← cardlisting

Privacy Policy

Last updated: 9 June 2026

This policy explains what cardlisting (cardlist.ing) collects, how we use it, and who we share it with.

1. What we collect

  • Account info — your email and basic profile from Google sign-in, and the public handle and bio you choose.
  • Listings & images — the card details and photos you upload, which are shown on your public storefront.
  • Usage analytics — storefront link clicks, listing views, and message taps, used to power your seller dashboard.
  • Payment data — handled by our payment provider; we receive subscription status, not full card details.

2. How we use it

To operate your storefront, provide seller analytics, process subscriptions, secure the service, and communicate with you about your account.

3. Who we share it with

We use these providers (sub-processors) to run the service:

  • Supabase — database, authentication, and image storage.
  • Vercel — application hosting.
  • Dodo Payments — subscription payments (Merchant of Record).
  • Google — sign-in (OAuth).
  • Anthropic — when you use the AI card scanner, the image you submit is sent to Anthropic to extract card details.
  • WhatsApp / Instagram— when a buyer taps an inquiry button, they are handed off to your chosen channel; we don't control those platforms' data practices.

We do not sell your personal data.

4. Cookies & tracking

We use cookies necessary to keep you signed in. Storefront analytics are collected without third-party advertising or cross-site tracking cookies.

5. Data retention & security

We keep your data while your account is active and delete or anonymise it on request or after account closure, except where we must retain records (e.g. for tax/payment compliance). Access is protected by row-level security so sellers can only reach their own data.

6. Your rights

You can request access to, correction of, or deletion of your personal data by contacting us. Depending on your location you may have additional rights under laws such as GDPR.

7. International transfers & children

Our providers may process data outside your country. The service is not directed to anyone under 18.

8. Changes & contact

We may update this policy; the “last updated” date reflects the latest version. Questions or requests: support@cardlist.ing.