Privacy Policy

1. Scope and Roles

This Policy applies to the Brass Till website, application, platform-administration tools, support communications, and related services. Brass Till is a business-facing point-of-sale and consignment-management service.

Each store or other business using Brass Till (a "Store") controls the business data its authorized users enter into the application, including information about employees, vendors, inventory, and transactions. For that Store Data, the Store generally determines why the data is collected and how it is used, and Diamond Piper processes it to provide Brass Till. Questions about a Store's own collection or use of Store Data should first be directed to that Store.

2. Information We Collect

Information provided by Stores and users

• Account information: names, email addresses, password hashes, roles, account status, and store assignments.
• Legal-acceptance records: the Terms and Privacy Policy versions accepted, acceptance statement, date and time, user and Store account details, role, IP address, browser or user-agent information, and acceptance method.
• Store information: business name, address, phone number, email address, website, settings, and store status.
• Vendor information: vendor number, name, business name, address, phone number, email address, commission rate, notes, and payout records.
• Inventory information: product descriptions, categories, condition, pricing, cost, quantity, location, barcodes, SKUs, images, and notes.
• Sales information: transaction numbers, dates, items, quantities, prices, taxes, commissions, payment-method category, cash received, change due, refunds, voids, and payout information.
• Support information: messages, files, troubleshooting details, and other information submitted when requesting assistance.

Payment information

Brass Till currently records transaction totals and a payment-method category, such as cash, credit, debit, check, or gift card. Brass Till is not intended to collect or store full payment-card numbers, card security codes, bank-account numbers, or online-banking credentials. Users must not enter that information into notes, descriptions, or other fields. Card payments should be processed through a separate compliant payment terminal or processor.

Information collected automatically

When users access Brass Till, our hosting environment and security systems may process standard technical information such as IP address, browser type, device information, requested pages, date and time, referring page, session identifiers, and error or security logs. The application uses session data to authenticate users and maintain secure access.

3. How We Use Information

We may use information to:

• provide, operate, maintain, secure, and troubleshoot Brass Till;
• authenticate users and enforce role-based access;
• document and enforce acceptance of the Terms of Service and acknowledgment of this Privacy Policy;
• process and display Store-directed inventory, sales, reporting, and vendor-payout records;
• create and manage Store accounts and authorized users;
• respond to support requests and communicate about the service;
• detect misuse, fraud, unauthorized access, and technical problems;
• improve features, reliability, and user experience using aggregated or de-identified information where practical;
• comply with law, legal process, and enforceable requests; and
• protect the rights, property, safety, and security of Diamond Piper, Stores, users, and others.

4. How We Disclose Information

We may disclose information in the following circumstances:

• Within a Store: to Store administrators and authorized users according to their assigned roles.
• Vendor access: to a vendor account for information associated with that vendor's own account, products, sales, and payouts.
• Service providers: to hosting, infrastructure, backup, security, technical-support, and similar providers that process information for us.
• Legal and safety reasons: when reasonably necessary to comply with law, legal process, enforce agreements, investigate misuse, or protect rights and safety.
• Business transactions: in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate protections.
• With direction or consent: when a Store or affected person directs or authorizes the disclosure.

We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising, and we do not share personal information with advertising networks for targeted advertising.

5. Cookies and Technical Data

Brass Till uses essential session cookies or similar mechanisms required for authentication, security, and application functionality. We do not currently use advertising cookies or behavioral advertising trackers. Some application features may load third-party technical libraries or infrastructure resources, and those providers may receive ordinary connection information such as an IP address and browser details.

Because we do not currently sell or share personal information for targeted advertising, browser "Do Not Track" and Global Privacy Control signals do not cause a different advertising response. If our practices change, we will update this Policy and implement controls required by law.

6. Retention

We retain information for as long as reasonably necessary to provide Brass Till, maintain business and transaction records, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, and maintain backups. Retention periods vary depending on the type of information, the Store's instructions, legal requirements, and operational needs. Backup copies may remain for a limited period after active records are deleted.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, alteration, or disclosure. No online service, transmission method, or storage system can be guaranteed to be completely secure. Stores and users are responsible for safeguarding credentials, limiting account access, maintaining secure devices and networks, and promptly reporting suspected unauthorized access.

8. Access, Correction, and Deletion

Store administrators can review and update much of their Store's account and operational data within Brass Till. Employees and vendors should direct requests concerning Store Data to the Store that created or controls the applicable account or record.

Requests concerning information controlled directly by Diamond Piper may be sent to contact@diamondpiper.com. We may need to verify identity and authority before acting on a request. We may retain information when required or permitted for legal, security, fraud-prevention, backup, recordkeeping, or dispute-resolution purposes.

9. State Privacy Rights

Depending on where a person lives and whether a particular privacy law applies, that person may have rights concerning access, correction, deletion, portability, or certain disclosures of personal information. Diamond Piper will evaluate verified requests and respond as required by applicable law. We will not unlawfully discriminate against a person for exercising an applicable privacy right.

Diamond Piper does not currently sell personal information or share it for cross-context behavioral advertising. Therefore, there is no sale or targeted-advertising activity to opt out of under our current practices.

10. Children

Brass Till is intended for business use by adults and is not directed to children under 13. We do not knowingly create accounts for children under 13 or knowingly collect personal information directly from them. Contact us if you believe a child has provided personal information directly to Diamond Piper without appropriate authorization.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in Brass Till, our practices, or applicable requirements. The revised Policy will be posted on this page with an updated effective date. Material changes may also be communicated through the application, by email, or through another reasonable method.

12. Contact

Questions or privacy requests may be sent to: