Privacy Policy

1. Information We Collect

We collect information that you directly provide when creating an account, buying or selling cards, and communicating with other users:

• Account Profile: Name, email address, username, password hash, and optional profile avatar.
• Shipping & Billing Addresses: Physical street addresses used exclusively for dispatching card shipments.
• Payment & Banking Information: Credit/debit card numbers and bank payout details are tokenized and processed securely by Stripe. We do not store raw card numbers on our servers.
• Marketplace Activity: Order history, card listings, customer reviews, escrow releases, and internal message logs.

2. How We Use Your Data

Your personal data is used to provide a reliable, fraud-resistant collectibles marketplace:

• To process orders, hold escrow funds safely, and calculate affiliate commissions.
• To provide seller payout disbursements via Stripe Connect.
• To notify you of order dispatch, tracking updates, and new message notifications.
• To detect and prevent fraudulent listings, counterfeit sales, and abusive behavior.

3. Third-Party Service Providers

We share minimum necessary information with trusted third-party providers:

• Stripe, Inc.: Payment gateway, identity verification, and seller payout compliance.
• Shipping Carriers (USPS, UPS, FedEx): Address information shared with sellers to generate shipping labels.
• TCGdex & Community APIs: Public card catalog and imagery reference indexing.

4. Security & Encryption

All web traffic, payment tokens, and sensitive database interactions are transmitted over 256-bit TLS encryption. Access to server infrastructure is strictly restricted with multi-factor authentication.

5. Your Data Rights & Deletion

You have the right to request an export of your personal data or request permanent deletion of your account and associated listings by contacting our support team at privacy@sunnyboycards.com.