Privacy Policy

Sigma8 Labs, LLC

PO Box 853, Erie, CO 80516, USA

support@sigma8labs.com

Account and identity information. Name, email address, password (stored only in hashed form), and account preferences. For Store purchases: billing and shipping address and phone number.

Equipment and profile information. The rifles, scopes, actions, barrels, and other equipment you record; and the ammunition or handload components you declare (cartridge, bullet, powder, primer, brass, charge weight, seating depth, and similar reloading parameters).

Shooting session data. Target photographs you upload; and the measurements derived from them and from your entries — shot positions, group sizes, velocities and velocity statistics, point-of-impact data, qualification and badge records, and related performance figures.

Location information. Range or shooting-location details only if you choose to provide them. We do not collect precise device GPS in the background.

Payment information. Processed by our payment provider; we do not store full payment card numbers. We retain a customer/subscription identifier and transaction records.

Device and usage information. IP address, browser and device identifiers, and how you interact with the Services, collected automatically.

Communications. Messages you send us and our correspondence with you.

• To provide the Services: create and manage your account; store your equipment and sessions; process target photographs through our computer-vision and analysis engine; and compute your scores, statistics, qualifications, and recommendations.
• To operate the Store: process orders, payments, shipping, and returns.
• To improve the Services and develop new features, including improving the accuracy of our computer-vision and analysis engine.
• To create de-identified and aggregated data and to build and maintain our reloading and ballistic datasets (see Section 5).
• To communicate with you, provide support, and send service or marketing messages (you may opt out of marketing).
• For security, fraud prevention, and to enforce our Terms.
• To comply with law and legal process.

Target photographs you upload are processed by our computer-vision worker to locate shot positions and produce a corrected ("rectified") image and the resulting measurements. Processing happens automatically after upload. Where our system cannot confidently locate a shot, you may confirm or correct positions manually; these corrections may be retained in de-identified form to improve detection accuracy (see Section 5).

We create de-identified and aggregated data from your shooting session data — for example, ballistic measurements with all identifying information removed and combined with data from other users. De-identified and aggregated data is not personal information, because it cannot reasonably be linked back to you. We use it to improve the Services, conduct research, and build and maintain our reloading and ballistic datasets. We retain and may continue to use de-identified and aggregated data indefinitely, including after you delete your account, as permitted by the license you grant in our Terms of Service. We do not re-identify de-identified data.

We share personal information with service providers who process it on our behalf, under contract and only as needed to run the Services:

• Supabase — Database and file/photo storage
• Vercel — Application hosting
• Fly.io — Computer-vision photo processing
• Cloudflare — Encrypted offsite backup storage
• Resend — Transactional and account email
• Shopify — Store hosting and checkout
• Payroc (payment processor — pending launch) — Payment processing

We also share information when you direct us to, in connection with a business transaction (e.g., merger or sale), to comply with law or protect rights and safety, and with professional advisors. We do not sell your personal information for money. To the extent "sale" or "sharing" is defined broadly under certain state laws, you may opt out as described in Section 9.

• Raw uploaded photographs: retained for as long as your account is active so we can re-analyze your targets with improved tools over time; they may be moved to lower-cost de-identified storage as they age. Raw photographs are deleted when you request account/data deletion.
• Rectified (corrected) images and your session records: retained for as long as your account is active, so your history and analysis remain available.
• Account and Store records: retained while your account is active and as needed for legal, tax, accounting, and dispute-resolution purposes.
• Backups: encrypted backup copies may persist for up to approximately 30 days after deletion before they expire from our backup system.
• De-identified and aggregated data: retained indefinitely (Section 5).

Free Proto-Qual analyzer (qual8labs.com/try). The free Proto-Qual analyzer is available without an account and collects your email address, the target photo you upload, and any optional rifle / cartridge / ammo selections you make. For this pre-account funnel, photos and group results are retained for 180 days if you do not verify your email, and for 730 days if you complete email verification, after which the photo, group results, and email are automatically purged. You can request deletion at any time from the link on your result page or by emailing support@sigma8labs.com. If you create a full account, the account retention rules above apply.

The Services and our firearms- and reloading-related products are intended only for adults who are legally permitted to purchase and use them. You must meet the minimum age required by the federal, state, and local laws that apply to you — generally at least 18 years of age, and 21 years of age where required for the products or components involved. The Services are not directed to, and we do not knowingly collect personal information from, anyone under the age of majority in their jurisdiction. If you believe a minor has provided us with personal information, contact us and we will delete it.

Depending on where you live (including under the Colorado Privacy Act, the California Consumer Privacy Act/CPRA, and the EU/UK GDPR), you may have the right to: access the personal information we hold about you; request its deletion; correct inaccurate information; receive a portable copy; and opt out of targeted advertising and any "sale" or "sharing" of personal information. We honor the Global Privacy Control browser signal.

How account deletion works. When you request account deletion, we delete your identifying information (name, email, address), any location information, and your uploaded photographs, and we sever the link between your shooting data and your identity. After this, the remaining shooting measurements exist only as de-identified data that cannot be tied to you, which we may retain and use as described in Section 5. Backup copies expire as described in Section 7.

To exercise any right, contact support@sigma8labs.com. You may appeal a decision where the law provides that right.

We and our providers use cookies and similar technologies to operate the Services, remember your session, and measure usage. You can control cookies through your browser settings; some features may not work without them.

We protect your information with measures including encryption in transit, access controls, hashed credentials, and row-level database security. No system is perfectly secure; we cannot guarantee absolute security.

We are based in the United States and process information here. If you access the Services from outside the US, you consent to that transfer. For EEA/UK transfers we rely on Standard Contractual Clauses or another lawful mechanism.

We may update this policy and will post the revised version with a new "Last updated" date. Material changes will be communicated to account holders.

This policy is governed by the laws of the State of Colorado, consistent with our Terms of Service.