Privacy Policy

1. Information you provide to us

Account information. When you create an account we collect your email address, full name, and password, and optionally a store or seller handle and phone number. If you enable two-factor authentication, we store the data needed to verify your authenticator codes. Passwords are stored only in hashed form; we cannot read them.

Waitlist and contact forms. If you join the waitlist we collect your email address and, if you choose to share it, your approximate monthly sales range. If you contact us we collect your name, email address, and the contents of your message.

Inventory records and photos. You may add items, lots, purchase costs, and notes, and upload photos of your items (for example, cards and slabs) so the Service can identify them and attach market comparisons.

Imported order files. You may upload sales export files (such as a Whatnot livestream CSV). These files contain your sales data: item descriptions, sale amounts, fees, adjustments, payouts, timestamps, and in some cases buyer usernames or similar order details. See Section 7, which covers information about people other than you.

Show recordings. You may point the Service at a video recording of your show to help match sold items. The video file is processed on your device and is never uploaded to our servers. See Section 8 for exactly how this works.

Support communications. If you email us or reply to our messages, we keep the correspondence.

Payment information (future). Packstage is currently free during early access. When paid plans launch, payments will be processed by a dedicated payment processor (we expect Stripe). Your full card number will go directly to the processor; we will not receive or store it. We will update this policy before billing launches.

2. Information collected automatically

When you use the Service, our hosting infrastructure automatically records standard technical data: IP address, browser and device type, pages requested, timestamps, and error logs. We use this for security, debugging, and keeping the Service running. These logs are short-lived and are not used to build profiles of you.

We use only essential cookies: session cookies that keep you signed in and remember security state (such as two-factor status). We do not use advertising cookies, and we do not currently use third-party analytics trackers. If that changes, we will update this policy first.

3. Information we derive

To do its job, the Service computes new records from your data: matches between sold items and your inventory, numerical embeddings of your item photos used for matching, cost estimates, coverage states (Estimated, Settling, Settled), profit and loss statements, and tax-category mappings. Derived records belong to your workspace like everything else and are included in your export.

4. How we use information

We use the information above to:

1. Provide the Service: import your sales, match items, attach costs, and produce your books.
2. Create and secure your account, including sign-in emails, password resets, and two-factor authentication.
3. Respond to your messages and provide support.
4. Send transactional email about your account and, if you joined the waitlist or opted in, occasional product updates. Every non-essential email includes an unsubscribe link.
5. Monitor for abuse, enforce our Terms of Service, and protect the Service and its users.
6. Comply with law.

AI processing. Two features use machine learning:

• Card identification at intake. When you upload an item photo, we send that photo (and related item text) to our AI provider, Anthropic, to identify the card. Under our agreement with Anthropic, data sent through its API is not used to train Anthropic's models.
• Recording match. Frame analysis of your show recordings happens in your browser, on your device. See Section 8.

We do not use your data to train general-purpose AI models, and we contractually restrict our AI providers from doing so.

Aggregated data. We may create and use aggregated or de-identified data that does not identify you or any buyer (for example, overall match-accuracy statistics) to operate and improve the Service.

5. How we share information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not disclose personal information to third parties for their own direct marketing.

We share information only with the service providers below, who process it on our behalf and only as needed to run Packstage:

Card pricing and identity sources. To attach market comparisons and verify cards, we query third-party card databases (currently Scrydex, Scryfall, pokemontcg.io, and, when available, TCGplayer, plus PSA certification lookups for graded slabs). These queries contain card names, sets, and certification numbers only. They never include your identity, your account information, or your buyers' information.

We may add or replace infrastructure providers as the Service grows; when a change affects how personal information is handled, we will update the table above.

We may also disclose information if required by law, legal process, or a governmental request; to protect the rights, safety, or property of Packstage, our users, or others; or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information until you are notified otherwise.

6. Do Not Track and opt-out signals

We do not track users across third-party websites, so there is nothing for a Do Not Track signal to disable, and we do not respond to such signals. Because we do not sell or share personal information, opt-out preference signals such as Global Privacy Control do not change how we process your data.

