Privacy policy
OVERVIEW
This Privacy Policy describes how POKETOBROKE, operating as PokeToBroke and PokeToGrade (“we”, “us”, or “our”), collects, uses, discloses, stores, and protects personal information when you access or use PokeToBroke, PokeToGrade, and any related websites, products, services, subscriptions, tools, reports, digital downloads, ecommerce features, or trading card analysis features (collectively, the “Services”).
PokeToBroke provides ecommerce, content, and related shopping services. PokeToGrade provides trading card analysis, image processing, report generation, submission tracking, centering tools, and related subscription-based services.
Our Services may be powered, hosted, processed, or supported by third-party providers, including Shopify, payment processors, authentication providers, cloud storage providers, analytics providers, email providers, customer support providers, and other vendors that help us operate the Services.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, when we disclose it, how long we keep it, and what rights and choices you may have.
By accessing or using the Services, creating an account, making a purchase, subscribing, uploading content, communicating with us, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree with this Privacy Policy, you should not access or use the Services.
SECTION 1 - PERSONAL INFORMATION WE COLLECT
When we use the term “personal information”, we mean information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual. Personal information does not include information that is anonymous, aggregated, or de-identified in a way that cannot reasonably identify you.
Depending on how you interact with the Services, we may collect or process the following categories of personal information:
Contact information: Your name, email address, phone number, billing address, shipping address, and other contact details you provide.
Account information: Your username, email address, account ID, login credentials, authentication information, account preferences, settings, subscription status, and account activity.
Order and transaction information: Products viewed, products purchased, subscriptions purchased, cart activity, wishlist activity, order history, returns, exchanges, cancellations, discounts, promotions used, transaction history, and related details.
Payment and billing information: Payment method details, billing information, subscription tier, billing cycle, payment status, transaction confirmations, and payment-related metadata. We do not intentionally store full credit card numbers. Payment processing is handled by third-party payment processors.
Uploaded content and files: Trading card images, scans, photos, front and back card images, filenames, file metadata, uploaded files, notes, reports, and related information you submit to PokeToGrade for analysis, processing, storage, or report generation.
Trading card and report information: Card names, set names, grading company selections, submission status, batch information, certification numbers, expected grades, actual grades, centering ratios, measurements, adjustments, condition notes, report data, saved settings, and analysis outputs.
Device and technical information: IP address, device type, browser type, operating system, referring URLs, unique identifiers, session data, log data, error logs, crash reports, diagnostics, approximate location derived from IP address, and other technical information.
Usage information: Information about how you access, navigate, and interact with the Services, including pages viewed, buttons clicked, features used, scans uploaded, reports generated, subscription features accessed, timestamps, and user preferences.
Communications: Messages, emails, support requests, feedback, reviews, survey responses, social media interactions, and other communications you send to us.
Marketing and advertising information: Your communication preferences, email engagement, promotional interactions, ad interactions, referral source, campaign source, and related marketing analytics.
Inferences: We may infer preferences, interests, or usage patterns based on your interactions with the Services, such as product interests, feature usage, or subscription preferences.
SECTION 2 - SOURCES OF PERSONAL INFORMATION
We may collect personal information from the following sources:
Directly from you: When you create an account, make a purchase, subscribe, upload card images, save reports, complete forms, contact us, provide feedback, or otherwise provide information to us.
Automatically through the Services: When you visit or use the Services, we may collect technical, device, usage, cookie, and analytics information automatically.
From service providers: We may receive information from vendors that help us operate the Services, including ecommerce platforms, payment processors, authentication providers, hosting providers, cloud storage providers, analytics providers, advertising providers, email providers, fulfillment providers, and customer support tools.
From third-party platforms: We may receive information from Shopify, payment processors, social media platforms, advertising platforms, login providers, shipping providers, analytics tools, or other integrations you interact with.
From public or user-submitted sources: We may collect information you make public or submit through reviews, comments, social media, messages, or community interactions.
SECTION 3 - HOW WE USE PERSONAL INFORMATION
We may use personal information for the following purposes:
To provide and operate the Services: We use personal information to create accounts, authenticate users, process transactions, manage subscriptions, fulfill orders, provide customer support, process uploaded images, generate reports, save card data, display account information, and provide the features you request.
To process trading card images and reports: We use uploaded images, scans, files, and related metadata to perform image processing, centering analysis, border detection, report generation, preview rendering, thumbnail creation, saved report access, and related PokeToGrade functionality.
To manage ecommerce transactions: We use personal information to process orders, payments, shipping, returns, exchanges, discounts, taxes, fraud checks, customer communications, and related store operations.
To manage subscriptions: We use personal information to create, renew, cancel, upgrade, downgrade, bill, suspend, or otherwise manage your subscription and related account access.
To personalize and improve the Services: We may use personal information to understand how users interact with the Services, improve user experience, debug issues, test features, measure performance, improve analysis tools, enhance workflows, and develop new products or features.
To improve analysis systems: We may use uploaded images, card data, report data, measurements, settings, and related usage data to evaluate, troubleshoot, improve, and refine our analysis tools and Services. Where practical, we may use aggregated or de-identified data for these purposes.
To communicate with you: We use personal information to send order confirmations, subscription notices, account updates, service notices, security alerts, support responses, policy updates, and other administrative messages.
For marketing and advertising: We may use personal information to send promotional messages, product updates, launch announcements, discounts, newsletters, or advertising, where permitted by law and subject to your communication preferences.
For security and fraud prevention: We use personal information to authenticate accounts, detect fraud, prevent abuse, protect our systems, monitor suspicious activity, enforce our Terms, prevent unauthorized access, and protect users and the Services.
For legal and compliance purposes: We use personal information to comply with applicable laws, respond to lawful requests, maintain records, resolve disputes, enforce agreements, investigate violations, and protect our rights, users, business, and property.
SECTION 4 - USER UPLOADS, CARD IMAGES, AND SCANS
PokeToGrade allows users to upload trading card images, scans, photos, and related files for analysis, processing, and report generation.
Uploaded content may include file metadata, filenames, timestamps, device-generated metadata, image dimensions, processing history, analysis outputs, saved settings, and related report information.
We use uploaded content to provide the requested analysis and related Services, including image processing, border detection, centering calculation, report generation, preview rendering, account storage, saved report access, troubleshooting, performance improvement, and product development.
You should not upload images or files that contain sensitive personal information, private documents, payment information, government identification, confidential information, or information belonging to another person unless you have the legal right to do so.
You are responsible for ensuring that any images, scans, files, or content you upload comply with our Terms of Service and applicable law.
SECTION 5 - COOKIES AND TRACKING TECHNOLOGIES
We and our service providers may use cookies, pixels, local storage, SDKs, tags, log files, and similar technologies to operate the Services, remember preferences, keep you signed in, analyze usage, measure performance, provide security, support advertising, and improve the Services.
Cookies may be required for certain features, including account login, checkout, cart functionality, subscription management, analytics, fraud prevention, and security.
You may be able to adjust cookie settings through your browser or device. If you disable cookies, some parts of the Services may not function properly.
Where required by law, we may provide additional cookie controls, consent banners, opt-out mechanisms, or privacy settings.
SECTION 6 - HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information in the following circumstances:
With service providers: We may disclose personal information to vendors and service providers that perform services on our behalf, including ecommerce hosting, payment processing, subscription billing, cloud storage, authentication, image processing, analytics, advertising, email delivery, customer support, fulfillment, shipping, fraud prevention, security, and IT services.
With Shopify: We may disclose personal information to Shopify in connection with ecommerce, checkout, payment, store functionality, analytics, customer experience, fraud prevention, and related services.
With payment processors: We disclose payment and billing information as necessary to process payments, manage subscriptions, prevent fraud, issue refunds, and handle billing disputes.
With cloud and infrastructure providers: We may disclose uploaded images, report data, account data, and technical information to cloud hosting, database, authentication, storage, and infrastructure providers that help operate PokeToGrade and related Services.
With marketing and advertising partners: Where permitted by law, we may disclose limited information to advertising, analytics, and marketing providers to measure campaigns, deliver ads, understand engagement, and promote our Services.
At your direction or with your consent: We may disclose information when you direct us to do so, request an integration, use a third-party login, interact with social media widgets, or otherwise consent to disclosure.
Within our business: We may disclose information to our owners, employees, contractors, affiliates, advisors, and business partners who need access to operate, support, protect, or improve the Services.
For legal, safety, and enforcement reasons: We may disclose information to comply with applicable law, respond to lawful requests, enforce our Terms, protect rights and property, prevent fraud or abuse, investigate security incidents, or protect the safety of users or others.
In connection with business transactions: We may disclose or transfer personal information in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction.
SECTION 7 - RELATIONSHIP WITH SHOPIFY
Certain ecommerce and retail aspects of the Services may be hosted, powered, processed, or supported by Shopify.
Shopify may collect and process personal information about your access to and use of the Services, including information submitted during browsing, checkout, payment, order processing, fraud prevention, analytics, and customer experience.
Information you submit through Shopify-powered portions of the Services may be transmitted to and processed by Shopify and its service providers, which may be located in jurisdictions outside of where you reside.
Shopify may use certain information in accordance with its own privacy policies and controls. Depending on where you live, you may have privacy rights that can be exercised directly with Shopify through Shopify’s privacy tools or portal.
SECTION 8 - THIRD-PARTY WEBSITES AND LINKS
The Services may contain links to websites, platforms, stores, marketplaces, grading companies, social media pages, payment processors, shipping providers, or other services operated by third parties.
We do not control and are not responsible for the privacy practices, security practices, content, policies, or conduct of third-party websites or services.
If you access third-party websites or services, you should review their privacy policies and terms before providing personal information.
SECTION 9 - MARKETING COMMUNICATIONS
Where permitted by law, we may send you marketing communications, including emails about products, discounts, launches, beta access, updates, promotions, newsletters, or related content.
You may opt out of promotional emails at any time by using the unsubscribe link in our emails or by contacting us.
Even if you opt out of promotional communications, we may still send you non-promotional messages, including order confirmations, account notices, subscription notices, security alerts, service updates, payment notices, policy updates, and customer support messages.
If you are located in Canada, we will send commercial electronic messages in accordance with applicable Canadian anti-spam laws, including requirements related to consent, sender identification, and unsubscribe mechanisms.
SECTION 10 - CHILDREN’S PRIVACY
The Services are not intended for children under the age of majority in their jurisdiction without the involvement and consent of a parent or legal guardian.
We do not knowingly collect personal information from children where parental or guardian consent is required by law.
If you believe a child has provided us with personal information without appropriate consent, please contact us and we will take reasonable steps to review and delete the information where required by law.
SECTION 11 - SECURITY
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction.
However, no method of transmission over the internet, method of electronic storage, or security measure is completely secure. We cannot guarantee absolute or perfect security.
You are responsible for maintaining the security of your account credentials and for using secure networks and devices when accessing the Services.
If we become aware of a privacy breach involving personal information, we will take steps required by applicable law, which may include notifying affected individuals, regulators, or other parties where legally required.
SECTION 12 - RETENTION OF PERSONAL INFORMATION
We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, process orders, manage subscriptions, generate and store reports, provide customer support, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain business records, and improve the Services.
Retention periods may vary depending on the type of information, the purpose for which it was collected, legal requirements, operational needs, account status, subscription status, and whether the information is needed for security, fraud prevention, dispute resolution, or compliance.
Uploaded images, scans, reports, and related PokeToGrade data may be retained while your account is active or as otherwise needed to provide the Services, maintain saved reports, comply with legal obligations, resolve disputes, enforce our Terms, improve the Services, or meet operational requirements.
We may delete, anonymize, aggregate, or de-identify personal information when it is no longer reasonably required for the purposes described in this Privacy Policy, unless we are required or permitted to retain it by law.
SECTION 13 - INTERNATIONAL TRANSFERS
We may store, process, or transfer personal information in countries other than the country, province, or state where you live, including Canada, the United States, and other jurisdictions where our service providers operate.
When personal information is processed outside your jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, regulators, or government authorities in accordance with those laws.
Where required by applicable law, we use appropriate safeguards for cross-border transfers of personal information.
SECTION 14 - DE-IDENTIFIED AND AGGREGATED INFORMATION
We may use information that has been aggregated, anonymized, or de-identified so that it cannot reasonably identify you for business, analytics, research, product development, benchmarking, reporting, security, and service improvement purposes.
We may use and disclose aggregated, anonymized, or de-identified information without restriction, except where prohibited by applicable law.
SECTION 15 - YOUR RIGHTS AND CHOICES
Depending on where you live, you may have certain rights regarding your personal information. These rights are not absolute and may be subject to exceptions under applicable law.
Access: You may have the right to request access to personal information we hold about you.
Correction: You may have the right to request that we correct inaccurate or incomplete personal information.
Deletion: You may have the right to request deletion of personal information, subject to legal, operational, security, fraud prevention, dispute resolution, and compliance exceptions.
Portability: You may have the right to request a copy of certain personal information in a portable format where required by law.
Withdrawal of consent: Where we rely on consent to process personal information, you may withdraw your consent, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide certain Services.
Marketing opt-out: You may opt out of promotional emails by using the unsubscribe link in our emails or contacting us.
Cookie controls: You may control certain cookies through your browser, device, or any privacy settings we make available.
To exercise privacy rights, contact us using the contact details below. We may need to verify your identity before processing a request.
We will not discriminate against you for exercising privacy rights available to you under applicable law.
SECTION 16 - CANADIAN PRIVACY RIGHTS
If you are located in Canada, we handle personal information in accordance with applicable Canadian privacy laws, which may include the Personal Information Protection and Electronic Documents Act and substantially similar provincial privacy laws where applicable.
Subject to applicable exceptions, you may request access to personal information we hold about you, request correction of inaccurate information, ask questions about our privacy practices, or withdraw consent to certain uses or disclosures of personal information.
We may refuse or limit access where permitted or required by law, including where disclosure would reveal personal information about another person, confidential commercial information, information protected by privilege, security-sensitive information, or information related to an investigation or dispute.
SECTION 17 - UNITED STATES AND OTHER REGIONAL RIGHTS
Depending on where you live, you may have additional privacy rights under state, provincial, national, or regional privacy laws.
These rights may include rights to know, access, correct, delete, obtain a copy of, or opt out of certain processing or sharing of personal information.
If we are legally required to provide additional rights, notices, or opt-out options based on your location, we will do so in accordance with applicable law.
SECTION 18 - DO NOT TRACK AND GLOBAL PRIVACY CONTROLS
Some browsers and devices offer “Do Not Track” or similar signals. Because there is no uniform industry standard for responding to all such signals, we may not respond to every browser-based “Do Not Track” signal.
Where legally required, we will recognize and respond to applicable opt-out preference signals or global privacy controls in accordance with applicable law.
SECTION 19 - COMPLAINTS
If you have a concern or complaint about how we handle personal information, please contact us using the contact information below.
We will review and respond to privacy complaints as required by applicable law.
Depending on where you live, you may also have the right to contact your local privacy regulator or data protection authority.
SECTION 20 - CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our Services, technology, legal obligations, business practices, or privacy practices.
When we update this Privacy Policy, we will post the revised version on this page and update the “Last updated” date if one is displayed.
Your continued use of the Services after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.
SECTION 21 - CONTACT
If you have any questions about this Privacy Policy, our privacy practices, or your privacy rights, please contact us at hello@poketobroke.com.