Privacy Policy

Account information. Your email address and name, and a password if you create one. If you sign in with Google or Apple, we receive your name, email address, and an account identifier from them. With Apple you can choose to hide your email, in which case we receive a private relay address instead.

What you put into DeckBase. The cards, inventory, purchases, sales, trades, prices, notes, and business or team details you add.

Card scans. When you scan a card, the camera image is used to identify it. We keep a reduced-size copy of scan images to improve card recognition. These copies are not linked to your account.

Payments. Subscriptions are handled by Stripe. We receive your subscription status and billing details such as the card brand and last four digits, never the full card number.

Technical information. Basic device, app version, and request information that our servers log to keep the service running, secure, and fast.

Connecting is optional. When you install DeckBase on your Shopify store and link it to your DeckBase account, we receive your store's address and the access you approve: to create and update the products DeckBase lists for you, to keep their inventory in step, to read the store's locations, and to read its orders. DeckBase only creates and changes listings for cards you list from DeckBase.

From your store's orders and refunds we receive the order number, the items and quantities, their prices and discounts, the shipping charged, the currency, what was refunded and whether items were restocked, and the payment processing fee where Shopify reports it. We use this to record the sale in DeckBase, take sold cards off your shelf, and put returned cards back.

We do not store your customers' personal information: no names, email addresses, phone numbers, or shipping addresses. Because of that, there is nothing about your customers for us to report or erase when Shopify passes on a customer's privacy request.

Your store's access tokens are encrypted when stored. When you uninstall DeckBase from Shopify, we delete that access straight away. About 48 hours later, when Shopify asks, we erase the store's connection, listings, and order and refund records. The sales those orders became stay in your DeckBase records, like any other sale, until you delete them or your account. Disconnecting the store in DeckBase settings stops all syncing at once.

To run DeckBase: sign you in, store and sync your data across your devices, identify scanned cards, show prices, and process your subscription.

To keep it working and secure: diagnose problems, prevent abuse, and improve features such as card recognition.

To contact you about your account, such as sign-in codes, security notices, and billing. We don't send marketing email without your consent.

We don't sell your personal information, show ads, or track you across other companies' apps and websites. We don't use third-party advertising or analytics SDKs.

Service providers who run parts of DeckBase for us, under contract and only for that purpose: Supabase (database, sign-in, and file storage), Vercel (website and app hosting), and Stripe (payments). Google and Apple handle sign-in when you choose them. If you connect a Shopify store, we exchange the information described above with Shopify to run that connection.

Your team. If you belong to a business on DeckBase, its owner and the members they authorize can see the business data you log there.

When the law requires it, or to protect the rights and safety of our users or DeckBase.

The apps ask for camera access only to scan cards, and you can turn it off at any time in your device settings. The apps store some data on your device, such as your sign-in session and cached card data, so they open quickly and work offline. On the web we use cookies only to keep you signed in.

We keep your data while your account is open. You can delete your account at any time from Account → Delete account, in the app or on the web. This permanently deletes your account and personal data and cancels any subscription. If you own a business on DeckBase, deleting your account deletes the business and its data. If you are a member of someone else's business, the records you logged there stay with that business.

Scan images that aren't linked to an account, and records we must keep by law (such as payment records), are not removed by account deletion.

Data is encrypted in transit, Shopify store access tokens are encrypted at rest, and access to your data is restricted to your account and the team members you share it with. No system is perfectly secure, but we work to protect your information and will notify you of a breach where the law requires.

DeckBase is not directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to how we use it. You can edit or delete most of it yourself in the app. For anything else, email support@deckbase.io and we'll respond within 30 days.

If we change this policy we'll update the date above, and tell you in the app or by email before significant changes take effect.