Privacy Policy
GradeXchange ("we," "us," or "our") operates the GradeXchange mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.
1. Information We Collect
We collect the following types of information:
- Account information: email address and authentication credentials when you create an account.
- Portfolio data: graded sports cards you add, including card details, purchase price, and cost basis.
- Device information: device push notification token (for price alerts), device type, and operating system version.
- Camera and photos: images captured or selected when you scan a graded card. These images are sent to our servers solely for card identification and are not stored long-term.
- Usage data: app interactions, feature usage, and crash reports to improve the App.
2. How We Use Your Information
- To provide and operate the App, including portfolio tracking and card pricing.
- To send push notifications for price alerts you have enabled.
- To identify graded cards via camera scanning.
- To improve app performance, fix bugs, and develop new features.
- To communicate with you about your account or updates to this policy.
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We share data only as follows:
- Service providers: Firebase (Google) for authentication, database, and push notifications; Upstash for caching; Stripe for payment processing; Vercel for backend hosting. Each provider's own privacy policy governs their use of data.
- Legal requirements: if required by law, court order, or to protect the rights and safety of our users.
4. Data Retention
We retain your account and portfolio data for as long as your account is active. You may delete your account at any time through the Profile screen in the App, which will permanently remove your data from our systems within 30 days.
5. Children's Privacy
The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
6. Security
We use industry-standard measures to protect your information, including encrypted data transmission (HTTPS) and secure authentication. However, no method of transmission over the Internet is 100% secure.
7. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by contacting us at the email below. California residents may have additional rights under the CCPA.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the App and updating the effective date above.
9. Contact Us
If you have questions about this Privacy Policy, please contact us at: