Privacy Policy

Last updated: June 10, 2026

CardScan ("we", "us", or "our") operates the CardScan web application. This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our service.

Information We Collect

We collect the following information when you use CardScan:

• Email address — used to create and manage your account
• Card scan images — photos taken during scanning are processed by our AI to identify card details. Images are not stored permanently.
• Google account data — if you connect Google Sheets, we store OAuth tokens to write card data to your spreadsheet. We only access Google Sheets you explicitly authorize.
• Payment information — handled entirely by Stripe. We do not store credit card numbers.
• Usage data — scan counts and subscription status to enforce plan limits.

How We Use Your Information

• To provide and operate the CardScan service
• To sync scanned card data to your Google Sheets
• To process subscription payments via Stripe
• To enforce free tier scan limits
• To send account-related emails (no marketing without consent)

Google API Data

CardScan uses Google Sheets API to write card data to spreadsheets you authorize. We request only the minimum permissions necessary:

• Google Sheets — read/write access to spreadsheets you connect
• Google Drive (file only) — to create your CardScan Collection spreadsheet

We do not access, read, or share any other files in your Google Drive. We do not use Google user data for advertising or sell it to third parties. Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — for payment processing
• Google — for Sheets integration (only data you authorize)
• Google Gemini AI — card images are sent for analysis and not retained

Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and data at any time by emailing us.

Security

We use industry-standard security practices to protect your data. All data is transmitted over HTTPS. OAuth tokens are stored securely and never exposed publicly.

Children's Privacy

CardScan is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of changes by updating the date at the top of this page.

Contact Us

If you have questions about this Privacy Policy, contact us at: maddengarrett7@gmail.com