Privacy Policy

Ripfolio ("we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform at ripfolio.app and related services (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2.1 Information You Provide

Account Information:

• Email address
• Display name and username
• Password (stored securely via our authentication provider, never in plain text)
• Profile avatar image

Collection Data:

• Cards, graded slabs, and sealed products you add to your collection
• Purchase prices, sale prices, and transaction history you enter
• Set completion tracking data
• Card conditions and grading information

Content:

• Pack opening video recordings
• Card scan images (single and binder page)
• Posts, comments, and messages in the feed, DMs, and groups
• Trade proposals and purchase offers
• Bug reports and support tickets

Subscription Information:

• Subscription plan (Free or Pro)
• Payment information (processed securely by our third-party payment processor — we do not store full credit card numbers)
• Billing history

Preferences:

• Notification settings
• Privacy settings (collection visibility, DM access, online status)
• Recording preferences (video quality, auto-post settings)
• Default game selection

2.2 Information Collected Automatically

Device and Usage Information:

• Device type, operating system, and browser type
• Screen resolution
• IP address
• Pages visited and features used within the Service
• Date and time of access
• Referring URLs

Camera and Media:

• When you use the recording or scanning features, the Service accesses your device camera in real-time. Video recordings and scanned images are uploaded to our servers for processing. We do not access your camera when the recording or scanning feature is not actively in use.

Location:

• We do not collect precise location data. We may infer your general region from your IP address for analytics purposes.

2.3 Information from Third Parties

Authentication Providers:

• If you sign up using a third-party authentication service (e.g., Google), we may receive your name, email address, and profile picture from that service.

Card Pricing Data:

• We obtain card market pricing data from third-party data providers. This data is associated with cards in your collection but is not personal information.

We use your information for the following purposes:

Service Operations:

• Create and manage your account
• Process and fulfill subscriptions
• Provide card identification via AI (video and image processing)
• Display market pricing and analytics
• Enable social features (feed, messaging, groups, trades)
• Process support tickets and bug reports

Improvement:

• Analyze usage patterns to improve the Service
• Train and improve our AI card identification models using aggregate card image data
• Identify and fix bugs and performance issues
• Develop new features based on user behavior

Communication:

• Send transactional emails (account verification, password reset, subscription confirmations)
• Send notification emails based on your preferences (price alerts, trade offers, follower activity)
• Respond to support requests

Safety and Security:

• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Verify the authenticity of pack opening recordings
• Enforce our community guidelines
• Protect the rights and safety of our users

Legal:

• Comply with applicable laws and legal obligations
• Respond to lawful requests from law enforcement or regulatory authorities

4.1 How AI Processing Works

When you record a pack opening or scan a card, the video or image is uploaded to our servers and processed by our AI pipeline. This involves:

• Extracting frames from video recordings
• Detecting card regions within images
• Reading text on cards via optical character recognition (OCR)
• Matching card visuals against our card database using machine learning models
• Returning identification suggestions to you for confirmation

4.2 AI Training Data

We may use card images captured through the Service to improve our AI models. When used for training, images are processed in aggregate without association to individual user accounts. We do not use your personal information, videos of your hands or surroundings, or any content unrelated to card identification for AI training purposes.

4.3 Data Retention for AI

Card scan images uploaded for identification are stored temporarily (up to 24 hours) and are then automatically deleted. Pack opening video recordings are stored as long as your account is active or until you delete them.

We do not sell your personal information. We may share your information in the following limited circumstances:

5.1 With Other Users

Based on your privacy settings:

• Your profile (display name, username, avatar) is visible to other users
• Your collection may be visible to everyone, followers only, or only you (per your setting)
• Your posts in the feed are visible to the Ripfolio community
• Messages, trade proposals, and purchase offers are shared with the intended recipients
• Group content is shared with group members

5.2 Service Providers

We share information with third-party service providers who assist us in operating the Service, including:

• Supabase: Database hosting, authentication, file storage
• Cloudflare: DNS, content delivery, and security
• Payment processor (when implemented): Subscription billing

These providers are contractually obligated to use your data only for the purposes of providing services to us and in accordance with this Privacy Policy.

5.3 Affiliate Partners

When you click affiliate links to third-party marketplaces (such as TCGplayer or eBay), those platforms may collect information about your visit in accordance with their own privacy policies. We share a referral identifier but do not share your personal information with affiliate partners.

5.4 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, the safety of our users, or the integrity of the Service.

5.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have regarding your information.

6.1 Storage Location

Your data is stored on servers in the United States provided by our infrastructure partners. Video and image processing for AI card identification is performed on our self-hosted GPU server located in the United States.

6.2 Security Measures

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Row-level security policies on our database
• Access controls and authentication on all systems
• Regular security reviews

6.3 No Guarantee

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you delete your account
• Collection data: Retained until you delete individual items or your account
• Videos and posts: Retained until you delete them or your account
• Messages: Retained until the conversation is deleted by both parties or accounts are deleted
• Card scan images: Deleted automatically within 24 hours of processing
• Support tickets: Retained for up to 2 years after resolution for quality improvement
• Usage analytics: Retained in anonymized/aggregated form indefinitely

After account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).

8.1 Access and Portability

You can access your account data and collection information through the Service. Pro subscribers can export their collection data as a CSV file.

8.2 Correction

You can update your account information (display name, username, avatar) through your account settings at any time.

8.3 Deletion

You can delete individual content (posts, videos, cards, messages) through the Service. You can delete your entire account through Settings, which will initiate deletion of your personal data.

8.4 Notification Preferences

You can control which email notifications you receive through your notification settings. You may opt out of non-essential communications at any time.

8.5 Collection Privacy

You can control who can view your collection by setting it to Public, Followers Only, or Private in your settings.

8.6 DM Privacy

You can control who can send you direct messages: Everyone, People You Follow, or Nobody.

8.7 Data Requests

To request a copy of your data or request deletion of your data, contact us at support@ripfolio.app. We will respond to your request within 30 days.

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@ripfolio.app and we will delete such information.

Users between 13 and 18 years of age must have parental or guardian consent to use the Service.

10.1 Essential Cookies

We use essential cookies and local storage to maintain your login session, remember your preferences, and ensure the Service functions properly. These cannot be disabled without affecting the functionality of the Service.

10.2 Analytics

We may use analytics tools to understand how users interact with the Service. This data is collected in aggregate and is not used to identify individual users.

10.3 No Third-Party Advertising

We do not use third-party advertising cookies or tracking pixels. We do not serve ads from third-party ad networks. The Service is ad-free for Pro subscribers and displays only our own affiliate links for free tier users.

The Service contains links to third-party websites and services, including card marketplaces (TCGplayer, eBay), and card databases. These third-party services have their own privacy policies, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you visit.

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

If you are located in the European Economic Area (EEA), United Kingdom, or other region with data protection laws, you may have additional rights. Please contact us at support@ripfolio.app to exercise your rights under applicable data protection laws, including the right to access, correct, delete, restrict processing, or port your data.

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us at support@ripfolio.app.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email to your registered email address. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@ripfolio.app Website: https://ripfolio.app

*By using Ripfolio, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.*