Privacy Policy

Effective Date: April 30, 2026

Last Updated: April 30, 2026

1. Introduction

CardPriceOracle ("we," "our," or "us") operates the cardpriceoracle.com website and publishes Canva apps (CardPriceOracle, CardPrice Signs, Dynamic QR Studio, Client Handoff Kit). This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

Account Information

When you create an account, we collect your name and email address through our OAuth authentication provider. We do not collect or store passwords directly.

Usage Data

We collect anonymous usage data including search queries, page views, and feature interactions to improve the Service. This data is not linked to individual user identities unless you are logged in.

Collection Data

If you use our vault or collection features, we store the card data you choose to save, including card names, conditions, quantities, and associated pricing snapshots.

Canva App Data

When using our Canva apps, we may receive your Canva user identifier for authentication purposes. We do not access your Canva designs, files, or personal Canva account data beyond what is necessary to provide the app functionality.

Payment Information

Payment processing is handled entirely by Stripe. We store only your Stripe customer ID and subscription status. We never see or store your full credit card number, CVV, or billing address.

3. How We Use Your Information

• To provide and maintain the Service.
• To authenticate your identity and manage your account.
• To process payments and manage subscriptions.
• To improve the Service based on aggregate usage patterns.
• To communicate important updates about the Service or your account.
• To respond to support requests.

4. Information Sharing

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers: Stripe (payments), Canva (app platform), and cloud hosting providers necessary to operate the Service.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS), secure authentication tokens, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies are anonymous and do not track individual users across other websites.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Request data portability.

To exercise these rights, contact us at [email protected].

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at [email protected].