Privacy Policy

Last updated: February 21, 2026

1. Introduction

CardGrading.app is operated by Productbox Labs Pty Ltd ("we", "our", "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI card grade prediction service.

2. About the Service

CardGrading.app provides AI-powered grade predictions for trading cards. Our predictions are generated by artificial intelligence, which is inherently imperfect and may make mistakes. Predictions are estimates only and do not constitute official grades from PSA, BGS, CGC, or any other professional grading company. CardGrading.app and Productbox Labs Pty Ltd are not affiliated with, endorsed by, or sponsored by any professional grading company.

3. Information We Collect

Information You Provide

  • Account Information: Email address, name, and password when you create an account
  • Payment Information: Processed securely by our third-party payment provider (Stripe). We do not store credit card numbers.
  • Card Images: Photographs of trading cards you upload for grade predictions

Information Collected Automatically

  • Usage Data: Pages visited, features used, prediction history
  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, access times, referring URLs
  • Analytics: We use PostHog for product analytics to improve the Service

4. How We Use Your Information

We use your information to:

  • Provide and maintain the AI grade prediction service
  • Process your card images for grade predictions
  • Process payments and manage your account
  • Send transactional emails (receipts, account updates)
  • Improve our AI models and service quality
  • Analyze usage patterns and optimize performance
  • Detect and prevent fraud or abuse

5. Card Image Data

Card images you upload are processed by our AI models to generate grade predictions. Images may be retained to improve our AI accuracy. Images are stored securely and are not shared publicly. You may request deletion of your uploaded images at any time by contacting us.

6. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Payment processors (Stripe), cloud hosting (Vercel, AWS), analytics (PostHog)
  • Legal Requirements: When required by law, regulation, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Data Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted data at rest, secure authentication, and regular security audits. However, no method of electronic transmission or storage is 100% secure.

8. Data Retention

We retain your account information for as long as your account is active. Prediction history is retained for your reference. You may request deletion of your account and associated data at any time. Payment records are retained as required by tax and financial regulations.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Request data portability
  • Withdraw consent at any time

To exercise these rights, contact us at privacy@productbox.com.au.

10. Cookies and Tracking

We use essential cookies for authentication and session management. We use PostHog for analytics, which may set cookies to track usage patterns. You can control cookie settings through your browser preferences.

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users aged 13-17 must have parental consent. If we learn we have collected data from a child under 13, we will delete it promptly.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

14. Contact Us

For privacy-related inquiries: