Privacy Policy
Last updated: 2026-06-11
This Privacy Policy describes how CardPilot("we," "us," or "our") collects, uses, and shares information when you use cardpilot.io and related services (the "Service"). By using the Service, you agree to this policy.
Information we collect
- Account information — name, email address, and authentication details when you register or sign in (including via Google OAuth, if you choose that option).
- Card and listing data — photos you upload, AI identification results, collection settings, listing titles, prices, and export data you create in the app.
- Payment information — subscription and billing data processed by Stripe. We do not store full payment card numbers on our servers.
- eBay integration data— if you connect eBay, OAuth tokens and related seller data needed to export or sync listings, subject to eBay's own policies.
- Usage and analytics — pages visited, features used, and similar diagnostic data via analytics tools (such as PostHog) to improve the Service.
- Security data — IP address, browser type, and reCAPTCHA signals used to prevent abuse during registration and sensitive actions.
How we use information
- Provide, operate, and improve the Service (including AI card identification).
- Process subscriptions and communicate about your account.
- Generate eBay-ready exports and connected marketplace features.
- Detect fraud, spam, and abuse.
- Respond to support requests.
- Comply with legal obligations.
How we share information
We do not sell your personal information. We may share data with:
- Service providers — cloud hosting, storage (e.g. AWS), payment processing (Stripe), analytics, email delivery, and AI/identification infrastructure, only as needed to run the Service.
- Integrations you enable — such as eBay when you connect your seller account.
- Legal requirements — when required by law or to protect rights, safety, and security.
Data retention
We retain your information while your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. You may request deletion of your account and associated data by contacting us.
Cookies and similar technologies
We use cookies and similar technologies for authentication, security, and analytics. You can control cookies through your browser settings, though some features may not work correctly if cookies are disabled.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact us to make a request. We will verify your identity before responding.
Children
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
International users
If you access the Service from outside the United States, your information may be processed in the United States or other countries where our providers operate.
Changes
We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date.
Contact
Questions about this policy: support@cardpilot.io