Privacy Policy

1. Information We Collect

We collect the minimum information necessary to provide and improve the Service:

• Account information: email address and display name when you sign up. We support social sign-in (Google, GitHub), in which case we receive only your name, email, and profile image from the provider.
• Portfolio and collection data: card holdings, purchase prices, and watchlist selections you voluntarily add.
• Usage data: pages viewed, features used, browser type, and device information — collected automatically via server logs and analytics tools.
• Payment information: processed by Stripe. We never store your full card number, CVV, or bank details on our servers.

2. How We Use Your Information

• Provide personalized features (portfolio, watchlist, price alerts)
• Process payments for premium subscriptions
• Analyze usage patterns to improve the Service
• Send transactional emails (account verification, password reset)
• Enforce our Terms of Service and prevent abuse

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services:

• Stripe — payment processing
• NextAuth.js — authentication (Google, GitHub OAuth)
• Vercel Analytics — anonymous usage analytics

Each service has its own privacy policy, and we encourage you to review them.

4. Cookies

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how visitors interact with the Service. You can control cookie preferences through your browser settings.

5. Data Storage and Security

Your data is stored on secured servers within the European Union. We use industry-standard practices including encrypted connections (TLS), hashed passwords, and regular security updates to protect your information. However, no system is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction (EU/EEA under GDPR, California under CCPA), you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of non-essential cookies and analytics

To exercise any of these rights, email [email protected].

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

8. Children's Privacy

CardIntel is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, contact [email protected].