Privacy Policy

This Policy describes information handled through the Flagship Collectibles website and Flagship Pro. Flagship Collectibles is the business responsible for these uses. Contact us using the details below for privacy questions. Linked marketplaces and providers govern activity on their own services under their own privacy policies.

Account information includes your email, account identifier, authentication information and account permissions. Google sign-in provides the information required to establish your account through our authentication provider; we do not receive your Google password.

Inquiries include name, email, optional phone, category, message and information you choose to share about a collection or estate. Avoid submitting unnecessary sensitive personal or financial information.

Card analysis processes submitted photos, identified card details and analysis outputs. Vault records may include card titles, images, grades, purchase costs, estimated values and source/acquisition details. We save a snapshot of each completed scan (the processed card image with its guide placements and the result shown) to your account; only you and Flagship administrators can view it. When you create an account we also record whether you arrived from a Google ad, a Meta (Facebook/Instagram) ad or another source. Crop unnecessary personal information from image backgrounds before submitting.

Billing records include plan, customer/subscription identifiers, status and renewal periods. Stripe processes payment details; our application stores subscription references rather than your full payment-card number.

The application and providers may process IP addresses, device/browser details, request logs, error reports and security events to deliver and protect services. Scan usage is recorded against plan limits and billing periods.

Authentication uses browser storage or cookies to maintain sessions. Browser storage can also preserve local tool information. Clearing or blocking storage may sign you out or remove local records. We do not classify optional advertising as essential.

We use the Google Ads tag to measure whether our ads lead to new Flagship accounts. When you visit or create an account, Google may receive your IP address, device and browser details, pages visited, ad-click identifiers and a non-identifying account reference, and uses this to report conversions and optimize our ad delivery. We do not send your email or other contact details to Google for ad matching.

For visitors in the EEA, UK, Switzerland, Canada, or where location cannot be determined, the Google Ads tag is not loaded and no conversion is reported. You can opt out of personalized Google ads at adssettings.google.com and learn how Google uses data at business.safety.google/privacy. Blocking cookies or browser storage also limits this measurement.

We use the Meta Pixel to measure whether our Facebook and Instagram ads lead to new Flagship accounts. When you visit or create an account, Meta may receive your IP address, device and browser details, pages visited, ad-click identifiers and a non-identifying account reference, and uses this to report conversions and optimize our ad delivery. We do not send your email or other contact details to Meta for ad matching.

For visitors in the EEA, UK, Switzerland, Canada, or where location cannot be determined, the Meta Pixel is not loaded and no conversion is reported. You can adjust how Meta uses your activity in your Facebook ad preferences and learn more in Meta's Privacy Policy. Blocking cookies or browser storage also limits this measurement.

We use information to create and secure accounts, analyze cards, maintain collection records, enforce plan allowances, process subscriptions, respond to inquiries and administer agreed transactions. Necessary information also supports reliability, abuse prevention, dispute resolution, accounting and legal obligations.

Where applicable law requires a lawful basis, these uses rely on providing a requested service or contract, compliance with law, consent when required, or legitimate operational and security interests subject to your rights. An inquiry is not blanket consent to unrelated marketing.

Requested card identification and condition analysis transmits relevant card images and request details through the application's AI service. Outputs are returned to the collector tools. They may be inaccurate and are not a professional grade or a decision about your legal rights.

Upload only content you are authorized to submit. AI providers have their own processing and retention terms; we do not promise zero retention or make unsupported guarantees about model training. Contact us before submitting content requiring unusual confidentiality protections.

Lovable Cloud supports hosting, authentication, account-linked data and infrastructure. Stripe handles payments and subscription billing. AI providers process requested card analysis. Email providers deliver inquiry and service communications. These providers receive information relevant to their work.

Authorized Flagship Collectibles administrators can view inquiries to respond. Copies are maintained in our private site inbox and routed to info@flagshipcollectibles.com; email delivery may be affected by provider availability or configuration.

Agreed grading, shipping or consignment transactions may require sharing relevant details with the grading provider, carrier, marketplace or buyer. We may also disclose information to comply with law, protect rights and safety, or complete a lawful business transfer subject to appropriate safeguards. We do not sell account, inquiry or Vault information as part of these services.

eBay, Whatnot, Google and other external providers control their own privacy practices. Opening links, signing in with a provider or purchasing through a marketplace can share technical or transaction information with that provider. Review their policies when using those services.

Information is retained for as long as reasonably necessary for services, legitimate business records, security, legal compliance and disputes. Duration depends on the information and purpose; we do not promise an automatic deletion date that has not been established.

Remove supported Vault records through your account and contact us to request account closure or other deletion. Visible deletion may not immediately erase backups, provider logs or legally required accounting records. We will explain applicable exceptions when responding. Account closure and cancellation of recurring billing are separate requests.

Access controls and provider safeguards are designed to limit unauthorized access, but no online service is completely secure. Protect your login and contact us about suspected misuse. Do not send passwords or full payment details in forms.

Providers may process data in the United States or other countries where they operate; local protections may differ. Applicable transfer requirements must be supported by appropriate provider arrangements and safeguards where required. We do not promise storage in a specific country.

Contact us to request access, correction or deletion. Depending on location, you may also have rights to portability, restriction, objection, consent withdrawal or appeal. We assess requests under applicable law, verify identity as needed and honor applicable response deadlines. We will not ask for your password.

We may retain legally required records or apply lawful exemptions and will explain relevant reasons. Applicable non-discrimination and privacy-regulator complaint rights remain available. Consent withdrawal does not affect earlier lawful processing.

You may adjust browser storage settings, decline optional tools or third-party sign-in, and request that nonessential communications stop. Necessary billing, security and transaction notices may continue.

Account and paid services are intended for adults, not children under 18. If you believe a child submitted personal information without appropriate authorization, contact us so we can investigate and act appropriately.

Revisions appear with an updated date. Material changes receive appropriate notice or consent where required. A prior inquiry or signup does not automatically authorize new processing purposes.