Privacy Policy

AI privacy addendum

Version 2026-09-26. Effective September 26, 2026. This addendum covers the PyroApex Pro assistant when a tenant business uses it.

OpenAI is our subprocessor for generating assistant answers and proposed changes. We send relevant chat context and tenant data, which may include names, business names, email addresses, phone numbers, order data, and product data. We never send dates of birth, identification numbers, or payment data to the assistant provider. Do not include these excluded categories in your messages.

OpenAI does not use our API inputs or outputs to train its models. We do not opt into training. Requests disable response storage; this does not eliminate abuse-monitoring logs. OpenAI normally retains those logs, which may contain prompts and responses, for up to 30 days, with longer retention where required by law or reasonably necessary to protect its services or others from harm. Deleting a PyroApex chat does not immediately delete OpenAI's separate logs. See OpenAI's API data controls.

Our chat retention and deletion

Each member's chats are saved and searchable until that member deletes them by default. Only the member can view their chats; tenant administrators cannot read another member's history. A tenant administrator may instead set automatic deletion after 1 year, 180 days, 90 days, or 30 days. Members may delete one chat or all their chats.

Deleted or expired chats are removed from the database within 30 days, excluding backups. Chats belonging to a member removed from the tenant are deleted after 30 days. Chat content is never sent to application logs or Sentry. Deleting chats does not delete billing usage records, which contain no chat text, or undo confirmed business changes and their audit records. These chat-specific periods take precedence over the general account-data retention periods.

Introduction

Digital Drywood LLC ("we," "us," "our") operates PyroApex Pro. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our platform. By using PyroApex Pro, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

• Name, email address, and phone number
• Physical address, billing address, and shipping address
• Date of birth (for age verification)
• Payment information
• Business license and permit numbers (wholesale accounts)
• Government-issued identification (when required for verification)

Information Collected Automatically

• IP address
• Browser type and version
• Operating system and device type
• Pages visited and time spent on site
• Referring URL
• Cookie identifiers

Information from Third Parties

• Payment processor transaction confirmations
• Shipping carrier delivery status
• Authentication provider identity data

How We Use Your Information

• Process orders and payments
• Verify age eligibility (18+ for fireworks purchases)
• Verify shipping destination legality
• Calculate and collect applicable sales tax
• Communicate order status and shipping updates
• Respond to customer service inquiries
• Prevent fraud and unauthorized access
• Comply with legal obligations including DOT hazmat regulations and CPSC requirements
• Improve our platform and user experience
• Send marketing communications (with your consent)

Age Verification

Fireworks are age-restricted products. We collect date of birth to verify that you are at least 18 years of age, as required by applicable state laws. In some cases, we may require government-issued identification for verification purposes.

Age verification data is retained only as long as necessary for legal compliance.

Fireworks Compliance Records

To comply with federal and state regulations governing fireworks sales, we retain records of purchases including product types, quantities, and shipping destinations for 7 years. These records may be disclosed in response to lawful requests from regulatory authorities.

Cookies and Tracking

We use strictly necessary cookies (session, cart, age gate, CSRF, and consent) and analytics cookies (Google Analytics) to operate and improve our platform. For complete details about the cookies we use and how to manage them, please see our Cookie Policy.

How We Share Your Information

Recipient	Data Shared	Purpose
OpenAI (AI assistant subprocessor)	Names, business names, email addresses, phone numbers, order and product data, and chat context. Never dates of birth, identification numbers, or payment data.	Generate assistant answers and proposed changes when the business uses the assistant. See the AI privacy addendum.
Payment Processors	Name, billing address, transaction amount	Process payments
Shipping Carriers	Name, shipping address, phone, order contents	Fulfill delivery
Email Service Providers	Email, name	Transactional and marketing emails
Analytics Providers	IP address, device info, browsing behavior	Site analytics
Tax Compliance Services	Name, address, order info	Sales tax calculation
Cloud Infrastructure	All hosted data	Storage and processing
Law Enforcement	As required	Legal obligation, subpoena, or court order

We do not sell your personal information.

Data Retention

Data Type	Retention Period
Financial and transaction records	7 years
Order records	7 years
Active account data	Duration of account
Age verification records	3 years
Marketing consent records	Until opt-out + 3 years
Website analytics and server logs	6 months
Customer service communications	5 years
Deleted account data	Removed within 90 days of request

Data Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data in transit, secure payment processing through PCI DSS-compliant providers (we do not store full credit card numbers or CVV codes), access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Opt out of marketing communications
• Disable cookies through your browser settings

To exercise any of these rights, please contact us at info@pyroapex.pro.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know what personal information we collect and why
• Right to delete your personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To submit a request, contact us at info@pyroapex.pro.

Children's Privacy

Our platform is intended solely for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at info@pyroapex.pro.

Marketing Communications

We may send marketing emails about products, promotions, and other updates. You can opt out at any time by using the unsubscribe link included in each marketing email. Opting out of marketing communications does not affect transactional communications such as order confirmations and shipping notifications.

Multi-Tenant Platform

PyroApex Pro operates on a platform where independent fireworks businesses ("Merchants") operate storefronts. Each Merchant is an independent data controller for their customers' information. Customer data is logically isolated between Merchants.

Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Digital Drywood LLC

4500 Campbell Drive

Fort Scott, KS 66701

info@pyroapex.pro