Privacy Policy
This explains what CardVersePro (cardversepro.com) collects, why, who helps us run it, and the choices you have. The short version: we use your information to run your collection and your account, and we never sell it.
What we collect
- Your account: your email address and name, and how you sign in (handled by Clerk; we never see your password).
- Your collection: the cards you add, their details, values, notes, grades and storage boxes, the photos you upload or scan, and your binders, want list and settings.
- Payments: if you subscribe, your plan and subscription status. Your card number goes straight to Stripe; we never see or store it.
- How you use the site: pages visited, features used, searches that found nothing, errors, your browser and device type, and the IP address your requests come from. When you sign up we also note how you found us: the first page you visited, the site that linked you, and any campaign tags in that link.
- Messages: emails you send us, and push-notification settings if you turn notifications on.
How we use it
To run CardVersePro: store and show your collection, find card details and prices, work out grading estimates, send the emails and alerts you've chosen, take payments, keep the service secure, and fix problems. We also look at usage to understand what's working and improve it. We don't sell your personal information or share it for advertising.
Who helps us run CardVersePro
These services process data for us, each only for its job:
- Vercel: hosts the website and app (request logs, including IP addresses).
- Supabase: our database and photo storage (your account and collection).
- Clerk: sign-in and account security (email, name, sign-in details).
- Stripe: payments and subscriptions (billing details, which Stripe holds).
- Resend: sends our emails (your email address and the email's content).
- Google (Gemini) and Cloudflare (Workers AI): read the card when you use photo scan (the photo you scan).
- Google Analytics: usage statistics such as pages visited, device type and rough location, using cookies.
- Sentry: error reports when something breaks (the page, your browser and device, and the error).
To look up prices, checklists and grading population we also send card details only, never anything about you, to data services such as SoldComps, eBay and Apify.
Photo scan
When you scan a card, the photo is sent to Google's Gemini and Cloudflare's Workers AI to read it. Each handles the photo under its own terms, and depending on the service plan we use, Google may keep scanned photos and use them to improve its products. Don't scan anything you wouldn't want shared that way; you can always add cards by typing instead.
Sharing your collection
Your collection is private. If you turn on collection sharing, the cards you share can be seen by anyone with the link, and shared pages may appear in link previews. Turn sharing off at any time to make it private again.
Emails you can turn off
Account and billing emails always arrive. Collection tips and check-ins, the weekly summary, price alerts and worth-grading-now alerts can each be turned off in Settings → Notifications or with the unsubscribe link at the bottom of the email.
Cookies and local storage
We use cookies to keep you signed in (Clerk) and to measure usage (Google Analytics), and your browser's local storage to remember your settings and layout. Blocking cookies will stop you from signing in.
How long we keep it
We keep your account and collection while your account is open. When you delete your account, we delete your data within 30 days, apart from what we must keep for legal, tax or payment records (Stripe keeps its own payment records). Usage logs and error reports are kept only as long as they help us run and improve the service.
Your choices and rights
- Download everything: Settings → Your data → Export my data gives you your profile, cards, binders, want list and grading history, on any plan.
- Change or delete: edit your details in the app, or ask us to delete your account from Settings or by email.
- Ask us: wherever you live, you can ask what we hold about you, to correct it, or to delete it, at hello@cardversepro.com. Depending on where you live (for example California or the EU/UK) you may have further rights under local law, and we'll honor them.
Security
Your data is encrypted in transit, stored with providers that encrypt it at rest, and access to it is restricted. No system is perfectly secure, so if something ever goes wrong that affects your information, we'll tell you.
Children
CardVersePro isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, email us and we'll delete it.
Where your data is processed
CardVersePro and the services above are based in the United States, so your information is processed and stored there.
Changes and contact
If we change this policy in a way that matters, we'll email you and update the date at the top. Questions or requests: hello@cardversepro.com. See also the Terms of Service.