Privacy Policy
Effective date: July 18, 2026 · Last updated: September 17, 2026
CardfolioIQ™ ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit or use cardfolioiq.com and any related services (collectively, the "Services"). By using our Services, you agree to the terms of this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.
1. Information We Collect
a. Information You Provide to Us
When you register for access, create an account, or contact us, we may collect:
- Your name and email address
- A password (stored in hashed form — never in plain text)
- Sports card collection data you enter into the platform, including player names, card sets, years, grades, grading companies, cost basis, and valuations
- Payment information, processed securely through Stripe — we do not store full card numbers on our servers
- Any messages, feedback, or support inquiries you send to us
b. Information Collected Automatically
When you use our Services, we and our service providers may automatically collect:
- IP address and approximate geographic location
- Browser type, operating system, and device identifiers
- Pages visited, session duration, and interaction data
- Referring URLs
- Cookies and similar tracking technologies (see Section 5)
c. Card Image Data
If you upload card images for AI grading, those images are processed server-side solely for the purpose of generating a grade. Images are scanned for malware before processing and are not shared with third parties beyond what is strictly necessary to deliver the grading result.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your CardfolioIQ™ account
- Provide AI-powered card valuations, grading, and market intelligence features
- Process payments and manage your subscription through Stripe
- Send transactional emails, including account confirmations, access notifications, and subscription receipts
- Respond to your support requests and inquiries
- Improve, personalize, and expand our Services
- Monitor platform security, detect fraud, and enforce our Terms of Service
- Comply with applicable laws and legal obligations
- Analyze usage trends through Google Analytics to improve the platform
We do not sell your personal information to third parties.
3. How We Share Your Information
a. Hosting & Infrastructure
CardfolioIQ™ is deployed on GoDaddy's Airo platform. The underlying compute, networking, CDN, and database infrastructure is managed at the platform level — including AWS cloud services for compute and storage, and Cloudflare for edge delivery and DDoS mitigation. Your data is stored on platform-managed servers and is subject to the security practices described on our Security page. For information on GoDaddy's data practices, see GoDaddy's Privacy Policy.
b. Stripe — Payment Processing
Payment processing is handled by Stripe, Inc. When you subscribe to a paid plan, your payment information is transmitted directly to Stripe and is governed by Stripe's Privacy Policy. We receive only a tokenized reference to your payment method.
c. Google Analytics — Usage Analytics
We use Google Analytics (GA4) to understand how users interact with our platform. Google may collect usage data subject to Google's Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on. Analytics cookies are only loaded after you provide consent via our cookie banner.
d. OpenAI — AI Features
Our AI card grading, image scanning, visual card identification, and market explanation features are powered by OpenAI's API. Card images and descriptive card data submitted for these purposes may be sent to OpenAI for processing, subject to OpenAI's Privacy Policy. Card valuations, price updates, and portfolio analytics are generated algorithmically from market data and are not processed by OpenAI. We do not send personally identifiable information to OpenAI beyond what is necessary to process your specific request.
e. The Card API — Primary Sales Data
CardfolioIQ uses The Card API as its primary source of recent sports card sales transaction data. Card identifiers (player name, year, set, card number, parallel, and grade) are submitted to The Card API to retrieve comparable sold listings used in fair market value calculations. No personal information is shared with The Card API in this process. Data retrieved is used solely to generate card valuations and market intelligence within the platform.
f. eBay — Market Signal Data
Our market trends and live sales features may retrieve publicly available sold listing data from eBay's API as a supplemental market signal source. No personal information is shared with eBay in this process. Data retrieved is subject to eBay's Privacy Policy.
g. SportsCardsPro — Pricing Guide Data
We use the SportsCardsPro API to retrieve sports card pricing guide data as a supplemental reference for card valuations. No personal information is shared with SportsCardsPro. Data retrieved is used solely to provide card valuations within the platform.
h. Google Cloud Vision — OCR Processing
When you upload card images for identification or grading, we may use Google Cloud Vision API to perform optical character recognition (OCR) on printed text visible on the card or slab. Images are transmitted to Google's API solely for this purpose and are subject to Google's Privacy Policy. We do not send personally identifiable information to Google Cloud Vision beyond what is contained in the card image itself.
i. Legal Disclosures
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of CardfolioIQ™, our users, or others.
j. Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership.
4. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our Services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes.
5. Cookies
We use cookies and similar technologies to maintain your session, remember your preferences, and analyze platform usage. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features. We display a cookie consent banner on your first visit — analytics and tracking cookies are only loaded after you provide explicit consent.
Our hosting platform may also set cookies necessary for the operation and security of the hosting environment (such as load-balancer session affinity). These are strictly necessary cookies and are not subject to consent controls.
6. Your Rights
Depending on your location, you may have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — request that we correct inaccurate or incomplete information
- Deletion — request that we delete your personal information
- Portability — request your data in a portable, machine-readable format
- Opt-out — unsubscribe from marketing emails at any time via the unsubscribe link in any email we send
To exercise any of these rights, contact us at info@cardfolioiq.com. We will respond within 30 days.
7. Children's Privacy
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at info@cardfolioiq.com and we will promptly delete it.
8. Security
We implement industry-standard security measures to protect your information, including TLS encryption in transit, bcrypt password hashing, HTTP security headers (HSTS, CSP, X-Frame-Options), tiered rate limiting, and input validation on all endpoints. Platform-level protections — including network isolation, DDoS mitigation, WAF, and encrypted database backups — are managed by our hosting infrastructure.
For a full overview of our application-level security practices, see our Security page. No system is 100% secure — if you believe your account has been compromised, contact us immediately at security@cardfolioiq.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify you by email or by posting a prominent notice on our platform. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.
10. No Affiliation with Third-Party Services
CardfolioIQ™ is an independent platform and is not affiliated with, endorsed by, or sponsored by any of the following third-party companies or services:
- Professional Grading Services: PSA (Professional Sports Authenticator), BGS (Beckett Grading Services), CGC (Certified Guaranty Company), SGC (Sportscard Guaranty), or any other card grading company.
- Marketplace Platforms: eBay, or any auction house, marketplace, or resale platform.
- Data Providers: The Card API, SportsCardsPro, or any other third-party market data or pricing guide service.
- AI Providers: OpenAI. Our use of OpenAI's API is governed by a commercial API agreement; we are a customer of their services, not an affiliate or partner.
References to these companies within CardfolioIQ are solely for informational and identification purposes (e.g., displaying grading company names associated with cards in your portfolio, or sourcing publicly available market pricing data). All trademarks and brand names belong to their respective owners.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: