Privacy Policy

1. Information We Collect

When you create a Slabfy account, we collect your email address and any profile information you provide. When you use the platform, we collect data about your card portfolio, transactions, and usage patterns to provide and improve our services.

We also collect standard technical data such as IP addresses, browser type, device information, and cookies to operate the platform securely.

2. How We Use Your Data

We use your data to provide Slabfy's core features: portfolio tracking, AI-powered pricing and analysis, card show management, consignment tracking, and storefront services. Your portfolio data is used to power personalized features like Ask Fy (our AI agent) and BUY/SELL/HOLD recommendations.

We do not sell your personal data to third parties. We do not share your portfolio or transaction data with other users unless you explicitly choose to (e.g., public storefronts).

3. Data Security

Your data is stored securely using industry-standard encryption. We use Supabase (PostgreSQL) for data storage with row-level security policies. Authentication is handled via secure OAuth 2.1 flows with PKCE.

4. Third-Party Services

Slabfy uses third-party services to operate, including cloud hosting (Railway, Cloudflare), authentication (Supabase), and AI providers (for card analysis features). These services process data only as necessary to provide their services to us.

5. YouTube API Services

Slabfy uses YouTube API Services to find and display relevant public videos for trading-card, player, set, grading, and hobby research. By using Slabfy's YouTube-powered features, you also agree to be bound by the YouTube Terms of Service. Google's handling of information is described in the Google Privacy Policy.

Slabfy accesses public, non-authorized YouTube API Data, including video IDs, titles, channel names and IDs, publication dates, thumbnails, durations, and public view counts. We use this data only to select, organize, and display relevant videos inside Slabfy. Slabfy does not request or store YouTube login credentials, access private YouTube account data, or insert, update, or delete content on a user's behalf.

Limited public YouTube API Data may be cached to improve performance and reduce duplicate API requests. Cached data is refreshed or deleted within 30 calendar days and is protected using the same administrative and technical safeguards as other Slabfy data. Slabfy does not sell YouTube API Data or share it with third parties except service providers acting on our behalf as necessary to operate Slabfy.

You may request deletion of data associated with your Slabfy account through the in-app account-deletion controls or by contacting privacy@slabfy.com. We process valid deletion requests as soon as possible and within seven calendar days. Deleting data from Slabfy does not delete data stored by YouTube; YouTube data must be managed through YouTube or another authorized client. You can review or revoke Google account permissions from Google's security settings.

The YouTube embedded player may share basic device and usage information with YouTube when it loads and additional playback information when a video plays. Pulse videos autoplay by default when they become visible; you can turn off video autoplay in Slabfy's personalization settings.

6. Your Rights

You can request access to, correction of, or deletion of your personal data at any time by contacting us. You can export your portfolio data from within the platform. You can delete your account, which will permanently remove your data from our systems.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

8. SMS / Text Messaging

If you provide your mobile phone number at checkout — by entering it and choosing "Text receipt" on a Slabfy seller's point-of-sale or online storefront — we use it to send you transactional SMS messages about that purchase, such as your order receipt and a link to view your order and save your cards. Consent is collected per transaction at the point of sale; we never purchase or upload phone numbers.

These messages are one-time and transactional — we do not send marketing or recurring text messages on this number. Message frequency is tied to your purchases. Message and data rates may apply. Reply STOP at any time to opt out of further messages, or HELP for help.

Mobile phone numbers and SMS consent are never sold or shared with third parties or affiliates for their own marketing or promotional purposes. We share your number only with our messaging provider, and solely to deliver the messages you requested.

9. Contact

For privacy-related questions, contact us at privacy@slabfy.com or through our support channels.