Last updated: February 26, 2026
This Privacy Policy explains how Cardmatic ("Cardmatic", "we", "our", or "us") collects, uses, stores, and shares information when you use the Cardmatic app and related services. Cardmatic helps merchants identify, organize, price, and prepare trading card inventory for sale, including publishing inventory to connected marketplaces such as Shopify and eBay.
This policy applies to the Cardmatic web application, related integrations, and any support interactions related to your use of Cardmatic. It does not apply to third-party services that you connect to Cardmatic, which are governed by their own privacy policies and terms.
Cardmatic stores and processes the inventory information you upload or create, including card images, metadata, pricing details, listing details, and collection organization. This data is used to provide app functionality such as identification, pricing analysis, inventory tracking, and listing workflows.
You are responsible for ensuring that you have the rights and permissions necessary to upload and use any content you submit to Cardmatic, including images and listing content.
Cardmatic may connect to third-party services at your direction, including Shopify, eBay, TCGPlayer, TCGdex, and payment providers such as Stripe. We may also process card images or analysis requests using AI providers configured in the app. Data shared with third parties is limited to what is needed to perform the action you request.
Your use of those third-party services is also subject to their terms and privacy policies.
Depending on your location, we may process personal data under one or more legal bases, including: performance of a contract (to provide Cardmatic), legitimate interests (such as security and product improvement), compliance with legal obligations, and your consent where required.
We retain account and inventory data for as long as your account remains active, or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data, subject to applicable legal and operational retention requirements.
Backup copies and system logs may be retained for a limited period after deletion requests to support disaster recovery, fraud prevention, and legal compliance.
We use reasonable administrative, technical, and organizational safeguards to protect information stored in Cardmatic. No system is completely secure, and we cannot guarantee absolute security.
Security measures may include access controls, authentication protections, encryption in transit where supported, and logging/monitoring for suspicious activity. You are responsible for maintaining the confidentiality of your account credentials and restricting access to your devices.
Cardmatic may use cookies, session tokens, and local browser storage to support authentication, maintain sessions, remember preferences (such as UI state), and improve reliability and performance. You may be able to control some cookie behavior through your browser settings, but disabling cookies or local storage may affect app functionality.
Cardmatic and its service providers may process data in countries other than your own. By using Cardmatic, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your jurisdiction.
Cardmatic is intended for business and collector use and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and may provide additional notice within the app or by email when appropriate.
For privacy-related questions, requests, or concerns, contact us at info@cardmatic.io.
We will review and respond to requests in accordance with applicable law and operational requirements.