Privacy Policy

Last updated: 9 June 2026

1. Who We Are

GrailBase is a UK-based trading card collection platform operated by a sole trader trading as GrailBase.

2. Information We Collect

We may collect:

Account information such as your email address.
Collection data you add to your vault.
Searches, scans and AI tool inputs you choose to submit.
Subscription and billing status from Stripe.
Technical data such as device, browser and usage information.

3. Image Scans

GrailBase may allow you to upload images of cards, graded slabs or sealed products to help identify items and run market searches.

These images are processed for scanning and search purposes. GrailBase does not currently store uploaded scan images permanently in our database.

4. How We Use Your Information

We use your information to:

Provide and maintain your GrailBase account.
Save and display your collection data.
Run price checks, scans and AI-powered features.
Manage subscriptions and access levels.
Improve reliability, performance and product features.
Respond to support requests.

5. Payments

Payments are processed by Stripe. GrailBase does not store your full card details. Stripe may process your payment information according to its own privacy policy and terms.

6. Third-Party Services

GrailBase may use trusted third-party providers for hosting, authentication, database storage, AI processing, analytics, email, payments and other platform services.

These may include services such as Supabase, Vercel, OpenAI, Stripe and other technical providers required to operate the platform.

7. Legal Basis

We process personal data where necessary to provide the service, perform our contract with you, comply with legal obligations, protect the platform, or pursue legitimate interests such as improving GrailBase.

8. Data Retention

We keep account and collection data for as long as your account remains active, unless deletion is requested or we are required to retain certain information for legal, accounting or fraud-prevention reasons.

9. Your Rights

Under UK data protection law, you may have rights to access, correct, delete or restrict the use of your personal data. You may also object to certain processing or request a copy of your data.

To make a request, contact info.grailbase@gmail.com.

10. Security

We use reasonable technical and organisational measures to protect your information. However, no online service can guarantee complete security.

11. Cookies

GrailBase may use essential cookies or similar technologies for login, security and platform functionality. If analytics or marketing cookies are added in future, this policy may be updated and consent controls may be introduced where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be available on this page.