn off while your account is open, because it is how the marketplace works: receipts, order and shipping updates, dispute notices, security and new-device alerts, password resets, and legal notices. Marketing email is separate. You can turn it off at any time in Account Settings under notifications, or with the unsubscribe link at the bottom of any marketing email. We record the opt-out on your account and honor it.

Your content. You can edit or remove your listings, swap posts, and profile information from your account at any time. Removing a listing takes it off the marketplace; it does not undo an order that has already been placed.

Connected accounts. If you connected an eBay seller account, you can disconnect it from your seller tools. Disconnecting stops future sync and revokes the stored connection.

Cookies. Your browser can block or clear cookies. Blocking ours will sign you out, may prevent you from signing back in, and will stop new-device sign-in alerts from working correctly.

Global Privacy Control. We honor Global Privacy Control. If your browser or an extension sends a GPC signal, we treat it as a valid, legally binding opt-out of the sale of personal information and of sharing for targeted advertising. Because we do not sell personal information and do not share it for targeted advertising in the first place, honoring that signal does not change how we handle your data, and it never puts you at a disadvantage on SLVR.

12. YOUR STATE PRIVACY RIGHTS

A growing number of US states give residents rights over their personal information, and the details differ from state to state. Rather than make you work out which version applies to you, we extend all of the following rights to every SLVR member, in every state. If your state gives you a right we have not listed here, you still have it.

• Know and access. Ask what personal information we have collected about you, the categories of sources, the purposes, the categories we disclose to service providers and other parties, and how long we keep it. Sections 3, 4, 6, 7, and 10 answer this in general; you can ask for the specifics about your own account.
• Get a copy. Receive your personal information in a portable, machine-readable format.
• Correct. Have inaccurate personal information fixed. Most of it you can fix yourself in Account Settings.
• Delete. Have your personal information deleted, subject to the records we must keep. See section 13.
• Opt out of sale, of sharing for targeted advertising, and of profiling that produces legal or similarly significant effects. We do none of these, so there is nothing to opt out of, but the right stands.
• Limit the use of sensitive personal information. We use the sensitive information we hold, such as your account credentials and financial account details, only to provide the Services, keep them secure, and comply with the law.
• Appeal a decision you disagree with.
• No retaliation. We will not deny you service, charge you a different price, or give you a lesser experience because you exercised a privacy right.

These rights exist under laws including the California Consumer Privacy Act as amended, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Texas Data Privacy and Security Act, along with comparable laws in Utah, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Rhode Island, Indiana, and Kentucky.

How to make a request. There is one mechanism: email help@slvr.agwith "Privacy request" in the subject line. Tell us which right you are exercising and which state you live in. Send it from the email address on your account where you can.

How we verify you. We match your request against your account records and may ask you to confirm from the email address on the account or to confirm details of a recent order or payout. We ask only for what we need to be confident it is really you, and we do not create new records about you in order to verify a request. We will not ask you for your date of birth, because we do not have it. If we cannot verify you, we will tell you why.

Authorized agents. Someone may submit a request for you if they give us written permission signed by you. We may still contact you directly to confirm.

Deadlines. We acknowledge requests promptly and respond within 45 days. If a request is complex and we need more time, we may extend once by up to another 45 days, and we will tell you why within the original 45. If we deny a request, we will explain the reason.

Appeals. To appeal a denial, reply to our decision or email help@slvr.ag with "Privacy appeal" in the subject line. We will decide the appeal and give you a written explanation within 45 days. If we deny the appeal, we will tell you how to complain to your state attorney general.

California specifics. We have not sold or shared personal information, as the CCPA defines those terms, in the preceding twelve months, and we do not knowingly sell or share the personal information of anyone under 16. We do not disclose personal information to third parties for their own direct marketing purposes, so there is nothing to request under California Civil Code section 1798.83. Nevada specifics. Nevada residents may direct us not to sell covered information; we do not sell it.

13. ACCOUNT AND DATA DELETION

You can delete your SLVR account yourself, from Account Settings. Here is exactly what happens.

• You request deletion and we email you a confirmation link. The link expires after 24 hours.
• When you confirm, your account moves to a pending-deletion state, your active listings are unlisted, and your active swap posts are closed.
• For the next 30 days you can change your mind: the cancellation link in your confirmation email restores the account.
• If you do not cancel, we purge the account. Your name, username, email, phone number, shipping and billing addresses, profile images, organization name, EIN, sales tax ID, and resale certificate are erased or replaced with a placeholder; your saved bank accounts, device history, and legal consent records are deleted; and your sign-in credentials are removed. Personal data is erased within 30 days of your confirmation, except for the records described below.

What you must settle first. Deletion is blocked while your account has open orders, open disputes, pending payouts, active trades, or active swaps. It is also blocked while you are holding money: your cash balance must be at or below $1.00 and your SLVR tokens must be worth $10.00 or less at your sell price. Account Settings shows you exactly what is blocking, with a link to each one.

Dust is forfeited. Any residual cash or token balance at or below those thresholds is zeroed when the account is purged. It is not paid out. Sell your tokens before you delete if you want the money.

What survives deletion. Transaction, payment, payout, and tax records; records we must keep for legal, accounting, anti-fraud, or dispute-resolution reasons; and anything under legal hold. We keep these for the periods in section 10, tied to a placeholder rather than your name wherever the system allows.

If you cannot use self-serve deletion, for example because you have lost access to the email address on the account, contact us at help@slvr.ag.

14. NO ONE UNDER 18

SLVR is for adults. You must be 18 or older to hold an account or to buy, sell, swap, or trade here. The Services are not directed to minors, and we do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete the personal information we hold about them, other than records we are required to keep. If you believe a minor has created an account or given us personal information, email help@slvr.ag and we will act on it.

15. CHANGES TO THIS POLICY

We will change this policy as SLVR changes. When we do, we post the new version here with a new effective date at the top. If a change materially affects how we collect, use, or disclose your personal information, we will give you notice before it takes effect, by email to the address on your account or by a notice inside the product.

We keep a record of the version of this policy you accepted, including a hash of the exact text you were shown, so it is always possible to establish what you agreed to and when. Continuing to use the Services after the effective date of an updated policy means you accept it.

16. CONTACT US

Email help@slvr.agwith any question about this policy or about your personal information. For a privacy rights request, put "Privacy request" in the subject line so it reaches the right place. Our postal address is below.