CardFlow Privacy Policy

CardFlow (CardFlow LLC — formation pending) ("CardFlow," "we," "us") helps sports-card and trading-card sellers identify cards and create listings on eBay. This policy explains what we collect, how we use it, and the choices you have. By using CardFlow you agree to this policy.

Information we collect

• Account information — your name and email, provided through our authentication provider when you sign up.
• eBay connection — when you connect your eBay account, we receive and store (encrypted) OAuth tokens that let CardFlow create and manage listings on your behalf, plus your eBay username/ID and your eBay business policies (payment, shipping, return).
• Card and listing data — images you upload and the card details, inventory, prices, and listings you create in CardFlow.
• Usage and billing — basic activity needed to operate the service and process payments.

How we use your information

• To identify cards from your images and generate listing details.
• To create, edit, and publish listings to your eBay account at your direction.
• To operate, secure, support, and bill for the service.

eBay integration

When you connect eBay, you authorize CardFlow to act on your behalf to create and manage listings and to read your business policies. Your eBay tokens are encrypted at rest and used only to perform actions you initiate. You can disconnect your eBay account from CardFlow at any time, which revokes our stored tokens.

How we share information (subprocessors)

We do not sell your personal information. We share data only with the service providers ("subprocessors") needed to run CardFlow, each only to the extent required to deliver the service:

• Clerk — account sign-up and authentication.
• Anthropic — AI card identification from the images you upload.
• Cloudflare R2 — storage of your uploaded card images.
• Railway — application and database hosting.
• eBay — creating and managing listings on your connected account.
• Stripe — subscription and payment processing (we never store your full card number; Stripe does).
• Resend — operational email.

Data retention and deletion

You are in control of your data:

• Disconnect eBay at any time from Settings — this immediately deletes the eBay access and refresh tokens we hold for you.
• Delete your account from Settings, or by deleting your organization in your account settings. This permanently erases your CardFlow data — card images, listings, inventory, and account records — across our database and image storage. This cannot be undone.
• eBay account closure — we honor eBay's Marketplace Account Deletion/Closure notifications: when eBay notifies us that a user closed their account, we automatically delete the eBay account data we hold for that user.

You may also email us at the address below to request deletion, and we will erase your data.

Security

We encrypt sensitive credentials (such as eBay tokens) at rest and isolate each customer's data so one account cannot access another's.

Changes

We may update this policy; material changes will be reflected by the "last updated" date above.

Contact

Questions or deletion requests: admin@mycardflow.com.

---