BulkVault Privacy Policy
Version 2026-10-27
1. Who we are
Impact Six, LLC operates BulkVault. This Privacy Policy explains what we collect and how we use it when you use the Service.
2. Information we collect
Account data (email, name, business name), authentication data from our auth provider (Supabase), usage and billing data, card images and listing content you upload, and marketplace tokens you authorize (e.g. eBay OAuth refresh tokens). Technical logs may include IP address, device/browser, and approximate location. When you connect eBay, we also store order details eBay provides, including your buyers’ eBay usernames, to sync sales and send the buyer messages you set up; when eBay tells us a member closed their eBay account, we remove that username.
3. How we use information, including AI
We use data to provide and improve matching, inventory, listing prep, publishing, support, security, billing, and product analytics. We use AI (Anthropic’s Claude models, with OpenAI’s models as a backup when Anthropic is unavailable) to read card photos (name, set, number, rarity, foil finish) and to suggest eBay listing details. This sends the relevant image or text snippet to that provider’s API solely to produce that result - not to serve you ads or build a behavioral profile. Always review AI-suggested fields before publishing; they can be wrong.
4. Sharing with third parties
We share data with service providers who help us run BulkVault, each only for that purpose: Fly.io (application hosting; our servers run there), Supabase (authentication, database, file storage), Stripe (payment processing and billing), Anthropic and OpenAI (AI card reading and listing suggestions, see above), Resend (delivering account and notification emails, when email is turned on), and, when you connect a marketplace, eBay (listing content and images needed to publish and manage your listings there). These providers process data under agreements that limit their use of it. We may disclose information if required by law or to protect rights and safety. We do not sell your personal information.
5. Retention and deletion
We keep account and content data while your account is active and as needed for backups, legal obligations, and dispute resolution. You can delete individual batches of uploaded images at any time from the app. You can also permanently delete your account from Settings > Profile, which removes your uploaded images, scans, and listing drafts, cancels any active subscription, and disconnects eBay; some minimal records (e.g. billing history we must keep for tax or legal reasons) may remain. Deleting your account does not end listings already published on a marketplace - end those there directly.
6. Security
We use reasonable technical and organizational measures to protect data, including storing uploaded images under per-batch identifiers that are not published or indexed anywhere. No method of transmission or storage is 100% secure.
7. Your choices
You can update profile information, disconnect marketplaces, and delete your account or individual uploads directly in the app (see Section 5), or contact us to request access or deletion subject to law. Marketing email (if any) will include unsubscribe options.
8. Cookies
We use cookies and similar browser storage to keep you signed in (Supabase authentication session), to remember a referral or sign-up source for a limited time (about a month), and to remember app state in your browser such as a running import or search choices. We do not use advertising or cross-site tracking cookies. Blocking cookies will sign you out and stop the app from working.
9. Children
The Service is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect their personal information.
10. Changes and contact
We may update this Policy and will post the new version in the app (version 2026-10-27). Contact: paul@impactsix.com.
See also our Terms of Service.