Privacy Policy

This Privacy Policy is maintained by FC Collects ("we", "us", "our") to explain how we collect, use, and safeguard information when you use our AI-powered platform for photographing, identifying, pricing, and listing trading cards (the "Service").

• Account information: name, email address, and authentication credentials provided when you sign up or sign in (including via third-party providers such as Google).
• Card content: photos you upload, AI-extracted card metadata (player, team, set, year, grade, condition), pricing data, and notes you add.
• Listings & marketplace data: draft and published listings, marketplace destinations you connect (e.g. eBay), and the responses returned by those marketplaces.
• Billing & credits: subscription plan, credit balance, and transaction records. Payment card details are handled by our payment processor and never stored on our servers.
• Usage data: log data, device information, and basic analytics needed to operate and improve the Service.

• Run the core Service: store your cards, generate AI metadata and pricing, and publish listings on your behalf.
• Manage your account, subscription, and credit balance.
• Communicate service updates, security notices, and (with your consent) product news.
• Detect, prevent, and respond to abuse, fraud, or security incidents.
• Comply with legal obligations.

Card photos you upload are sent to AI providers we contract with to extract card attributes and estimate pricing. We only send the data needed to perform the requested task and do not permit those providers to use your content to train their general-purpose models.

We share data with third parties only as needed to deliver the Service:

• Authentication: Google OAuth (if you choose it).
• Marketplaces: eBay and other marketplaces you connect, to publish your listings.
• Payments: our payment processor for subscriptions and credit packs.
• Infrastructure: our hosting, database, and AI inference providers.

We retain your cards, listings, and account data while your account is active. You may delete individual cards or your entire account at any time; after deletion we remove your content within a reasonable period, except where retention is required for legal, accounting, or fraud-prevention purposes.

We use row-level security, encrypted connections, and access controls to protect your data. We also offer two-factor authentication (2FA) on your account — we strongly recommend enabling it from your security settings. No system is perfectly secure; please use a strong unique password and notify us if you suspect account compromise.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their personal data.

We may update this policy from time to time. Material changes will be communicated through the Service or by email.

Questions about this policy? Reach us via our contact form.