Privacy Policy

Effective November 1, 2026 · Version 3.0

This policy explains how Allied Industries ("we") handles personal information on NDAA Shop at ndaashop.com. You can browse the public catalog without an account; most of what follows applies when you sign in or send us a request. We do not sell your personal information.

1. Information we collect

Information you give us:

Access and contact requests: company name, your name, email address, country, city, role and any message you write.
Quote requests: your name, email address and company name, the parts and quantities you ask about, and the version and time of the terms you accepted.
Account and access codes: if you sign in, your email address and name from the sign-in method you choose, managed by our authentication provider. When you redeem an access code we record the code, your account ID, your email address and the time.

Information collected automatically:

Request logs kept by our hosting provider: IP address, browser user agent, pages requested and timestamps, used for security and troubleshooting.
Rate-limit counters: a short-lived counter keyed to your IP address, used to block abuse of our forms. It expires within about a minute.

We do not use analytics, advertising trackers or marketing pixels on the Site.

2. Information kept in your browser

The Site stores the following in your browser's local storage so it works the way you left it. It stays on your device and is sent to us only as part of a request you submit:

Your cart (parts and quantities).
The contact details you entered in the quote form, so you do not have to retype them.
Which version of the terms you accepted.
Your language and light/dark theme preference.

If you sign in, our authentication provider sets cookies needed to keep you signed in. We do not set tracking cookies. You can clear local storage and cookies in your browser settings at any time.

3. Image search

When you search by photo, the image is analyzed entirely in your browser and is never uploaded to us. To do this, your browser downloads an image-recognition model from Hugging Face and text-recognition data from jsDelivr. As with any web request, those providers receive your IP address; the Site also loads fonts from Google Fonts.

4. How we use information

To respond to your access, contact and quote requests, and to obtain quotes from suppliers on your behalf.
To provide sign-in and access-code features and decide whether to grant access.
To operate, secure and improve the Site, and to prevent abuse.
To screen requests for compliance with export control and sanctions laws.
To send you emails related to your requests and your account. We will not add you to a newsletter or marketing list without your consent.
To comply with legal obligations and enforce our terms.

We do not sell your personal information or share it for cross-context behavioral advertising, and we do not provide it to other companies without your consent, except as follows:

Suppliers: to get you a quote, we may share your name, company, email address and the parts and quantities in your request with the manufacturer or distributor of those parts. We share only what is needed for that request.
Service providers that operate the Site for us under contract: Vercel (hosting), Upstash (data storage and rate limiting), Clerk (sign-in and accounts), an email delivery provider and our email and document workspace provider. They may use the information only to provide their services to us.
Legal reasons: when required by law, court order or a valid government request, or when needed to protect the rights, property or safety of Allied Industries, our users or others.
Business changes: to a successor if Allied Industries is involved in a merger, acquisition or sale of assets, subject to this policy.

6. Where information is processed

The Site is hosted in the United States. Allied Industries operates from the United States and Japan, so your information may be accessed and processed in both countries, and our service providers may process it in other countries where they operate. We take reasonable steps to make sure your information receives appropriate protection wherever it is processed.

7. How long we keep information

Quote, access and contact requests: up to 7 years, as business and export-compliance records.
Access-code records: for as long as the code exists, then up to 7 years.
Account profile: until you delete your account or ask us to.
Hosting request logs: according to our hosting provider's log retention, generally no more than 30 days.
Rate-limit counters: about one minute.

8. Security

We use reasonable technical and organizational measures to protect personal information, including encrypted connections, access controls and limiting access to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your choices and rights

You may ask us to tell you what personal information we hold about you, to give you a copy, to correct it, to delete it, or to stop using it. Depending on where you live (for example California or Japan), you may have these rights by law. We will not treat you differently for exercising them.

To make a request, email legal@alliedindustries.ai. We will verify your request and respond within 30 days. We may keep information we are required to keep by law, such as records described in section 7.

10. Children

The Site is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children.

11. Changes and contact

We may update this policy. The version and effective date at the top of this page show the current policy, and we will ask for your acceptance again before your next quote request if we make a material change.

Questions about this policy: legal@alliedindustries.ai.