Your numbers, your customers, your comps.
A dealer’s buy bands and customer list are the business. Here is exactly what we hold, what we do with it, and what we don’t claim yet.
The data is yours
Accepted quote lines export as CSV. If you ever want to leave, you don’t have to ask us: an owner can delete the whole workspace from Settings, with 30 days to change your mind before it is permanently deleted. Staff can delete their own login from My Profile. We keep only the minimal billing records the law requires, and copies in backups are removed as those backups expire.
We don’t sell what we see
Your buy bands, premium shares, offers and customer records are not brokered, resold, or aggregated into a product other dealers can buy. No exceptions we’d have to write in small print. We use US-based AI companies only, through API agreements, so none of your data or your customers’ data is ever used to train models.
Encryption
Connections use HTTPS. Dealer-supplied API credentials use authenticated encryption and fail closed without the configured encryption key. A connected guide key persists until disconnected or replaced; bounded cached lookup values have separate retention. This does not assert an independently audited infrastructure or backup certification.
Access and attribution
Staff accounts and roles control access. Shared-counter Lock screen and Switch profile use per-staff four-digit quick PINs, with attribution following the active profile. Quick switching is not a separate security boundary; protect the signed-in account and device. Staff names are optional on the customer copy.
Payments
Subscription billing runs through Stripe. Card numbers never reach our servers, and we don’t store them anywhere. CounterMint does not process the money between you and your walk-in. That stays at your counter.
Customer contact and consent
Contact details do not by themselves permit delivery or future marketing. Record those permissions separately. With delivery permission, send a branded quote email or open a prefilled text in your device’s messaging app to review and send from your own number. Manual email and print are also available. Native SMS uses your messaging app and carrier to send the text.
The retrieval portal
A printed quote opens at quote.countermint.io with a Quote ID and a PIN: both required, neither guessable from the other. The portal will not confirm whether a Quote ID exists, and repeated failed attempts are rate-limited, so a mislaid sheet can’t be used to enumerate your customers or your pricing.
Where the numbers come from
Gold, silver, platinum and palladium are the four supported quoteable metals. Spot from a market data provider, refreshed every minute and time-stamped on every quote. Request a sold-comps refresh when you need new evidence, review the matches and include or exclude sales. For metal-bearing items with usable historical spot, the calculation separates metal from premium and fences statistical outliers. Non-metal items use the comparable value. Manual wholesale entries record matched grade, source and publication date for staleness review; own-key lookup requires authorized access.
We don’t have a SOC 2 report yet, so we’re not putting a badge in the footer. It’s on the list, and when it lands we’ll say so with a date on it. If your insurer or your accountant needs specifics before then, ask us directly and we’ll answer in writing.
Ask a security question →