Privacy Policy

PokeRepair ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you use centrd.app and related services (the "Service"), how we use it, and your choices.

By using the Service, you agree to the practices described here.

Depending on how you use PokeRepair, we may collect:

• Account information: email address, display name, password hash, and profile settings
• Card or order photos you upload in connection with mail-in services (and any historical scan photos if that feature was used)
• Order information: service selections, declared card values, condition, graded/slab flags, optional first name and U.S. state, tracking numbers, and order status
• Payment-related information when you purchase mail-in services (processed by our payment provider; we do not store full card numbers on our servers)
• Communications you send us (support emails, feedback, lead forms)
• Technical data: IP address, browser type, device information, guest session tokens, and usage limits tied to sessions

We use collected information to:

• Provide mail-in services, order tracking, and account features
• Process orders, calculate fees and insurance, generate shipping labels, and communicate order status
• Support optional informational tools when enabled
• Prevent abuse, enforce usage limits, and protect the security of the Service
• Respond to support requests and improve the Service
• Show anonymized social proof (for example, first name and state with card service details) when you opt into or provide that information at checkout

We do not sell your personal information. We share information only as described below:

• Service providers that help us run the Service (hosting, database, authentication, payment processing, shipping labels, and email delivery)
• Card data and pricing providers used to identify cards and estimate values (such as PokeWallet and PokeTrace)
• AI/vision providers used to help identify cards from photos (such as OpenRouter and the model providers it routes to)
• Shipping carriers to deliver labels and track packages
• Law enforcement or other parties when required by law or to protect rights, safety, and security
• A successor entity in connection with a merger, acquisition, or asset sale, subject to this Policy

When you upload photos for mail-in work (or historically for photo assessments), images are stored on our systems to support the Service.

Card images may be processed by automated computer-vision and third-party identification services when those tools are enabled. Do not upload images you are not comfortable storing and processing for these purposes.

You may request deletion of account or order-related data by contacting us; some records may be retained as required by law or for legitimate business purposes.

We use browser local storage and similar technologies for authentication sessions, guest tokens, cart/checkout drafts, and user preferences.

Supabase authentication may set cookies or local storage entries needed to keep you signed in.

You can clear browser storage at any time, but doing so may sign you out or reset guest session data.

We retain account and order data for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

We may retain anonymized or aggregated data that no longer identifies you for analytics and service improvement.

We use reasonable administrative, technical, and organizational measures to protect your information, including encrypted connections (HTTPS) and access controls on our database.

No method of transmission or storage is completely secure. You use the Service at your own risk.

You may access and update certain account information from your dashboard or by contacting us.

You may request deletion of your account or specific data by emailing [email protected]. We may retain some information where required by law or for legitimate business purposes (such as completed order records).

Depending on where you live, you may have additional rights under applicable privacy laws (such as access, correction, deletion, or portability). Contact us to exercise those rights.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact [email protected] and we will take appropriate steps to delete it.

PokeRepair is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to, stored in, and processed in the United States and other countries where our providers operate, which may have different data protection laws than your country.

The Service may link to third-party sites (for example, marketplaces or grading companies). We are not responsible for their privacy practices. Review their policies before providing information to them.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated by email or in-app notice where appropriate.

Privacy questions or requests: [email protected]