Privacy Policy
Privacy at a glance
We use account information, card images and service records to provide identification, grading and collection features, process purchases and support customers. Image handling differs by product: commercial API customers should also read our API data and privacy guide.
1. Introduction
CardGrader.ai is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications or API.
2. Information We Collect
- Account Information: We collect the sign-in identity, contact email and profile information you provide. API accounts also include an application name, hashed API credentials and account identifiers.
- Card Images: We collect images of collectible cards that you upload for identification and grading.
- Payment Information: Payments are processed through Stripe (web) or Apple App Store/Google Play (mobile apps). We do not store any credit card details.
- Device Information (Mobile Apps): When using our iOS or Android apps, we may collect device identifiers, operating system version, app version, and crash reports to improve app stability and user experience.
- Camera and Photo Library Access: Our mobile apps request access to your device's camera and photo library solely to capture or select card images for grading. We do not access or collect photos unrelated to the grading service.
3. How We Use Your Information
- Service Provision: To authenticate your account, provide grading services, and personalize your experience.
- Service Improvement: To improve our grading algorithm and develop new features.
- Operations and Attribution: To support customers, maintain purchase and usage records, investigate failures and understand how people find and use our services.
4. Sharing Your Information
- Service Providers: We use Google and Apple for sign-in, Stripe for web payments, and Apple/Google for mobile purchases. Microsoft Azure hosts web and data services; card processing also uses grading infrastructure and network services such as ngrok. The providers involved depend on the feature you use.
- Analytics and Crash Reporting: We use Firebase Crashlytics to collect crash reports and improve app stability. Crash reports may include device, app, diagnostic and account-related identifiers. They help us investigate failures and improve stability; they should not be assumed to be anonymous.
- Potential Future Integrations: We may share information with eBay for listing cards if you choose to integrate your account.
5. Data Security
We use HTTPS, access controls and hashed API keys to help protect information. Payments are handled by the payment providers above; our service keeps purchase and subscription records rather than complete payment-card numbers. No storage or transmission method can guarantee absolute security.
6. User Rights
- Profile Management: You can change your profile name and remove cards from your collection.
- Data Access: You can view and update the information associated with your profile.
- Data Deletion: You can request access, correction or deletion by contacting support at support@cardgrader.ai. We verify requests and may need to retain records for billing, fraud prevention, disputes or legal obligations. Cancel subscriptions separately to stop future charges.
7. Cookies and Tracking
Our website uses authentication and referral or campaign-attribution information, and some pages load Google Tag Manager and Ahrefs analytics. These technologies can process connection, page-use and campaign information. Availability and settings differ by page and platform; we do not describe all website activity as tracking-free. The commercial API signup page excludes those analytics scripts. You can use browser and device privacy settings and contact support with questions.
8. Mobile Applications
Our iOS and Android applications provide the same card grading services as our web platform. Additional considerations for mobile users:
- In-App Purchases: Subscriptions and credit purchases made through our mobile apps are processed by Apple (App Store) or Google (Play Store). Your payment information is handled entirely by these platforms according to their respective privacy policies.
- Camera Access: We request camera permission only when you choose to scan a card. Images are processed for grading and stored as part of your card collection.
- Photo Library: If you choose to upload existing photos, we only access the specific images you select.
- Push Notifications: If you enable notifications, we may send alerts when card grading is complete. You can manage notification preferences in your device settings.
- Offline Data: Some card data may be cached locally on your device for performance. Local retention depends on the app and device; use the app and device settings to manage it.
9. Children's Privacy
Our service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. Contact support if you believe a child under 13 has provided personal information.
10. California Privacy Rights (CCPA)
If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, request deletion of your personal information, and opt out of the sale of your personal information (we do not sell personal information). To exercise these rights, contact us at support@cardgrader.ai.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice on our website and mobile apps.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us at support@cardgrader.ai.
13. Disclaimer of Affiliation
CardGrader.ai is not affiliated with or endorsed by Pokémon, NFL, NBA, or any other entities related to the cards. Card names and trademarks belong to their respective owners. Our results are AI estimates, not official certification or endorsement.
14. Governing Law
Our Terms of Service describe governing law. Nothing in this policy removes privacy rights that apply under mandatory law in your jurisdiction.