Privacy Policy

Our privacy principles

• Minimal collection. Sensitive details such as serial numbers are optional. You can use Rangium without entering them.
• Never sold. We do not sell or rent your personal or inventory data, and we do not share it for advertising.
• Not a registry. Rangium is a private tool for you, not a database we make available to third parties.
• Your control. You can export your records and delete your account and data yourself.

What we collect

• Account information: email, username, display name, and any profile details you choose to add.
• Content you enter: firearms, ammunition, purchases, range sessions and plans, maintenance records, gear, documents, photos, listings, and community posts.
• AI requests: the messages, voice audio, and photos you send to AI features, and, for features that turn text into records (such as describing a range plan in plain English), the text and the draft it produced, kept with your account so you can review it.
• Usage and security data: basic server logs, IP addresses used for rate limiting and abuse prevention, and aggregate page-view analytics.

Sensitive firearm data

Details such as serial numbers are optional. We do not require them, we do not display them publicly, and we never include them in marketplace listings unless you explicitly choose to. We restrict internal access to your inventory data to what is necessary to operate the service.

What other people can see

Your inventory, logs, and documents are private to your account. Things you choose to publish are visible to others: marketplace listings (including the contact details you put on them, shown to signed-in members), community posts and comments, your public profile, and any collector's card or collection you share by link.

How we use your data

• To provide core features: inventory, range planning, reconciliation, maintenance reminders, community, and listings.
• To process subscriptions and payments through our payment processor.
• To send account and service email, such as verification, password resets, and billing notices.
• To secure the service, prevent abuse, and meet legal obligations.

AI features

When you use AI features, what you submit is sent to our AI provider, OpenAI, to produce a response. That includes the text you type to the Vanta assistant, voice audio when you talk to Vanta, and photos you ask it to read, such as an ammo receipt or a picture of a firearm to identify. Avoid including identifiers such as serial numbers in messages you don't want processed by the model.

Vanta can take actions for you, such as logging a range session or purchase, adding or deleting a record, or creating a marketplace listing. Vanta asks you to confirm before it changes your records: in chat, nothing is saved until you reply yes to what it proposes, and by voice, it reads the details back and asks you to confirm before saving. Check what it reports back, and correct or delete anything that isn't right.

Image features use a separate provider, fal.ai. When you use "Make it float" on a collector's card or "Make it 3D" on a firearm, the photo you choose is sent to fal.ai to remove its background or build a 3D model, and the result is stored with your account.

Voice & microphone

If you use the voice assistant, the app asks for microphone permission and streams audio only while a voice session with Vanta is open. The audio goes to OpenAI to transcribe and answer your request. Rangium does not record or keep your voice audio, and it is not sold or used for advertising. OpenAI processes it under its API data terms, which may include limited retention for abuse monitoring. The microphone is never used in the background, and you can revoke the permission at any time in your device or browser settings.

Mobile apps (iOS & Android)

The Rangium apps talk to the same secure account as the website. On your device we store only a secure session token (in the platform's encrypted keychain or keystore) so you stay signed in; your inventory and other content live in your account, not on the device. The apps contain no third-party advertising or tracking SDKs and do not use an advertising identifier.

Cookies and similar technologies

• Sign-in: a first-party session cookie keeps you signed in. The in-app browser also sets a first-party cookie that marks requests as coming from the Rangium app. Signing in with Google or Apple sets a short-lived first-party cookie that protects the sign-in round trip.
• Preferences: a first-party cookie (rangium_lang) and your browser's local storage remember your language and similar choices.
• Payments: Stripe's payment script loads only on the checkout page (/checkout). There it sets Stripe's fraud-prevention cookies (__stripe_mid and __stripe_sid) and sends device and browser signals to Stripe (m.stripe.com) so Stripe can detect fraud.
• Analytics: our page-view analytics are cookieless and aggregated. We use no advertising or cross-site tracking cookies.

Who we share data with

We share data only with service providers needed to run Rangium, limited to their function:

• Hosting and storage (Vercel, Neon): Vercel hosts the site and stores the photos and documents you upload (Vercel Blob, at unlisted links); Neon hosts our database.
• Analytics (Vercel Web Analytics): cookieless, aggregate page-view counts.
• Payments (Stripe): subscriptions and billing. Rangium never sees or stores your full card number.
• AI (OpenAI): the text, voice audio, and photos you send to AI features.
• Image processing (fal.ai): the photo you choose for background removal or a 3D model.
• Email delivery (Resend): your email address and the content of account and notification emails.
• Bot protection (Cloudflare Turnstile): a challenge when you create an account, which receives browser and device signals to tell people from bots.
• Sign-in providers (Google, Apple): only if you choose to sign in with them.

We do not sell your data or share it with data brokers or advertisers.

Security

Data is encrypted in transit (TLS) and encrypted at rest by our infrastructure providers. We use access controls and follow reasonable safeguards. No system is perfectly secure, but protecting sensitive ownership data is a core design goal, and we continue to strengthen it.

Your rights and choices

• Export: download your records as CSV or JSON from Settings on the web at rangium.com/settings.
• Delete: permanently delete your account and associated data yourself, in the app under Settings or on the web at rangium.com/delete-account. You can also email privacy@rangium.com.
• Access and correction: view and update the information in your account.

Law-enforcement requests

We disclose data only when required by valid legal process or to protect safety as permitted by law. Where we are lawfully able to do so, we will notify affected users. We do not provide bulk or proactive access to user inventory data.

Data retention

We keep your data while your account is active and as needed to provide the service and meet legal obligations. When you delete your account, we remove your content within a reasonable period, except where retention is required by law (for example, payment records our payment processor must keep).

Children

Rangium is not directed to anyone under 18, and we do not knowingly collect data from minors.

Changes

We may update this policy. Material changes will be posted here with an updated date.

Contact

Questions or requests? Contact us at privacy@rangium.com.