Privacy Policy

Last updated: July 1, 2025

1. Introduction

This Privacy Policy explains how Savage Sports Cards ("we," "us," or "our") collects, uses, stores, and protects your information when you use Savage Sports Cards Manager ("the Service") at savagesportscardsmanager.com and app.savagesportscardsmanager.com.

We respect your privacy and are committed to being transparent about our data practices. We collect only what's necessary to provide the Service, and we never sell your data.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address — used for login, billing communications, and service notifications.
• Name — used to personalize your account.
• Password — stored as a cryptographic hash. We never store or have access to your plaintext password.

Business Data

The core of the Service is storing and managing your business data. This includes any information you enter, such as:

• Card inventory (descriptions, values, images, conditions, etc.)
• Customer records (names, contact info, purchase history)
• Orders (incoming and outgoing)
• Grading submissions
• Event and show information
• Vendor records
• Any other data you choose to enter into the platform

This data is entered entirely by you. We do not supplement, enrich, or share this data with anyone.

Payment Information

Payments are processed by Stripe. When you subscribe:

• Your payment details (card number, expiration, CVC) are sent directly to Stripe and never touch our servers.
• We receive only a token reference, the last four digits of your card, and your billing status from Stripe.
• We do not store, access, or process your full credit card information.

Usage Data

We automatically collect limited technical data to maintain and improve the Service:

• Pages and features you access within the application.
• Browser type and version.
• Device type and operating system.
• IP address (used for security and abuse prevention).
• Timestamps of access.

Cookies

We use cookies strictly for authentication and session management. Specifically:

• Session cookies — to keep you logged in while you use the Service.
• We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
• We do not participate in ad networks or cross-site tracking.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain the Service — storing your data, running the application, and delivering features.
• Process payments — managing your subscription through Stripe.
• Send service-related communications — billing receipts, security alerts, important feature updates, and account notifications. These are not marketing emails.
• Improve the product — understanding which features are used helps us prioritize development. This is done in aggregate and never tied to individual users.
• Ensure security — detecting and preventing unauthorized access, abuse, or fraud.

We do NOT sell, rent, or trade your personal information or business data to third parties. Ever.

We do NOT use your data for advertising purposes.

4. Data Storage and Security

We take the security of your data seriously. Here's how we protect it:

• Infrastructure: Your data is stored on Supabase (PostgreSQL database) hosted on Amazon Web Services (AWS) infrastructure in the United States.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Access control: Access to production databases is restricted to authorized personnel only, using role-based access controls and secure credentials.
• Backups: Your data is backed up regularly to protect against data loss.
• Password security: Passwords are hashed using industry-standard cryptographic algorithms before storage.

While we implement reasonable security measures, no system is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

5. Third-Party Services

We use a limited number of third-party services to operate the platform. These services have their own privacy policies:

• Stripe (payment processing) — Stripe Privacy Policy
• Supabase (database hosting) — Supabase Privacy Policy
• Vercel (application hosting) — Vercel Privacy Policy

These services only receive the minimum data necessary to perform their function. We do not share your business data (inventory, customers, orders, etc.) with any third party.

6. Data Retention

We retain your data according to the following schedule:

• Active accounts: Your data is retained for as long as your account remains active and your subscription is current.
• Canceled accounts: After cancellation, your data is retained for 30 days. This gives you time to resubscribe if you change your mind.
• After 30 days: Your data is permanently deleted from our systems, including backups. This action is irreversible.
• Immediate deletion: If you'd like your data deleted sooner, contact us at support@savagesportscardsmanager.com and we will process your request within 7 business days.

7. Your Rights

You have the following rights regarding your data:

• Access your data: All of your data is visible and accessible within the application at any time.
• Export your data: You can export your data in CSV format using the export features available in the reports section of the app.
• Delete your data: You can request complete deletion of your account and all associated data by contacting support@savagesportscardsmanager.com.
• Update your information: You can update your name, email, and password from the settings page within the application.
• Withdraw consent: You can stop using the Service and cancel your account at any time.

8. Children's Privacy

Savage Sports Cards Manager is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected data from someone under 18, we will take immediate steps to delete that information and terminate the associated account. If you believe a minor has created an account, please contact us at support@savagesportscardsmanager.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes:

• We will update the "Last updated" date at the top of this page.
• For significant changes, we will notify you via email.
• We encourage you to review this policy periodically.

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your information is handled, reach out to us:

Email: support@savagesportscardsmanager.com

Website: savagesportscardsmanager.com

We aim to respond to all privacy-related inquiries within 7 business days.