7. Information about people other than you

Sales files you import may contain limited information about your buyers, such as usernames and order details. Packstage processes that information only to build your books: matching orders to items, computing your totals, and showing you your own sales history. We never contact your buyers, never use their information for our own purposes, and never share it except with the infrastructure providers in Section 5 as needed to store and process your workspace.

You are responsible for having the right to upload the data you import, consistent with the rules of the platform it came from. If you delete your account, your buyers' information in your workspace is deleted with it.

If you believe a Packstage user has uploaded information about you and you want it removed, contact us at hello@getpackstage.com. We will work with the account holder to address your request and will honor applicable legal obligations.

8. Show recordings and biometric data

This section exists because show recordings are video, and video deserves clear rules.

1. Your recording never leaves your device. When you use the recording match feature, the video file you select is read and analyzed locally in your browser. The video is never uploaded to Packstage or to any third party.
2. What the feature computes. Your browser extracts still frames locally and converts them into numerical representations (embeddings) that describe visual similarity. These embeddings are compared against embeddings of your own item photos to suggest matches. Embeddings are one-way mathematical summaries; they are not images and cannot be reversed into your video.
3. No biometric identification. Packstage does not perform facial recognition and does not create, collect, or store biometric identifiers or biometric information, including scans of face geometry, faceprints, or voiceprints. The matching feature identifies trading cards and items, not people.
4. Suggestions only. Recording matches are suggestions you confirm or reject. Nothing is booked from video automatically.

9. Retention and deletion

While your account is active, we keep your account and workspace data so your books remain complete. Packstage uses an append-only ledger: financial records are never edited in place, and corrections are recorded as new entries with the originals preserved. Items you archive or void inside the app are retained in a restorable state so your history stays intact; this is a feature of your bookkeeping, not a limit on your rights below.

Waitlist data is kept until we launch to the waitlist or you ask us to remove you, whichever comes first.

Server logs are retained briefly by our hosting providers for security and operations.

When you delete your account, we delete your account information and your entire workspace, including inventory, imports, photos, derived records, and any buyer information it contains, from our production systems within 30 days of your verified request. Residual copies in encrypted backups are overwritten on a rolling basis and are gone within about 35 days after that. We may retain the minimum records needed to comply with law, resolve disputes, or enforce our agreements (for example, records of a payment).

To delete your account, email hello@getpackstage.com from your account email address. We are building a self-serve deletion control; until it ships, email is the deletion mechanism and it works.

10. Your choices and rights

We offer these to every user, regardless of where you live:

• Access and correction. You can view and update your profile information at any time in your account settings. Corrections to financial records post as new ledger entries, so your books show both the original and the fix.
• Export. You can export a complete copy of your workspace at any time with one click. Your data belongs to you.
• Deletion. You can delete your account and workspace as described in Section 9.
• Email choices. You can unsubscribe from non-essential email using the link in any message. We will still send essential account email (such as sign-in links and security notices) while you have an account.

To exercise any of these, use the in-app controls or email hello@getpackstage.com. We will verify that a request comes from the account holder before acting on it, and we respond within 30 days. We will never discriminate against you for exercising these rights.

11. Security

We protect your information with encryption in transit (TLS) and at rest, workspace-level access isolation enforced at the database layer, hashed passwords, optional two-factor authentication, and least-privilege access to production systems. No method of transmission or storage is perfectly secure, but if a breach affects your personal information, we will notify you without undue delay, consistent with applicable law.

12. Where your data is stored

Packstage is operated from the United States. Your workspace data is stored with our database provider in Canada, and other providers listed in Section 5 process data in the United States. The Service is intended for users in the United States; if you use it from elsewhere, you understand that your information will be processed in the United States and Canada.

13. Age requirement

The Service is for adults running a selling business. You must be at least 18 years old to use it. We do not knowingly collect information from anyone under 18, and if we learn we have, we will delete it.

14. Changes to this policy

When we change this policy, we will update the effective date above. For material changes, we will notify you by email or an in-app notice before the change takes effect, at least 14 days in advance when practicable. Prior versions are available on request.

15. How to reach us

Packstage LLC
784 S. Clearwater Loop Ste B
Post Falls, ID 83854 US
hello@getpackstage.com

We answer privacy questions from real people, usually within a couple of business days.