1. Who this policy covers
This Privacy Policy applies to the DigiBinder mobile app, the digibinder.app website, and related services. It covers buyers, sellers, waitlist subscribers, and visitors.
The controller of personal information described in this policy is DigiBinder Labs, Inc., a Delaware corporation. Legal notices may be sent to our registered agent at c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States. That address is for notices and service of process, not a public office. Contact support@digibinder.app for privacy requests.
2. Information you give us
- Account data — email address, password (stored only as a hash by our authentication provider), display name, handle, and avatar.
- Profile and preference data — bio, theme, notification preferences, profile visibility, and whether you show collection value.
- Collection and listing data — binders, cards, quantities, condition grades, prices, wanted-card lists, and the photos you upload.
- Transaction data — orders, offers, trades, ratings, messages exchanged about an order or offer, disputes, and evidence you submit.
- Shipping data — recipient name, street address, city, state, ZIP, and phone number used for labels and delivery.
- Verification data — phone number for SMS verification, and identity documents you submit to our identity verification provider.
- Waitlist data — if you join the launch list on digibinder.app, the email address you submit.
3. Information collected automatically
- Device and app data — device model, operating system, app version, push notification token, and locale.
- Usage data — screens viewed, searches, and actions taken in the app, used to operate and improve the Service.
- Technical logs — IP address, timestamps, and error diagnostics, used for security, abuse prevention, and rate limiting.
- Cookies and similar technologies — first-party cookies that are necessary to operate digibinder.app and to keep you signed in on the sign-in and password-recovery pages. The mobile app uses equivalent device identifiers and local storage, not browser cookies. We do not use third-party advertising cookies or a marketing pixel. Details are in our Cookies Policy. If that changes, we will update this policy and, where required, ask for consent.
4. How we use your information
- To operate the marketplace: create accounts, publish binders, process orders, offers, and trades, and calculate fees.
- To take payments and pay sellers, including escrow-style holds, refunds, reversals, and chargeback handling.
- To buy shipping labels and provide tracking and delivery status.
- To verify identity and eligibility, enforce seller limits and verification tiers, and meet anti-fraud and know-your-customer obligations.
- To resolve disputes, including reviewing listings, photos, tracking, and messages related to an order.
- To send transactional messages and, where enabled, push notifications about offers, orders, support, follows, and wanted-card matches.
- To email waitlist subscribers when the app is available on iOS or Android. Those emails are launch notices you requested. You can unsubscribe using the link in the email. We do not sell waitlist addresses or use them for unrelated marketing.
- To keep the Service secure — detecting fraud, abuse, and violations of our Community Guidelines.
- To comply with legal obligations and enforce our Terms of Service.
6. What other users can see
- Public: your display name, handle, avatar, ratings, live binders, and the cards and photos in those binders.
- Configurable: your profile visibility and whether your collection value is displayed, both controlled in Settings.
- Shared only with your counterparty on a transaction: the shipping name, address, and phone needed to fulfill the order.
- Never shown to other users: your email address, password, payment credentials, and identity documents.
7. Retention
We keep account and collection data while your account is active. Transaction, payout, dispute, and tax-relevant records are retained after an order completes for as long as needed to satisfy legal, accounting, chargeback, and fraud-prevention requirements. Security logs are retained for a limited period.
When you delete your account we remove or de-identify your profile and collection data, and retain only the records we are required or permitted to keep, such as completed transaction and payout history.
8. Your choices and rights
- Access and correct most of your data directly in the app under Settings and Edit profile.
- Control notifications in Settings, and turn off system-level push notifications on your device.
- Read our Cookies Policy for what we set in the browser. You can dismiss the cookie notice on the website; essential cookies still run so the site and sign-in work.
- Request a copy of your data, correction, or deletion by emailing support@digibinder.app. We will verify the request (for example by confirming control of the account email) and respond within 45 days, or longer if the law allows us to extend.
- If you are a California resident, you may request to know, delete, or correct personal information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are used in the CCPA/CPRA. We do not use or disclose sensitive personal information (including government-ID data processed by Stripe Identity) to infer characteristics. You may use an authorized agent. We will not discriminate against you for exercising these rights. If we deny a request, you may appeal by replying to our decision email.
- Depending on where you live, you may have additional rights to object to or restrict processing, or to lodge a complaint with your local data protection authority.
9. Security
Data is encrypted in transit. Database access is restricted by row-level security policies so users can reach only the records they are entitled to, and privileged operations run through server-side routes. Access to production systems is limited and audited.
No system is perfectly secure. Use a strong, unique password and notify us immediately if you believe your account has been compromised.
10. Children
The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact support@digibinder.app and we will remove it.
11. International transfers
DigiBinder and its service providers operate in the United States. If you access the Service from outside the United States, your data will be transferred to and processed there.
12. Changes and contact
We will update the version identifier below when this policy changes and will notify you in the app when the change is material. Material privacy changes take effect no sooner than 30 days after that notice unless a shorter period is required for security or legal reasons. For any privacy question or request, contact support@digibinder.app or write to DigiBinder Labs, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States (registered agent for legal notices; not a public office).