Privacy Policy

Last updated: February 18, 2026

SportsCardNetwork ("we," "us," "our") operates the sportscardnetwork.ai platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

1. Information We Collect

Account Information: When you register, we collect your name, email address, and password (hashed). If you sign in with Google, we receive your Google profile name and email.

Business Data: Inventory records, card photos, order details, customer information, financial data, and other content you input into the platform.

Third-Party Account Data: When you connect integrations (eBay, Square, Stripe, Shippo), we store OAuth tokens and retrieve data from those platforms on your behalf, including listings, orders, transactions, and tracking information.

Usage Data: We collect basic usage information including pages visited, features used, and error logs to improve the Service.

Payment Information: Subscription payments are processed by Stripe. We do not store your credit card numbers. Stripe handles all payment data per their privacy policy.

2. How We Use Your Information

We use your information to: provide and operate the Service; sync data with your connected marketplace accounts; generate AI-powered descriptions and pricing suggestions; process subscription payments; send transactional emails (password resets, order notifications); improve the Service and fix bugs; comply with legal obligations.

3. Third-Party Services

We share data with the following third-party services only as necessary to provide the Service:

eBay — listing management, order sync, financial data
Square — point-of-sale integration, catalog sync
Stripe — subscription billing and payment processing
Shippo — shipping label purchase and tracking
Anthropic (Claude AI) — AI-powered card scanning, descriptions, and pricing
SendGrid — transactional emails (password resets)
Cloudinary — photo storage and delivery
Vercel — frontend hosting
Railway — backend hosting and database
Google Analytics — anonymized usage analytics
Reddit — advertising conversion measurement (pixel)
Microsoft Clarity — heatmaps and session replay to see how the Service is used and improve it; sensitive input fields (passwords, payment details) are automatically masked and not recorded

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. AI Data Processing

When you use AI features (card scanning, description generation, pricing), your card data and photos are sent to Anthropic's Claude API for processing. This data is used solely to generate the requested output and is not used to train AI models. Anthropic's data handling is governed by their privacy policy and API terms.

5. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on Railway's cloud infrastructure. We use HTTPS encryption for all data in transit. OAuth tokens for third-party services are stored in the database and used only for API authentication.

While we implement reasonable security measures, no system is perfectly secure. You are responsible for keeping your account credentials confidential.

6. Data Retention

We retain your data for as long as your account is active. If you close your account, we will retain your data for 30 days to allow for reactivation, after which it may be permanently deleted. You may request a data export at any time by contacting us.

7. Your Rights

You have the right to: access and view all data we hold about you; export your data; correct inaccurate information; request deletion of your account and data; disconnect third-party integrations at any time through Settings.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

9. International Users (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, data portability, and the right to object to processing. Our legal basis for processing is contract performance (providing the Service) and legitimate interest (improving the Service). Contact us to exercise these rights.

10. Cookies

We use essential cookies for authentication (JWT tokens stored in browser). We do not use advertising or tracking cookies. If we add analytics in the future, we will update this policy.

11. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect information from minors. If we learn we have collected data from a minor, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

13. Contact

For privacy-related questions or to exercise your data rights, contact us at support@sportscardnetwork.ai.