Privacy Policy

We collect the minimum data needed to operate the grading service and marketplace:

• Account data — name, email, hashed password, and (if you subscribe) Stripe customer ID. Used to authenticate you and route billing.
• Card images and metadata — the photos you upload, plus card identification you supply or our AI infers (player, set, year, parallel). Stored in a private Supabase bucket; only you and GradeX admins (for support) can read them.
• Grading results and usage — the AI grade predictions and counts of scans / analyses, used to enforce plan limits and to improve model accuracy in aggregate.
• Marketplace activity — listings, offers, messages, and transaction records. Required to run the marketplace and resolve disputes.
• Verification data — for users opting into verified-seller status, identity documents processed by Stripe Identity. We never see the raw documents; we only receive a pass / fail signal.

Your data is used for the following purposes — and nothing else:

• Operating the grading service and marketplace.
• Processing payments and payouts through Stripe.
• Sending transactional emails (account, billing, marketplace notifications).
• Aggregate, anonymized analytics to improve grading accuracy. Individual card images are never used to train external models.
• Responding to support requests and resolving disputes.

We do not sell your data. We do not share it with advertisers.

• Stripe — payments, subscriptions, Connect payouts, and identity verification.
• Supabase — database and private file storage.
• Anthropic (Claude) — the AI model that performs grading. Card images are sent for inference and not retained by Anthropic per their zero-retention API agreement.
• Vercel — application hosting and edge logging.

You can request a copy or deletion of your data at any time by emailing [email protected]. Deletion removes your account, card photos, grading history, and marketplace records, subject to legal retention requirements for completed financial transactions.

We use only first-party session cookies required for sign-in. No third-party advertising or tracking cookies.

Questions about this policy: [email protected].