Privacy Policy

1. Who we are

Gradeyes (“we”, “us”) operates a mobile app and website that predict third-party collector grades. This policy covers the Gradeyes iOS and Android apps and the gradeyes.com website. For privacy questions, contact support@gradeyes.com.

2. Data we collect

Account information

When you create an account, we collect your email address and, depending on how you sign in, your OAuth identifier from Apple or Google and an optional display name. We never see your Apple or Google password.

Scan content

When you scan an item, you upload photos of that item. We process those photos through our grading model and store them in private storage tied to your account. We also store the predicted grade, confidence score, sub-scores, item type, and any grader you targeted. If you later report a real grade you received from CGC, CBCS, MGS, PSA, BGS, SGC, or BAS, we store that outcome to calibrate our model.

Payment information

Consumer subscriptions and per-scan purchases are processed by Apple’s App Store or Google Play. Dealer subscriptions are processed by Stripe via our web checkout. We never see your card number. We receive subscription state (active / canceled / trial) through RevenueCat and Stripe, and a purchase receipt identifier we use to link purchases to your account.

Device and usage data

We collect app version, OS version, device class, locale, crash reports, and anonymized event analytics (which features were used, how long a scan took). We do not collect contacts, photos outside of what you submit to the app, calendar, microphone audio, or precise location.

Website forms

When you submit the waitlist, dealer, or support form on gradeyes.com, we store the email and information you provided, your user agent, a daily-rotating salted hash of your IP address (never the raw IP), and the source of the submission. We use Cloudflare Turnstile to keep bots out of those forms.

3. How we use your data

• To produce grade predictions, confidence scores, and sub-grades for the items you scan.
• To improve model accuracy by comparing predictions to real grader outcomes you report.
• To operate subscriptions and billing.
• To respond to your support requests.
• To send transactional email about your account (sign-in, receipts, subscription changes).
• With your consent, to send product email about new features or beta access. You can unsubscribe at any time from any marketing email.
• To detect abuse, fraud, and violations of our Terms.

We do not sell your personal data, and we do not use scan content for any purpose other than producing the grade prediction you requested and improving our calibration in aggregate.

4. Third-party processors

We share data with the following service providers, each only to the extent needed to operate Gradeyes:

• Supabase (database, authentication, file storage) — stores your account, scan metadata, and scan images in a private bucket.
• Anthropic (Claude API) — processes scan images to produce a grade prediction. Images are sent over TLS and are not used to train Anthropic’s models under our agreement.
• RevenueCat — receives subscription receipts from Apple / Google to manage entitlements.
• Stripe — processes dealer payments. Stripe sees card details; we do not.
• Apple, Google — handle sign-in and consumer in-app purchases.
• Vercel — hosts gradeyes.com and processes cookieless analytics about pages visited.
• Cloudflare — provides Turnstile bot protection on web forms.
• Resend — delivers transactional email and support notifications.

5. Data retention

We retain your account and scans for as long as your account exists. If you delete your account, scan images are deleted within 30 days. Predicted grades and outcome reports may be retained in aggregated, de-identified form for model calibration. Web form submissions are retained until you request deletion.

6. Your rights and choices

You can:

• Access your data: request a copy by emailing support@gradeyes.com.
• Delete your account and data: use the “Delete account” option in the app (Settings → Account), or email support@gradeyes.com. We process deletion requests within 30 days.
• Export your data: request a machine-readable export from the same address.
• Unsubscribe from marketing email via the link at the bottom of any marketing message.

If you’re in California, the EEA, the UK, or another jurisdiction that grants additional rights (access, correction, deletion, restriction, portability, objection), you can exercise those rights by contacting us at the address above. We won’t discriminate against you for doing so.

7. Children

Gradeyes is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect information from children. If you believe a child has provided us information, email support@gradeyes.com and we will delete the account.

8. International transfers

Gradeyes is operated from the United States. If you use the service from outside the United States, you understand your information is processed in the United States. Where required by law, we rely on Standard Contractual Clauses with our processors for transfers out of the EEA and UK.

9. Security

We use encryption in transit (TLS) for all network traffic, encryption at rest for stored scan images, row-level security on our database, and least-privilege access for engineers. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

10. Changes to this policy

If we make material changes, we will notify you by email or via an in-app notice before the change takes effect, and update the effective date at the top of this page.

11. Contact

Email: support@gradeyes.com
Postal address available on request.