Privacy Policy

1. Information we collect

• Account information: email address, display name, verified phone number, phone-verification records, authentication records, and account identifiers.
• Transaction and collection information: credit purchases, balances, box openings, pull results, acquired values, sell-backs, collection status, and fulfillment activity.
• Payment information: Card and billing details are collected and processed by our payment service provider. We receive transaction identifiers, status, amount, and limited billing information rather than your full card number.
• Payout information: where you withdraw sell-back proceeds, the payout account details you provide and the record of each withdrawal request, its review, and its outcome. Payout account details are collected and held by our payment provider.
• Compliance information: where our AML Policy requires it, identity and source-of-funds records and records of activity reviewed for financial-crime risk. Identity verification is required before a first withdrawal.
• Communications: information you include when requesting support, reporting a problem, or otherwise contacting us.
• Device and usage information: browser and device details, IP address, pages viewed, timestamps, error data, and similar technical information that may be logged by us or our infrastructure providers.
• Demo data: unauthenticated demo pulls, demo balances, and demo collection status may be stored locally in your browser.

2. How information is collected

We collect information when you provide it, when you use the Services, and from service providers that support authentication, hosting, payments, fraud prevention, analytics, and fulfillment.

3. How we use information

• Provide accounts, credits, box openings, watch collections, sell-back options, and fulfillment features.
• Process and reconcile payments and maintain transaction records.
• Authenticate users, verify phone ownership, secure accounts, detect abuse, prevent duplicate-account misuse and fraud, and enforce our Terms.
• Respond to support requests and send service-related notices.
• Debug, measure, maintain, and improve the Services.
• Comply with legal obligations and protect users, gembreak, and third parties.

4. How we disclose information

We may disclose information to vendors that perform services for us, including Supabase for authentication and data storage, our payment service provider for card processing, Twilio for transactional phone-verification messages, and hosting, security, communications, analytics, and fulfillment providers. We may also disclose information to regulators, law enforcement, and our payment provider where required to meet the anti-money-laundering, sanctions, and fraud-prevention obligations described in our AML Policy, when otherwise required by law, to protect rights and safety, in connection with a merger or sale of the business, or with your direction or consent.

We do not sell personal information for money. We do not authorize service providers to use personal information for their own unrelated purposes.

5. Cookies and local storage

We use cookies and similar browser storage for essential functions such as keeping you signed in, protecting sessions, remembering preferences, and maintaining demo collection data. Your browser may let you delete or block these technologies, but parts of the Services may stop working as intended.

6. Data retention

We retain information for as long as reasonably necessary to provide the Services, maintain account, verification, transaction, and collection records, comply with legal and accounting obligations, prevent fraud, resolve disputes, and enforce agreements. Pending phone-verification data expires for verification purposes after a short period, while a verified number may remain associated with the account until it is changed through support or the account is deleted, subject to permitted retention. Browser-stored demo data remains until you or your browser removes it.

Transaction records and any identity or source-of-funds records collected under our AML Policy are retained for at least five years after the transaction or after the account relationship ends, whichever is later. This retention is a legal obligation and continues even if you delete your account.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information. No online system is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your password and account access confidential and for notifying us if you suspect unauthorized use.

8. Your choices and privacy rights

You may update certain account information, download an account-data export, or permanently delete your account through the account page. You may request a verified phone-number change through Support and control cookies through your browser. Verification messages are transactional one-time messages, not consent to receive marketing texts. Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection regarding your personal information. We may need to verify your identity before completing a request, and some information may be retained where permitted or required by law.

9. International transfers

Our providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers of personal information.

10. Age restriction

The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children under 18. If we learn that such information was collected, we will take reasonable steps to delete it.

11. Third-party services and links

The Services may link to or integrate with third-party services. Their privacy practices are governed by their own policies, and we are not responsible for how those third parties handle information.

12. Changes and contact

We may update this policy as the Services evolve. We will post the revised policy and update the date above. For privacy questions or requests, email support@gembreak.com or contact us through the Support page.

Nexus Sky Corp, operating as gembreak
3422 Old Capitol Trail, Suite 4087, Wilmington, DE 19808, United States