Privacy Policy

DeckTrace is the data controller for the personal data processed through the App.

Contact: info@decktrace.com

Information You Provide

• Email address — Account creation, authentication, communication
• Password — Account authentication (stored as a hash, never in plain text)
• Country — Localized pricing and shipping cost calculations
• Portfolio data — Products, quantities, purchase prices, sold prices, grading info
• Watchlist data — Target prices, alert preferences, grading filters
• Contact messages — Responding to your support requests

Information Collected Automatically

• Value snapshots — Recording daily portfolio value for historical charts
• Subscription status — Managing access to Pro features
• Device type (iOS/Android) — App functionality and subscription management

Information from Third Parties

• Apple / Google (via RevenueCat) — Subscription purchase and renewal events
• Google / Apple Sign-In (optional) — Name, email address for account creation via OAuth

We use your personal data to:

• Provide and maintain the App's core functionality
• Calculate portfolio values using live marketplace pricing
• Send price alert notifications
• Process and manage subscriptions
• Respond to support requests
• Improve the App and fix issues

We do not use your data to sell to third parties, serve targeted advertisements, build advertising profiles, or make automated decisions that affect you.

• Contract performance — Account data, portfolio data, watchlist data, subscription data
• Legitimate interest — Value snapshots, usage analytics for App improvement
• Consent — Marketing communications (if applicable), OAuth sign-in

We share data with the following service providers, solely to operate the App:

• Supabase — All account and app data (EU — Frankfurt)
• RevenueCat — Anonymous user ID, subscription events (USA with EU data processing)
• Resend — Email address, message content (USA)
• Google (Gemini AI) — User-submitted prompts only (USA)

We do not share your portfolio data, watchlist data, or financial information with any third party.

• Account data, portfolio & watchlist data, value snapshots — until you delete your account
• Contact messages — 12 months after resolution
• Subscription records — as required by tax/legal obligations

When you delete your account, all associated data is permanently removed from our systems within 30 days.

Under the General Data Protection Regulation, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate personal data
• Erasure — Delete your personal data (available in-app)
• Restriction — Restrict processing of your personal data
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interest
• Withdraw consent — Where processing is based on consent

To exercise these rights, contact us at info@decktrace.com. We will respond within 30 days.

• All data is transmitted over HTTPS/TLS encryption
• Passwords are hashed and never stored in plain text
• Database access is secured with row-level security policies
• Authentication tokens are managed securely via Supabase Auth
• We conduct regular security reviews of our infrastructure

• DeckTrace does not participate in cross-app or cross-website tracking
• We do not use the Apple IDFA or any equivalent advertising identifier
• We do not serve advertisements of any kind within the App
• No data collected by DeckTrace is used for advertising or marketing purposes by third parties

Data Not Used to Track You: DeckTrace does not track you. No data collected by the App is used for tracking purposes.

Data Linked to You: Email Address (Contact Info), Country (User Content), Purchase History (Purchases).

Data Not Linked to You: Portfolio data, Watchlist data, Value snapshots (User Content).

Data Not Collected: Precise/coarse location, physical address, phone number, health/fitness data, payment info, photos, videos, audio, gameplay content, browsing/search history, device ID, advertising identifier, contacts, SMS/call logs, or biometric data.

If you are a California resident, you have additional rights under the CCPA:

• Right to Know — Request disclosure of collected data categories and sources
• Right to Delete — Request deletion of your personal information
• Right to Non-Discrimination — We will not discriminate against you for exercising CCPA rights
• DeckTrace does not sell your personal information
• DeckTrace does not share data for cross-context behavioral advertising

For privacy-related questions or to exercise your rights:

Email: info@decktrace.com

Subject line: Privacy Request — [Your Request]