Privacy Policy

This Privacy Policy explains how Into the Dream Studios LLC ("we", "us") collects, uses, shares, and protects your information when you use our websites and the ID Grader application (the "Services").

1. Information We Collect

Account information

When you sign up we collect your email address (and optional display name) through our authentication provider, Clerk. We use this to create your account, deliver transactional email, and provide customer support.

Purchase information

When you buy credit packs we receive a purchase token and order metadata from Stripe (web) or Google Play Billing (Android). We do not receive or store your full card number. Stripe and Google process card details under their own privacy policies.

Uploaded photos & grading data

When you scan a card we store the photos you submit, the grades and defects our AI returns, any associated card-identification metadata, and the timestamp of the scan. Photos are stored in Cloudflare R2 and bound to your account; we do not publish them publicly, sell them, or use them for advertising.

Usage & device data

Our servers log standard request metadata (IP address, user agent, request timing) for security, rate limiting, and diagnostics. We do not use third-party advertising cookies on the app.

2. How We Use Information

• To provide the grading, identification, and valuation features;
• To process purchases and grant scan credits;
• To improve the Services, including evaluating and tuning our grading models on aggregated or de-identified data;
• To communicate with you about your account or changes to the Services;
• To detect, prevent, and respond to fraud or abuse;
• To comply with legal obligations.

3. AI Processing

Card grading is performed by sending your photos to Anthropic via the Claude API. Anthropic processes these images solely to return grading results to our backend and, per Anthropic's API terms, does not use API inputs to train its models. We do not send any personally-identifying information to the AI provider alongside the images.

4. How We Share Information

We share data only with service providers we need to operate the Services:

• Clerk — authentication
• Stripe — web payments
• Google Play Billing — Android in-app purchases
• Cloudflare — hosting, storage (R2), database (D1)
• Anthropic — AI grading
• pokemontcg.io, Scryfall, eBay — market comp lookups (card-identification text only, never your photos)
• Resend — transactional email

We do not sell your personal information. We may disclose information where required by law, to protect the rights or safety of users, or in connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain account data for as long as your account is active. Uploaded photos and grading results are retained while your account is active so you can view your scan history. You may request deletion of your account and associated scans at any time by emailing us (see below); we will delete or anonymize your data within 30 days of a verified request, except where retention is required for legal, tax, or fraud-prevention purposes.

6. Security

We use industry-standard encryption in transit (TLS), secrets management, rate limiting, and access controls. No system is perfectly secure, but we work continuously to protect your data.

7. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, please contact us and we will delete it.

8. Your Rights

Depending on where you live (including California, the EU, and the UK) you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights email us at [email protected]. We will verify your identity before acting on your request.

9. International Transfers

We operate from the United States and our service providers may process data in other jurisdictions. Where required we rely on standard contractual clauses or equivalent safeguards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice in the app or by email.

11. Contact

Into the Dream Studios LLC
[email protected]