Privacy Policy
Last Updated: February 7, 2026
GunSpec.io is a product of Buun Group ("Buun Group," "we," "us," or "our"), an Australian company. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our firearms specification database and API services.
By accessing or using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with the terms of this policy, please do not use the Services.
1. Information We Collect
We collect information that you provide directly to us when creating an account, including your email address and subscription tier selection.
We automatically collect certain technical information when you interact with our Services, including: IP address, browser type and version, device information, API request logs (endpoint, timestamp, response status), and usage patterns.
We do not collect or store payment card information directly. All payment processing is handled by our third-party payment processor, Stripe.
2. How We Use Your Information
We use the information we collect to: (a) provide, maintain, and improve the Services; (b) process transactions and send related information; (c) monitor and enforce rate limits and subscription quotas; (d) detect, prevent, and address technical issues, fraud, and abuse; (e) send you technical notices, updates, and administrative messages; (f) respond to your comments, questions, and support requests.
3. API Usage Data
We log API requests for operational purposes, including rate limit enforcement, abuse detection, performance monitoring, and debugging. API request logs include the endpoint called, request timestamp, response status code, and your API key identifier.
We do not log the full content of API responses. API usage logs are retained for 90 days and then automatically deleted.
Aggregate, anonymized usage statistics may be retained indefinitely for analytics and service improvement purposes.
5. Data Sharing
We do not sell your personal information. We may share your information with: (a) Buun Group, our parent company, for operational and billing purposes; (b) service providers who perform services on our behalf (e.g., Stripe for payment processing, Cloudflare for hosting and security); (c) law enforcement or government authorities when required by law or to protect our rights; (d) other parties in connection with a merger, acquisition, or sale of assets.
All third-party service providers are contractually obligated to protect your information and use it only for the purposes for which it was shared.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/HTTPS), secure API key storage, and access controls.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
7. Data Retention
We retain your account information for as long as your account is active or as needed to provide the Services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it by law or for legitimate business purposes.
API usage logs are retained for 90 days. Billing records are retained for 7 years as required by applicable tax and accounting regulations.
8. Your Rights
Depending on your location, you may have certain rights regarding your personal information, including: the right to access your data, the right to correct inaccurate data, the right to delete your data, the right to data portability, and the right to object to or restrict certain processing.
For Australian users, your rights are protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
For users in the European Economic Area (EEA), we process your data under the legal bases of contract performance, legitimate interests, and consent where applicable. You have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, please contact us at [email protected].
9. Children's Privacy
The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
10. International Data Transfers
Buun Group is based in Australia. Your information may be transferred to and processed in countries other than your country of residence, including Australia and the United States, where our servers and service providers are located. These countries may have data protection laws that differ from your country.
We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses approved by the European Commission where applicable, and compliance with the Australian Privacy Principles for cross-border disclosures.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Services after any changes constitutes your acceptance of the revised policy.
12. Contact
GunSpec.io is owned and operated by Buun Group. If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at [email protected] or visit https://buungroup.com.