Legal draft
Draft for legal review — do not publish as a final policy.
This is a working US/New York privacy notice for ÓR New York. It is not legal advice and must be reviewed by qualified US and New York counsel before production launch.
The app collects account name and email, a securely hashed password through Better Auth, optional phone number, business and verification details, optional EIN or state registration reference, NYC service area, transaction records, price-alert preferences, and browser push subscription details when enabled. Hosting and security logs may include IP address, device, and request metadata.
Information is used to create and secure accounts, review jeweler credentials, provide member and seller workflows, record transactions, deliver requested market alerts, operate the NYC lead network for authorized administrators, prevent abuse, and maintain the service.
Vercel hosts and delivers the application. Neon stores NYC account and application data in this project's separate database. Better Auth manages password hashing and sessions. Precious-metal providers supply native USD quotes and receive no member records. Browser push providers receive notification delivery data only when a member opts in. No contact-platform data is sent while contact details remain disabled.
The current product is not designed to sell personal information. Data is shared only as needed with the providers above or when legally required. Specific retention periods, deletion procedures, and any required New York or state disclosures must be approved during legal review before launch.
Members can disable browser notifications and may request access, correction, or deletion through the future NYC privacy contact. The final notice must describe applicable rights based on the business's actual coverage, practices, and launch jurisdictions; this draft does not claim that any particular privacy statute applies.
The app uses encrypted transport, hashed passwords, server-side session checks, and user-scoped database queries. No system is completely secure. ÓR New York is intended for jewelry professionals and adults and is not directed to children.
Privacy email, mailing address, legal entity, and phone number are pending. Contact-dependent actions remain disabled until verified NYC details are configured.