VaultXchange Privacy Policy

This Privacy Policy explains what personal information VaultXChange LLC ("VaultXchange," "we," "us") collects through the VaultXchange store dashboard, the VaultXchange Collector app, and our native iOS/Android apps (together, the "Service"), how we use it, and who we share it with. It's part of, and should be read alongside, our Terms of Service.

By using the Service, you consent to the practices described here.

From Collectors

From Stores, Vendors & Promoters

• To operate the Service: create your account, match a Collector's trade-in/buylist history to the right Store, run XChange and Promoter Events, process subscription billing;
• To communicate with you: account notices, event/giveaway push notifications you've opted into, support responses;
• To improve and secure the Service: diagnosing bugs, preventing fraud and abuse, enforcing our Terms of Service;
• To comply with legal obligations (tax, accounting, law-enforcement requests).

We do not sell your personal information.

We don't sell access to categories of service providers below by name. This section describes what each category of provider does and what it receives, not which specific companies we use.

• Payment & billing processors: process Store subscription billing and Promoter Events table-fee payments on our behalf. They never receive your full card number from us, and we never store it ourselves.
• Subscription-billing & app-store providers: if you purchase VaultXchange+, our subscription-billing provider and the Apple App Store/Google Play Store process that purchase and share your purchase/entitlement status with us so we can unlock what you paid for. They don't share your VaultXchange password or in-app messages with us.
• Affiliate/referral program participation: if you join our affiliate or referral program, we share the minimum information needed to attribute a referral and pay a commission with our payment and subscription-billing providers.
• Cloud hosting, database & authentication providers: host the Service's infrastructure and databases, and secure sign-in/session handling.
• Card pricing/market-data providers & card identification providers: receive card photos/descriptions and a category filter (see Section 5) to identify a card and return pricing or comparable-sale data. Never sent your personal or payment information.
• Artificial intelligence service providers: process store/collection summaries for optional AI-generated insights. We don't use these providers to sell your data or to serve you third-party ads.
• Email & notification providers: deliver transactional emails (e.g. buylist status updates) and push notifications, generally using only your email address or a device token, not your full profile.
• Shipping & label providers (Stores only): generate shipping labels and tracking numbers for mail-in Buylist submissions, using the shipping address provided for that submission.
• Location/address lookup providers: convert a zip code you enter into an approximate area to find nearby shows/shops. No precise GPS location is collected or shared.
• The Store(s) you interact with: can see the activity/balance/contact info relevant to that relationship.
• Other Users, only as intended by a feature: e.g. your storefront/booth info shown to collectors browsing a Promoter Event; never your private balances or contact details unless you choose to share them.
• Legal & safety: if required by law or to protect the rights, property, or safety of VaultXchange, our Users, or the public.
• A successor: if VaultXchange is acquired or merges with another company.

Card-scan features work differently depending on what they're for.

Card identification & pricing (the Store Trade-In "Scan" workflow, and the Collector app's card-identification and Market Pricing features) send a photo (or a text description) to third-party card-identification and pricing data providers, which return matching card metadata or comparable-sale pricing. These providers receive only the card photo/description and a category filter, never your name, contact information, payment details, or any other personal data.

Centering Analysis works differently. Detecting your card's edges and measuring its centering is performed by VaultXchange's own Centering functionality, running locally on your device or in your browser — no photo is sent to an external AI grading provider for this step. If you choose Save Analysis, VaultXchange uploads and privately stores one compressed, corrected preview image, associated with that saved Centering Analysis in your account; the full-resolution original photo is not retained by this feature. Nothing is uploaded unless you tap Save Analysis.

Centering Analysis compares your measured centering against PSA, Beckett (BGS), and CGC's own published centering tolerances, for informational reference only. This comparison doesn't mean those companies have reviewed your card, endorse VaultXchange, or are affiliated with VaultXchange in any way, and it isn't a predicted or guaranteed professional grade.

The Collector app is intended for users 13 and older, per our Terms of Service. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has created an account without parental consent, contact us at Support@vaultxchange.io and we'll investigate and remove it as appropriate.

We retain your information for as long as your account is active, plus a reasonable period afterward for legal, accounting, tax, fraud-prevention, and dispute-resolution purposes. Store business records may be retained longer where a Store has a legal obligation to keep them.

If you report another User's content or behavior, or block another Collector, here's what happens to that information:

• Reports. We record who submitted a report, what was reported, and the reason given, so it can be reviewed by authorized VaultXchange staff. We don't tell the reported person who reported them.
• Blocking. Blocking another Collector stops future direct messages between you; it doesn't delete message history that already exists, and it doesn't affect shared trade or review history.
• Retention. We may retain report and moderation records for as long as reasonably necessary for safety, abuse-prevention, dispute-resolution, or legal-compliance purposes, even after an account involved in a report is deleted.

We don't publicly disclose our internal moderation process or review criteria.

• Account & data deletion. Both Collectors and Store/Vendor staff can permanently delete their account and personal data at any time from Settings → Account → Delete Account & Data, in the app or on the web (see Account & Data Deletion for details). This deletes your profile, collection/inventory, and other personal data described there. Shared trade and chat history is kept for the other participant with your identity removed rather than deleted outright, and, for Store/Vendor staff, deleting your personal account never deletes the store itself, its inventory, customers, or transaction history. We may retain limited records where required by law, for accounting/tax purposes, or for fraud prevention, consistent with Section 7 above, even after a deletion request. You can also request deletion by contacting Support@vaultxchange.io.
• Blocking. Collectors can block another Collector to stop future direct messages, from Settings → Privacy/Safety → Blocked Users, or directly from a profile or conversation.
• Push notifications. Turn these off anytime in your device's notification settings.
• VaultXchange+ subscription. Cancellations and refund requests go through your Apple or Google account settings, not through VaultXchange.

We use industry-standard safeguards (encrypted connections, access controls, hosted infrastructure with its own security practices) to protect your information. No method of transmission or storage is 100% secure.

The Service is operated from, and your information is stored in, the United States. If you access the Service from outside the United States, you consent to your information being transferred to and processed in the United States.

We use essential cookies/local storage to keep you signed in and remember basic preferences (like light/dark mode). We do not use third-party advertising trackers.

A public Store storefront page also generates a random, local-storage-only identifier for anonymous visitors, used only to count unique storefront/item views for that Store. It isn't a cookie, isn't shared with any third party, and is never resolved to a real identity.

We reserve the right to modify or update this Privacy Policy at any time, for any reason, in our sole discretion. We'll post the updated version here with a new effective date, and for material changes, provide additional notice. Your continued use of the Service after a change takes effect is your acceptance of the revised policy.

VaultXChange LLC
PO Box 284
Winchester, KY 40392
Support@vaultxchange.io