Privacy Policy

HCAC Ventures, LLC ("we," "our," or "us") operates DiecastIQ ("the Service"), a platform for tracking and managing Hot Wheels and Matchbox diecast car collections. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including our website at diecastiq.com and the DiecastIQ mobile app.

By using DiecastIQ, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

Information We Collect

Personal Information You Provide

When you register for an account or use our Service, we may collect:

• Email address and encrypted password (via AWS Cognito)
• Collection data (which cars you own, quantities, condition notes)
• Contributions to the reference database (color, tampo, wheel type, and other variation details you submit)
• Marketplace data (listings you create, prices, condition descriptions, buyer/seller messages)
• Payment and billing information (processed securely through Stripe; we store your Stripe customer ID and subscription status but never your card number)
• Communications you send to us or to other users through the marketplace messaging system

Information Collected Automatically

When you access our Service, we automatically collect certain information, including:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed)
• Usage data (features used, searches performed)

Mobile App Data

The DiecastIQ mobile app stores a local copy of the reference database (casting and variation data) on your device for offline access. Your collection data is stored locally and synced to our servers when you are connected. The app periodically checks for database updates and downloads new versions over the air (OTA).

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Sync your collection across web and mobile devices
• Process subscriptions and payments
• Enable the marketplace (listing cars, messaging between buyers and sellers)
• Improve the reference database using approved community contributions
• Send administrative communications (account verification, password resets)
• Respond to customer support requests
• Improve and personalize the Service
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

Data Sharing and Disclosure

Marketplace Interactions

When you list a car for sale or send a message on the marketplace, your display name (or email prefix) is visible to other users. We do not share your email address or full account details with other users.

Service Providers

We share information with third-party vendors who perform services on our behalf:

• Amazon Web Services (AWS) — cloud hosting, storage, and authentication
• Stripe — payment processing

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your personal information becomes subject to a different privacy policy.

What We Never Do

We do not sell, trade, or rent your personal information to third parties. We do not use advertising or tracking cookies. We do not share your collection data with other users unless you explicitly list items on the marketplace.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS) and at rest
• Secure authentication through AWS Cognito
• Regular security assessments
• Secure payment processing through PCI-compliant providers (Stripe)
• Parameterized database queries to prevent injection attacks

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Support business operations

Approved contributions to the reference database are retained indefinitely as part of the shared database, even after account deletion, as they become part of the community resource.

You may delete your account and personal data (collection, listings, messages) at any time by contacting us.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information

To exercise these rights, please contact us at support@diecastiq.com.

Cookies and Tracking Technologies

We use essential cookies only to maintain your session and authentication state. We do not use advertising cookies, tracking pixels, or analytics cookies. You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.

Children's Privacy

DiecastIQ is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately at support@diecastiq.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: support@diecastiq.com

HCAC Ventures, LLC — Fuquay-Varina, North Carolina, USA. This Privacy Policy is governed by the laws of the State of North Carolina. See our Terms of Service for full dispute resolution terms.