Privacy Policy

Last updated: June 28, 2026

SlabVault ("we", "us", or "our") operates the SlabVault mobile app and web application at cardscan.live. This policy explains how we collect, use, and protect your information.

Information We Collect

We collect the following information when you use SlabVault:

• Email address — used to create and manage your account
• Card scan images — photos taken or uploaded during scanning are sent to Google Gemini AI for card identification. Images are not stored on our servers permanently.
• Card scan history — identified card details (player name, year, grade, estimated value) are stored in your account to power your collection view.
• Google account data — if you connect Google Sheets, we store OAuth tokens to write card data to your spreadsheet. We only access sheets you explicitly authorize.
• Payment information — handled entirely by Stripe. We never store credit card numbers.
• Usage data — scan counts and subscription status to enforce plan limits.
• Device push token — if you enable notifications, we store your device token to send scan streak reminders and price alerts. You can disable this at any time in iOS Settings.

Mobile App Permissions

• Camera — used only to photograph cards for scanning. We do not access your camera at any other time.
• Photo Library — used only when you choose to upload a photo for scanning. We do not access your entire photo library.
• Notifications — used to send scan streak reminders and price alerts. Optional and can be disabled at any time.

How We Use Your Information

• To provide and operate the SlabVault service
• To sync scanned card data to your Google Sheets
• To process subscription payments via Stripe
• To enforce free tier scan limits
• To send account-related emails (no marketing without consent)

Google API Data

SlabVault uses Google Sheets API to write card data to spreadsheets you authorize. We request only the minimum permissions necessary:

• Google Sheets — read/write access to spreadsheets you connect
• Google Drive (file only) — to create your SlabVault Collection spreadsheet

We do not access, read, or share any other files in your Google Drive. We do not use Google user data for advertising or sell it to third parties. Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Google — for Sheets integration (only data you authorize)
• Google Gemini AI — card images are sent for analysis and not retained

Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and data at any time by emailing us.

Security

We use industry-standard security practices to protect your data. All data is transmitted over HTTPS. OAuth tokens are stored securely and never exposed publicly.

Children's Privacy

SlabVault is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the date at the top of this page.

Your Rights

• Access — you can view all your scanned card data in the app at any time
• Export — export your full collection as CSV directly from the app
• Delete — you can delete your account and all associated data by contacting us
• Opt out — disable push notifications at any time in iOS Settings → SlabVault

Contact Us

If you have questions about this Privacy Policy or want to request data deletion, reach out on Instagram: @cardscan.live or email us at maddengarrett7@gmail.com