Privacy Policy

Last updated: July 4, 2026

This policy explains what information Syracuse Antiques Exchange (“we,” “us”) collects, why we collect it, what we do with it, and how you can change or delete it. It covers our website, the SAE Rewards program, our dealer portal, and the accounting tools we use to run the business. If anything here is unclear, email info@syracuseantiques.com.

What we collect

When you browse the website

Our site is hosted on Cloudflare, which sees basic traffic data such as your IP address and the pages you request. We also use Cloudflare Web Analytics to count page views and see which pages are popular. It is privacy-first: no cookies, and it does not track you across other websites or build a profile of you.

When you use the Sell Items form

The form asks for your name, email, an optional phone number, a description of your items, an optional asking price, and up to four photos. When you submit it, those details and photos are emailed to our staff so our dealers can consider your items, and we email you a confirmation. This information is not added to a customer database. It lives in our email like any other message, and you can ask us to delete it at any time (see Your choices and rights).

When you join SAE Rewards

• Email address: required to identify your account and to send you reward notifications.
• First and last name, and zip code: required at signup. These help us greet you at the counter and understand, in aggregate, where our customers come from.
• Phone number: optional. We keep it on file so staff can reach you about a reward or account question. We do not currently send text messages to customers.
• Marketing opt-in flag: whether you have agreed to receive non-rewards emails such as sales, events, and store news. It defaults to on at signup, and you can uncheck the box on the signup form or email us at any time to opt out.
• Purchase history at SAE: the dollar amount and date of each purchase you check in for, plus the receipt’s invoice number. We use this to credit your spending toward future rewards.
• A small device token stored on the in-store iPad’s browser, used to confirm that reward claims happen physically in the store. This is not tied to you personally.

When you use the dealer portal

Dealers who rent booths sign in to a separate portal. There we collect the login credentials and account details needed to give each dealer access to their own information.

What we don’t collect

• Credit card or payment information. Our website and rewards system never see your payment details. Those go through our point-of-sale system separately.
• Advertising or location tracking. No cookies for advertising, and no third-party trackers following you around the web.
• Information from other sources. We do not buy customer data, we do not link your account to social media, and we do not enrich your profile with data from data brokers.

Why we collect it

To run the business. We use this information to answer Sell Items inquiries, operate the rewards program and the dealer portal, send transactional email (like a submission confirmation or a reward-ready notice), send occasional sale and event announcements if you have opted in, and keep our accounting records. That is it.

Who we share it with

We do not sell, rent, or share your information with third parties for advertising. We use a small set of service providers to actually operate things:

• Resend delivers our email, including Sell Items submissions to our staff, your confirmation, and rewards emails. They see the email address and content, and are limited to using it only to deliver our messages.
• Cloudflare hosts our sites, runs the “are you a real person?” bot check on the Sell Items form and the Rewards signup screen, and provides the cookieless Web Analytics described above. For the bot check, Cloudflare sees your IP address and a brief signal about your browser session, and per their documentation does not use it for advertising.
• Supabase is the database host for the rewards program and the dealer portal. Access is limited by per-record security rules.
• VoIP.ms delivers text messages to our staff phone, for example when a customer claims a reward at the iPad and needs help at the counter. We do not send text messages to customers.
• Intuit QuickBooks Online is our accounting system (see Accounting and QuickBooks below).
• Instagram serves the photos in the feed on our home page. When those images load, your browser requests them from Instagram, which may see your IP address as it would for any image on a web page. We do not share your information with Instagram.

We do not share personally identifying customer information with the dealers who rent booths at SAE. Purchases are tracked in aggregate per dealer for our internal reporting, never with a name attached.

Accounting and QuickBooks

We use Intuit QuickBooks Online to keep our books. Daily sales totals and journal entries are sent to Intuit. This is aggregate financial data for our accounting. It does not include customer names or payment-card details.

How long we keep it

Your rewards account stays active as long as you keep shopping with us. After 2 years with no activity (no purchases and no check-ins), we mark the account inactive and stop sending you email. After that we keep the record on file until you ask us to delete it, or until we purge old inactive records, which we would announce in advance in this policy.

Sell Items submissions stay in our email until they are no longer useful. Ask us and we will delete yours.

Your choices and rights

To update your information

Tell our staff at the counter, or email info@syracuseantiques.com with the change.

To stop marketing emails

Click the unsubscribe link at the bottom of any marketing email. This stops marketing only. You will still get rewards-related email such as activity digests and reward-ready notices. You can also email us to uncheck the marketing box on your account.

To delete your rewards account and data

Email rewards@syracuseantiques.com from the email address on your account, with the subject line “Delete my SAE Rewards account.” We process deletion requests within 30 days. Once deleted, your name, email, phone, and zip are removed. Aggregate purchase history, without your name attached, may be kept for our internal accounting. Any unclaimed rewards are forfeited at deletion, so if you have rewards waiting, claim them first or mention it in your email and we will send them to you before deleting.

To delete a Sell Items submission

Email info@syracuseantiques.com and we will delete your submission and any photos you sent.

To get a copy of what we have on you

Email rewards@syracuseantiques.com from your account email with the subject “Data export request.” We will reply within 30 days with a copy of everything we have linked to your email.

Children

SAE Rewards is intended for adults. We do not knowingly enroll customers under 13. If you believe a child has signed up, contact us and we will delete the record.

Changes to this policy

If we change this policy in a meaningful way, we will update the “Last updated” date at the top, and for significant changes we will send a notice to enrolled customers. Continued use of our services after a change means you accept the updated policy.

Contact