Privacy Policy

Effective 2026-10-07

This policy explains what SportsCardBot ("SportsCardBot", "we") collects when you use SportsCardBot, why, who we share it with, and the choices you have. Questions: Info@teambuddys.com.

What we collect

• Account: your email address and a one-way hash of your password (we never store the password itself).
• Card photos and scans you upload or place in your connected Dropbox folder, and the card details SportsCardBot derives from them (player, set, grade, prices, listing status).
• Free scans from our "scan one card free" page, before you have an account: the photos and the result. We keep them 7 days, or until you create your account if you joined the waitlist from the result (at most 120 days), then delete them. We keep a one-way hash of your IP address for that day to enforce the free-scan limit.
• Connected accounts: when you connect eBay or Dropbox, the access tokens those services issue us, stored encrypted. We don't receive your eBay or Dropbox password; you sign in on their sites.
• eBay business policies and item location you choose in Settings, so listings use your own shipping, payment and return terms.
• Phone alerts: if you allow notifications in the iPhone app, the push token Apple issues for your phone, so we can tell you when a card sells or a stack is ready. Signing out or deleting your account removes it.
• Invites: your invite code, which account invited yours or which accounts you invited, and the eBay seller ID that earned an invite reward. We keep that invite record after an account is deleted, only so one eBay account can't earn the reward twice.
• Billing: if you subscribe on the website, Stripe handles your card and we keep only your Stripe customer ID and subscription status. If you subscribe in the iPhone app, Apple handles payment and we keep the App Store purchase record Apple gives us: transaction ID, plan, renewal date and whether it was a test purchase. We never see your card number.
• Early-access list: if you join before launch: your email, anything you choose to tell us (first name, what you collect, collection size, where you sell), whether you agreed to launch emails, who referred you, and how you found us (the campaign tags in the link you clicked and the referring page).
• Ad measurement: the early-access page may load measurement tags from Meta, TikTok or Google so we can tell which ads bring people to SportsCardBot. These set their own cookies and receive the page visit and the fact that you signed up, not your email. You can block them with your browser's tracking protection.
• Card catalog: when you confirm a card (approve, list or sell it), a de-identified copy of its card facts goes into our shared card catalog. See "Card catalog and market data" below.
• Operational data: sign-in time, usage counts (cards processed per month), AI processing costs, and server logs (IP address, request path, errors) kept for security and troubleshooting. A log of which screens and actions your account used, with the IP address, is kept 90 days.

How we use it

• To identify and price your cards, and list them only when you approve on your eBay account.
• To run your account: sign-in, password reset, email verification, billing, support.
• To keep the service secure and working, and to enforce plan limits.
• To build our card catalog and market data from de-identified card facts, and, if you opt in, to improve card recognition with your photos (below).

We don't sell your personal information, and we don't use your photos or card data to advertise to you.

Card catalog and market data

• What goes in: for each card you confirm (approve, list or sell): sport, player, set, card number, parallel or insert, print run (for example "/99", never which copy), autograph and rookie flags, grader, grade, cert number, whether you corrected our read, the price you listed at, and the sale price and month if it sells.
• What never goes in: your name, email, password, eBay or Dropbox account, eBay listing or order numbers, notes, storage location, IP address, or the day a card sold. Each record is keyed by a one-way code that doesn't contain your account. Listings and sales by other eBay sellers, and data licensed to us by our pricing providers, are never added to this shared catalog. We also keep a separate checklist of cards that exist (sets, card numbers and parallels), built from public checklists and from data our pricing providers license to us; it holds no user data and is used only inside SportsCardBot, never offered to others.
• How it's used: to improve identification and pricing for everyone, and to build price guides, catalog and market data that we may publish or offer to others, including for a fee. It contains no personal information.
• Photos (opt-in): only if you turn on "Help improve card recognition" (at signup, on the Terms update screen or in Settings), we also keep the photos of cards you confirm, to train and test card recognition. Off by default. Turning it off, or deleting your account, deletes the photos we kept.
• After you delete your account: the de-identified card facts stay in the catalog. Photos don't.
• This applies to cards you confirm after you accept the Terms that include it (section 5a). Earlier cards aren't added.

Who processes it for us

We share data only with the services needed to run SportsCardBot, each for that purpose:

• Anthropic (card identification), Google Cloud Vision (text recognition) and Card Hedge (a photo match that double-checks the identification, plus recorded sales) receive your card photos.
• eBay receives the listings you approve, including photos, title, price and your chosen policies; we also query eBay for comparable listings, and send the front photo of each card to eBay's image search to double-check its identification.
• Dropbox, if you connect it, for reading photos from your SportsCardBot folder.
• PSA (certificate lookups for PSA-graded cards) and SportsCardsPro (market values) receive card details such as a cert number or player and set, not your personal information.
• Stripe (website payments), Apple (App Store subscriptions), our email provider (account emails), our hosting provider (servers and storage), and our error-reporting service, which receives the request details and IP address of a request that fails.

We may also disclose information if the law requires it, or to protect SportsCardBot, our users or the public from fraud or harm.

Your choices

• Export: Settings → Export my data downloads your cards (CSV), photos and account details.
• Disconnect eBay or Dropbox at any time in Settings; we delete the stored tokens.
• Launch emails: every email has a one-click unsubscribe link.
• Help improve card recognition: turn photo sharing for the card catalog on or off in Settings at any time.
• Delete your account in Settings. This permanently deletes your cards, photos, tokens and settings from our live systems right away (except the invite record and the de-identified card catalog facts described above); copies in backups are overwritten within 14 days. Listings already published stay on eBay until you end them there.
• If you close your eBay account, eBay notifies us and we delete the eBay connection we hold for it.
• Depending on where you live you may have rights to access, correct or delete your data, or to object to processing. Email Info@teambuddys.com and we'll respond within 30 days.

Security and retention

Traffic is encrypted in transit; connected-account tokens are encrypted at rest; each user's cards and photos are stored separately from every other user's. We keep your data while your account is open and delete it as described above when you delete your account. De-identified card catalog facts are kept indefinitely.

Cookies

The app uses a single first-party cookie to keep you signed in. The early-access page may also use the ad-measurement tags described above; the app itself uses no advertising or third-party tracking cookies.

Children

SportsCardBot isn't directed to children under 13 (or under 16 where local law requires) and we don't knowingly collect their data. eBay requires sellers to be 18 or older.

Changes

If we make material changes we'll update the effective date above and notify you by email or in the app before they take effect.