Privacy Policy

1Overview & Scope

At RSL Cards ("we", "us", or "our"), we respect your privacy and are committed to protecting the personal and business data of our sports card dealers and collectors.

This Privacy Policy explains what information we collect, how it is used, and how your data is protected across both our platforms:

• RSL Cards Mobile App for iOS and Android.
• RSL Cards Web at app.rslcards.com / rslcards.com.

2Information We Collect & Permissions Requested in the Mobile App

When using the RSL Cards Mobile App, we request specific hardware permissions strictly to power core dealership features:

3Information We Collect in RSL Cards Web & Backend

When accessing RSL Cards Web or backend services:

• Account & OAuth Authentication Credentials:Email address, salted & hashed password, 6-digit email OTP verification tokens, and Google / Apple OAuth ID tokens (name, email address, profile photo URL).
• Inventory & Dealership Ledgers:Card inventory items (year, set, grade, cost basis, target prices, market comps), buy/sell/trade transactions, card show daily logs, cash adjustments, gross revenue, and profit margins.
• Marketplace OAuth Tokens:Connected third-party tokens (e.g. eBay access tokens) to allow seamless multi-channel listing creation, inventory syncing, and order import.
• Technical Analytics & Cookies:IP address, browser type, operating system, API performance metrics, and secure HTTP-only session cookies to maintain your authenticated session.

4How We Use Your Information

We use collected data solely to deliver, improve, and secure our dealership software:

• Processing computer vision scanning and instant market comp calculations.
• Maintaining your inventory ledger, cost basis, profit analytics, and card show logs.
• Syncing listings and sales across connected platforms like eBay.
• Delivering requested operational notifications (Price Spikes, Aging Inventory, Daily Log reminders).
• Preventing unauthorized access, fraud, and ensuring backend API security.

5Data Protection & Third-Party AI Services (Apple Guidelines 5.1.1 & 5.1.2)

✓ We NEVER sell your personal data, inventory lists, or financial ledgers to third parties.

We share information strictly with trusted infrastructure and service partners necessary to deliver application features, subject to strict contractual confidentiality and data security terms:

• Third-Party AI Service (Google Gemini AI):

  When you use the RSL Assistant or AI card scanner, your queries, card scan image data, and inventory lookup terms are processed via Google Gemini AI models.
  • No Public AI Model Training: In accordance with Google AI data privacy commitments, customer data transmitted through the API is strictly used to generate real-time responses and is never used to train, retrain, or improve foundational or public AI models.
  • Data Encryption: All data transmitted to and from Google Gemini AI is encrypted in transit using TLS 1.3 and at rest with AES-256 encryption.
  • User Consent: Users are presented with an in-app disclosure and must grant explicit permission before sending queries to the AI service.

• Cloud Infrastructure & Database: Secure encrypted databases (PostgreSQL/Supabase) and Redis caching servers for storing user accounts, inventory records, and transaction ledgers.
• Marketplace APIs (eBay): eBay REST API only when you explicitly connect your eBay seller account for listing and sales synchronization.
• Notification Services: OneSignal & Expo Push for delivering authorized operational alerts (price spikes, daily log reminders).

6Security & Data Encryption

All network communication is encrypted using TLS 1.3 / HTTPS. Account tokens and sensitive credentials are encrypted at rest (AES-256) and stored securely on mobile devices using iOS Keychain and Android Keystore (via Expo SecureStore).

7Account Deletion & Data Erasure

You have the full right to delete your RSL Cards account and all associated data at any time directly within the mobile application or by submitting a deletion request to our privacy team.

You can also request manual account and data deletion by emailing support@rslcards.com with the subject line "Account Deletion Request" from your registered email address.

8Contact Us & Privacy Officer

If you have any questions or concerns regarding this Privacy Policy or your data, please reach out to us: