Privacy
Your collection stays yours.
Effective August 18, 2026. This policy describes the intentionally small data boundary.
Information Graded Card Value processes
Google provides your account subject identifier, name, and email for sign-in. Graded Card Value also processes the card details, sale evidence, notes, tags, and images that you choose to submit. It keeps you signed in with a short-lived Lovable Cloud session token held by your browser, not with a tracking cookie.
How the information is used
Account information authenticates you. Card records and images provide the inventory, valuation, import, export, and cleanup features visible in the app. When you request image scanning, the selected compatible image is sent to Google Cloud Vision for text detection. When you request valuation research, the recorded card identity is sent to Google's Gemini service, which can use Google Search to locate public completed-sale evidence. These optional provider calls are initiated only by your actions in the product.
Storage and retention
Card records are stored in the app's cloud database and images are stored in private cloud storage. Both are owner-isolated: only your signed-in account can read them. Your records and images remain until you delete them with an in-app deletion control. Google Drive is optional and is used only as a one-time import source for an older Drive inventory; the app never changes or deletes your Drive files, and disconnecting Google ends the session without touching that Drive copy.
Service providers, disclosure, and logs
Your inventory is stored only in this application's owner-isolated cloud database and private storage. Lovable provides hosting, the managed cloud database, authentication, and private storage. Google provides sign-in identity, the optional one-time Drive import, optional image analysis, optional valuation research, and search grounding. Operational hosting logs may temporarily contain request metadata needed for reliability and security, but authentication tokens and Drive payloads are not intentionally logged. The app does not sell Google user data, use it for advertising, or use it to train advertising or general-purpose AI models. Information may otherwise be disclosed only when necessary for security or to comply with applicable law.
Your choices and deletion controls
Account controls let you export inventory, preview and remove unused app-created images, permanently delete all Graded Card Value data from your cloud account, or sign out. JSON and CSV exports contain card records and image references, not copies of the image files. Any older Google Drive copy is left untouched and stays under your control in Drive.
Security
Graded Card Value uses encrypted sessions, HTTPS in production, request-forgery protection, revision-locked inventory writes, server-side validation, owner-scoped database and storage rules, and narrowly scoped Google permissions. No internet service can guarantee absolute security.
Google API Services User Data Policy
Graded Card Value's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. If this policy changes materially, the effective date above will be updated and affected users will be asked to review the change before Google user data is used for a new purpose.
