Privacy Policy

1. Information we collect

When you use 405-Card Vault, we collect:

• Account info: email address, username, and password (your password is stored securely by our authentication provider, Supabase — we never see it in plain text).
• Card & collection data: photos, player/set/grade details, and fair-market-value estimates for cards you add to your vault.
• Marketplace activity: listings, bids, purchases, and messages you send to other users through the Service.
• Payment info: we don't store your card number. Stripe processes payments on our behalf and shares limited data back with us (such as a token representing your saved payment method, subscription status, and — for sellers — Connect payout account status).
• Device & usage data: basic technical information (like IP address and browser type) collected automatically by our hosting provider for security and reliability.

2. How we use it

We use your information to:

• Operate your account, vault, and marketplace listings.
• Process payments, subscriptions, and seller payouts.
• Run the AI card-scanning feature and generate market-value estimates.
• Communicate with you about your account, transactions, and messages from other users.
• Detect fraud, abuse, and violations of our Terms of Service.

3. Who we share it with

We share data with the service providers that make 405-Card Vault work, and no one else:

• Supabase — hosts our database and handles authentication and file storage (card photos).
• Stripe — processes subscription payments and marketplace transactions, and handles seller payouts through Stripe Connect. Sellers who complete Connect onboarding share identity-verification information directly with Stripe under Stripe's own privacy policy.
• Vercel — hosts the application and its serverless functions.
• Card pricing data sources (such as eBay's Browse API and other card-market data providers) — we send card details (player, year, set, grade) to these services to generate price estimates; we don't send your personal account information to them.

Other users can see your username, whether you're an onboarded seller, and any listings or messages you choose to make visible to them. We don't sell your personal information to third parties or use it for advertising.

4. Your choices

You can review and update your account details from your profile. You can request that we delete your account and associated data by contacting us at jeffhinshaw@405-sportscardz.com; deleting your account removes your cards, listings, bids, and messages, though we may retain records Stripe requires us to keep for tax, accounting, or fraud-prevention purposes.

5. Data security

We use industry-standard measures (encrypted connections, access controls, and database-level row security) to protect your data, but no method of storage or transmission is 100% secure, and we can't guarantee absolute security.

6. Children's privacy

The Service is not directed to children under 18, and we don't knowingly collect information from them.

7. Changes to this policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do.

8. Contact

Questions about this policy or your data? Reach us at jeffhinshaw@405-sportscardz.com.