Privacy Policy

1. Information We Collect

Information You Provide Directly

Account Registration: When you create a SlabScout account, we collect your name, email address, password, and profile information. You may optionally provide additional information such as your location, collection interests, and preferred sports or trading card games.

Payment Information: When you purchase the SlabScout app ($10 one-time purchase), we collect payment information through secure third-party payment providers. We do not store full credit card details on our servers.

Card Collection Data: When you use SlabScout to scan and catalog cards, we collect information about the cards you scan, including card images, metadata, market values, and portfolio data. This data is stored in your personal collection.

Communications: If you contact us via email or support forms, we collect the content of your communications to respond to your inquiries and improve our Service.

Information Collected Automatically

Device Information: We collect information about your device, including device type, operating system, unique device identifiers, and mobile network information.

Usage Data: We collect information about how you interact with SlabScout, including features used, cards scanned, searches performed, and time spent in the app.

Camera and Image Data: When you use the card scanning feature, SlabScout accesses your device's camera to capture card images. These images are processed for AI analysis and market value verification.

Cookies and Tracking: We use cookies and similar tracking technologies to remember your preferences and track your activity to improve your experience.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve SlabScout, including card scanning, valuation, and portfolio tracking.
• Account Management: To create and manage your account, process payments, and send transactional communications.
• Personalization: To personalize your experience and provide customized recommendations based on your collection interests.
• Communication: To send you service updates, security alerts, and customer support responses.
• Analytics and Improvement: To analyze usage patterns and improve SlabScout's functionality and performance.
• Security: To detect, prevent, and address fraud, abuse, and security incidents.
• Legal Compliance: To comply with applicable laws and respond to lawful requests from authorities.

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in these circumstances:

• Service Providers: We share information with third-party service providers who assist us in operating SlabScout, including cloud hosting providers, payment processors, and analytics services.
• Legal Requirements: We may disclose your information if required by law, court order, or government request.
• Business Transfers: If SlabScout is involved in a merger or acquisition, your information may be transferred as part of that transaction.
• Aggregated Data: We may share aggregated, anonymized data with third parties for research or business purposes.
• Public Collections: If you choose to make your collection public, it may be visible to other users and the public.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols.
• Secure Storage: Personal information is stored on secure, password-protected servers with restricted access.
• Authentication: We use strong password requirements and optional two-factor authentication.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Employee Training: Our employees are trained on data protection and privacy practices.

However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service:

• Account Data: Retained while your account is active and for a reasonable period afterward.
• Card Collection Data: Retained as long as your account is active. You can request deletion at any time.
• Payment Records: Retained for at least 7 years to comply with tax regulations.
• Communications: Retained for 2 years unless longer retention is required by law.

You can request deletion of your account and associated data at any time by contacting us. We will delete your information within 30 days, except where retention is required by law.

6. Your Privacy Rights and Choices

Depending on your location, you may have the following rights:

General Rights (All Users)

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can request that we correct inaccurate or incomplete information.
• Deletion: You can request that we delete your personal information.
• Opt-Out: You can opt out of marketing communications and non-essential cookies.

GDPR Rights (European Union Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right to Access and Data Portability
• Right to Rectification and Erasure
• Right to Restrict Processing
• Right to Object to Processing
• Right to Lodge a Complaint with your local data protection authority

CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act:

• Right to Know what personal information we collect
• Right to Delete personal information we have collected
• Right to Opt-Out of the sale or sharing of personal information
• Right to Non-Discrimination for exercising your CCPA rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will verify your identity and respond within 30-45 days.

7. Children's Privacy

SlabScout is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will delete such information immediately.

For users between 13 and 18, we provide additional privacy protections. If you believe we have collected information from a child under 13, please contact us immediately at [email protected].

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

This Privacy Policy is effective as of February 2026 and will remain in effect unless and until amended by SlabScout.