Privacy Policy

This policy explains what personal information CardHawk AI collects, why, and how you can access or delete it. CardHawk is run by CardHawkAI. We handle personal information in line with the Australian Privacy Principles.

What we collect

• Account: your email address and password. Passwords are stored by our sign-in provider in a protected (hashed) form; we never see them.
• What you set up: your settings (for example fees, costs and where you buy from, including country and optional postcode for shipping quotes), saved searches, Profit Hunter rules, watchlist, portfolio and your own card values.
• Alerts: the listings found for you, and, if you turn on phone notifications, a technical address for each device your browser gives us.
• Waitlist: if you join it, your email, where you're based, your goals and what you collect.
• Usage records: when you were last active and how many requests your account made to eBay and the price guides (to keep the service within its limits).

We don't use advertising or analytics trackers. The only cookies are the ones that keep you signed in.

How we use it

• to run CardHawk for you: searches, values, profit estimates, alerts and your account;
• to send emails you'd expect: invites, password resets and deal alerts you set up;
• to keep CardHawk secure, fix problems and plan its capacity.

We don't sell your personal information or share it for advertising.

Who helps us run CardHawk

We use service providers to host and run CardHawk. They may store or process information outside Australia, including in the United States:

• Supabase — database and sign-in;
• Vercel — hosting;
• Resend — sending emails;
• your browser's notification service (for example Apple, Google or Mozilla) — delivering phone notifications.

When CardHawk looks things up for you, it sends search words and card details to eBay, SportsCardsPro / PriceCharting and, for certificate checks, PSA — but not your name or email address.

How long we keep it, and deleting it

• We keep your information while your account is open.
• You can delete your account in Settings → Account. That permanently removes your account and everything in it.
• To be removed from the waitlist, or for anything else, email us (below).

Access, correction and complaints

You can ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing hello@cardhawkai.com. If you have a privacy complaint, contact us first and we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Security

Your data is kept separate from other accounts, both in CardHawk and by the database itself, and sent over encrypted connections. No system is perfectly secure; if a data breach is likely to cause you serious harm, we'll tell you and, where required, the OAIC.

Changes

If we change this policy in a significant way, we'll let you know in the app or by email.