Privacy Policy

1. Information We Collect

Account Information

• Email address (required for account creation)
• Password (encrypted and hashed)
• Display name or username (optional)
• Subscription tier and payment information (processed by Stripe)

Portfolio Data

• Cards in your collection
• Purchase prices and dates
• Card conditions and quantities
• Portfolio performance metrics

Usage Data

• Market signals generated and viewed
• Cards searched and viewed
• Scanner and condition-analysis requests submitted
• Feature usage statistics

Technical Data

• IP address and location (approximate)
• Browser type and version
• Device information
• Cookies and similar tracking technologies

Card Images

When you use image-based scanner or condition-analysis tools, you may upload card images. These images are processed by our image-analysis provider and are not stored permanently. Images are deleted after processing is complete.

2. How We Use Your Information

• Service Delivery: To provide and maintain our Service, process payments, and deliver features
• Account Management: To create and manage your account, authenticate users, and enforce subscription limits
• Improvement: To analyze usage patterns, improve our algorithms, and enhance user experience
• Communication: To send service-related emails, updates, and support responses
• Legal Compliance: To comply with legal obligations and protect our rights
• Security: To detect and prevent fraud, abuse, and security threats

3. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encrypted passwords (bcrypt hashing)
• Row-level security (RLS) in our database
• Regular security audits and updates
• Access controls and authentication
• Secure API endpoints with rate limiting

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences
• Analyze usage patterns (analytics)
• Improve service performance

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

5. Your Rights (GDPR/CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails (service emails may still be sent)
• Do Not Sell: We do not sell your personal information to third parties

To exercise these rights, contact us at our contact page.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at our contact page.