Privacy Policy

Last updated: April 10, 2026

1. Introduction

Cardflow Grading ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PSA submission tracking platform.

2. Information We Collect

Information You Provide

  • Account Information: Name, email address, password, and shop name when you register
  • Customer Data: Customer names, emails, phone numbers, and shipping addresses you enter
  • Order Information: Order details, card information, service levels, and tracking data
  • Payment Information: Billing details processed securely through Stripe
  • Communications: Messages you send to us or through the platform

Information Collected Automatically

  • Usage Data: Pages visited, features used, and actions taken
  • Device Information: Browser type, operating system, and device identifiers
  • Log Data: IP address, access times, and referring URLs

Information from Third Parties

  • PSA: Order status and grading information via API integration
  • Shopify: Order and customer data if you connect your store
  • Authentication Providers: Basic profile info if you use Google sign-in

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process orders and send related notifications
  • Send transactional emails (order updates, password resets)
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage patterns and trends
  • Detect, prevent, and address technical issues and fraud
  • Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share information with:

  • Service Providers: Third parties that help us operate our Service (hosting, email, payments)
  • Your Customers: Order status and tracking information you choose to share
  • Business Partners: PSA and Shopify for integration functionality
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure password hashing using industry-standard algorithms
  • Regular security audits and monitoring
  • Access controls and authentication requirements
  • Secure third-party payment processing (PCI compliant)

6. Data Retention

We retain your information for as long as your account is active or as needed to provide our Service. We may retain certain information for legitimate business purposes or as required by law, including:

  • Transaction records for accounting and tax purposes
  • Communication records for legal compliance
  • Aggregated analytics data that cannot identify individuals

7. Your Rights and Choices

You have the right to:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Export: Receive your data in a portable format
  • Opt-out: Unsubscribe from marketing communications
  • Restrict: Limit how we process your information

To exercise these rights, contact us at privacy@grading.cardflowlabs.com

8. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in to your account
  • Remember your preferences
  • Analyze how our Service is used
  • Protect against fraud and abuse

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Service.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 13, we will delete it promptly.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. California Privacy Rights

California residents have additional rights under the CCPA, including the right to know what personal information we collect, request deletion, and opt-out of sales (we do not sell personal information). Contact us to exercise these rights.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: