Legal

Privacy Policy

Last Updated: February 25, 2026

Effective Date: Upon public launch of dugoutvault.com

1. Introduction

Dugout Vault ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have regarding your data.

This Privacy Policy applies to our web application at dugoutvault.com and all related services. By accessing and using Dugout Vault, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address, username, encrypted password, and account creation date.

Card Collection Data

To provide our services, we collect details about cards in your collection (player name, set, year, condition), purchase information you choose to enter, and your collection statistics.

Scan Images

When you use the AI scanning feature, we receive images of trading cards you submit. Images are processed to identify the card and retrieve market data. Matched scan photos may be stored in our secure cloud storage to build our card image catalog. Images are not used to train AI models, sold, licensed, or shared with third parties for training purposes.

Usage Analytics

We automatically collect device information, app version, features used, time spent in the app, and approximate location (city/region level, derived from IP address).

Payment Data

Subscription and billing information is handled by Stripe. Dugout Vault does not store your payment card details. We receive your subscription tier and billing status from Stripe.

3. How We Use Your Information

We use the information we collect to:

  • Create and maintain your account
  • Process your subscription and provide access to paid features
  • Display your card collection and portfolio data
  • Provide the CardPulse™ Demand Score and related analytics
  • Improve our card identification and matching accuracy
  • Send important account and service notifications
  • Respond to your support requests
  • Comply with legal obligations

4. Data Sharing and Third Parties

We do not sell your personal information. We share data only with:

  • Stripe — for payment processing and subscription management
  • Google Cloud — for card image scanning (Vision API) and cloud storage
  • Vercel / Railway — for web hosting and API infrastructure
  • Legal authorities — when required by law or to protect our rights

All third-party providers are contractually bound to protect your data and use it only to provide services to us.

5. CardPulse™ Demand Score Disclaimer

The CardPulse™ Demand Score is provided for informational purposes only. It reflects current market signals and does not constitute investment advice or a recommendation to buy, sell, hold, or grade any collectible. Past demand patterns do not guarantee future results.

6. Data Retention and Deletion

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us via the Support page. We will process deletion requests within 30 days.

7. Your Rights and Choices

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Opt out of non-essential communications
  • Data portability (export your collection data)

To exercise any of these rights, contact us through our Support page.

8. Children's Privacy (COPPA)

Dugout Vault is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such data, we will delete it promptly. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise your California rights, contact us via our Support page.

10. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed passwords, JWT token rotation, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last Updated" date. Continued use of Dugout Vault after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, please use our Support page.