Your privacy matters to us. This Privacy Policy explains clearly what information FFL Stack collects, why we collect it, how we protect it, and how we handle Facebook, Messenger, and Meta Platform Data for connected business messaging. If you have questions or want to request deletion, reach out at privacy@fflstack.com.
1. Overview
FFL Stack ("we," "us," or "our") provides commerce, inventory, messaging, and customer-service software for federally licensed firearms dealers and related businesses. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit fflstack.com, use the FFL Stack platform, connect a Facebook Page or other messaging channel, or communicate with a business using FFL Stack.
2. Information We Collect
We collect information that users, dealers, and business customers provide directly, including names, email addresses, phone numbers, business names, account credentials, billing details, Federal Firearms License information, store settings, product content, customer-service messages, and support requests. We also collect technical information such as IP address, browser type, device information, timestamps, log data, cookie identifiers, pages viewed, and actions taken in the platform.
3. Facebook, Messenger, and Meta Platform Data
When a dealer or platform administrator connects a Facebook Page, Messenger, or another Meta product to FFL Stack, we may receive and process Meta Platform Data needed to provide messaging and customer-service features. This may include Facebook Page IDs, Page names, Page access tokens, webhook event IDs, Messenger sender or recipient IDs, message text, attachments or media URLs sent in a conversation, timestamps, delivery/read status, and related conversation metadata. We use this information only to receive, route, display, and send messages on behalf of the connected business, maintain conversation history, prevent abuse, troubleshoot delivery, and comply with applicable law and Meta Platform Terms.
4. How We Use Information
We use information to provide and maintain the Service; authenticate users; operate storefront, inventory, catalog, CRM, and messaging tools; process payments; provide support; send administrative notices; improve reliability and security; diagnose bugs; prevent fraud or unauthorized access; comply with legal obligations; and enforce our agreements. We do not use Meta Platform Data for unrelated advertising, profiling, or sale to third parties.
6. Meta Platform Data Restrictions
FFL Stack does not sell, rent, license, or transfer Meta Platform Data to data brokers, advertising networks, or unrelated third parties. We do not use Messenger conversation content to build or augment advertising profiles. We do not share Page access tokens with unauthorized users. We limit access to Meta Platform Data to authorized personnel, service providers, and connected business users who need it to operate the messaging and support features.
7. Data Retention
We retain account, billing, compliance, and operational records for as long as needed to provide the Service and meet legal, tax, security, and audit requirements. Customer-service and Messenger conversation data is retained while the relevant account or channel connection is active unless deletion is requested or a shorter retention period is configured. If a Facebook Page connection is removed, we stop receiving new events for that Page and delete or de-identify associated tokens and channel credentials within a reasonable period, except where retention is required for security, legal, or dispute-resolution purposes.
8. Data Deletion Requests
You may request access, correction, export, or deletion of personal information by emailing privacy@fflstack.com. For Facebook or Messenger data, include the Facebook Page name or Page ID, your business name, and the email address associated with your FFL Stack account. Messenger users may also ask the business they messaged to delete conversation records from FFL Stack. We will verify the request and respond within 30 days. If we cannot delete certain records because of legal, tax, security, compliance, or dispute obligations, we will explain the limitation and delete the remaining eligible data.
9. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. These safeguards include access controls, encrypted transport, credential protection, monitoring, and limited access to sensitive integration credentials. No internet or electronic storage system is completely secure, so we cannot guarantee absolute security.
11. Your Privacy Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information, and to request a portable copy of certain data. You may also opt out of promotional communications. To exercise these rights, contact privacy@fflstack.com. We may need to verify your identity and authority before fulfilling a request.
12. Children's Privacy
The Service is intended for businesses and adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that a child provided personal information, we will take reasonable steps to delete it.
13. Third-Party Services
The Service may connect to third-party services such as Meta, payment processors, distributors, email providers, analytics tools, and dealer-selected integrations. Those services have their own privacy practices. Your use of Meta products is also governed by Meta's terms and policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date on this page and provide additional notice where required. Continued use of the Service after an update means you acknowledge the revised policy.
15. Contact Us
For privacy questions, requests, or concerns, contact FFL Stack at privacy@fflstack.com or legal@fflstack.com. You may also write to FFL Stack through the contact form at https://fflstack.com/contact. For Meta app review, this page is the public privacy policy for the FFL Stack app and its Facebook/Messenger integrations.
Questions about our privacy practices? Email privacy@fflstack.com or visit our contact page. For Terms of Service, see our Terms of Service page.