App access requests
If you request app access before creating an account, we collect your email address, selected device platform, contact permission and request dates. We store these requests privately and use them to manage invitations and app-access updates.
What we collect
Account identity supplied by the sign-in provider; contact and shipping information; submitted card or sealed-product details; offer selections; photographs used for identification; agreement signatures and audit information; custody and warehouse records; transaction and ledger activity; support communications; and basic device, browser, IP, and security logs.
Card photographs
A photograph submitted to the scanner is sent to the configured identification provider to identify the item. The scanner endpoint does not intentionally save the uploaded image. If you later provide photographs for inspection, insurance, custody, or resale, those transaction photographs may be retained with the offer record.
How we use information
We use information to identify and value items, prevent fraud, authenticate users, produce offers, record electronic signatures, generate shipping and custody records, operate the warehouse, issue and reconcile payments, support authorized sales, communicate term deadlines, enforce agreements, and meet legal or regulatory obligations.
When we share it
Information may be shared with service providers that perform authentication, pricing, cloud hosting, payment processing, communications, shipping, insurance, grading, vault custody, resale, fraud prevention, professional advice, or legal compliance. We do not authorize providers to use transaction data for unrelated purposes.
No sale of personal information
GRAILZ does not sell personal information for cash. If advertising or analytics practices later qualify as a sale or sharing under a state privacy law, this notice and the applicable controls must be updated before that practice begins.
Retention
Offer, contract, custody, inventory, payment, and compliance records are retained for the period reasonably needed to service the transaction, document ownership and movement, resolve disputes, comply with tax and legal duties, and protect against fraud. Scanner uploads that are not attached to a transaction are not intentionally retained by GRAILZ.
Security
We use access controls, authenticated account boundaries, server-side API credentials, inventory movement logs, and integrity records for signed agreements. No system is risk-free. Do not place bank account or routing numbers into free-text fields or uploaded card descriptions.
Your choices
You may request access, correction, or deletion of eligible account information through the authenticated dashboard. Some records cannot be deleted while property is in custody, money remains outstanding, a transaction is disputed, or retention is required by law.
Public cash-out activity
A funded cash-out appears in the public recent-activity feed only when the collector expressly opts in on the offer. The feed uses a random masked alias and displays only the funded amount, broad collection type, draw style, and date. It does not publish the collector's name, email, item-level schedule, warehouse location, contract, or payment account.
Children
The service is not intended for anyone under 18, and GRAILZ does not knowingly open collectible cash-out accounts for minors.
Changes and contact
Material privacy changes will be posted with a new effective date. Privacy and account requests should be submitted through the authenticated dashboard so identity can be verified before information is disclosed or changed.