Privacy Policy

Last updated: 29 September 2026. Operator: MetalAttest (operated by Aissam Drai), 99 Wall Street #2338, New York, NY 10005. Contact: info@metalattest.com.

What we collect

• Forms on this site (pilot sign-up, deposit commitment, broker letter of intent): what you type, such as company, work email, name, role, number of SKUs, HTS codes, broker name, filer code, plus the page source (UTM tags / referrer) and a submission timestamp.
• Email you send to us and our replies.
• Service data during a Sprint: your SKU list and the information your suppliers submit (component weights, materials, metal origin countries, certificates, the supplier contact's name, email and typed signature, with timestamp and IP address).
• Payment data: once card payments are live, payments are handled by our merchant of record. We never see or store your card number; we receive the order details and payment status.
• Analytics: Cloudflare Web Analytics, which counts page views without cookies and without tracking you across sites.

How we use it

Only to run the pilot, deliver the services you ask for, send you invoices and service emails, answer you, and meet legal obligations. We do not sell or rent personal data and do not use it for advertising.

Who processes it for us

• Supabase (database, United States)
• Cloudflare (website hosting and analytics)
• Resend (sending email) and Fastmail (our mailbox)
• Our merchant of record, once card payments are live

Each processes data only to provide its service to us.

How long we keep it

Sign-up and commitment data: until 24 months after our last contact, or sooner if you ask us to delete it. Proof packs and supplier attestations: 5 years after delivery, matching the usual U.S. customs record-keeping period, unless you ask us to hand them over and delete our copy sooner.

Your choices and rights

Email info@metalattest.com to access, correct, export or delete your data, or to stop receiving emails from us. We answer within 30 days. Every commercial email we send also explains how to opt out.

Security

Data is encrypted in transit; database access is restricted by row-level security, and public forms can add records but cannot read them.

Children

MetalAttest is a business service and is not directed at children.