Privacy Policy
Last updated: 2026-05-20
Placeholder. This document will be replaced with reviewed legal copy before launch. The summary below reflects how we currently intend to operate.
What we collect
Account info (email, name), billing info (handled by Stripe — we never see your card), and the hand history files you upload. We also collect basic product analytics (pages visited, features used) to improve the product.
How we store it
Hand histories and parsed data are stored encrypted at rest. All traffic uses TLS. Backups are encrypted and access-controlled. We retain your data until you delete your account, at which point it is purged within 30 days.
What we never do
- Sell your data, ever.
- Share your data with third parties for advertising.
- Use your hand histories to train AI models.
- Read your data outside of operating the product and providing support.
Third-party services
We use Stripe (payments), Anthropic (AI processing), and AWS (storage). Your data may pass through these providers to operate the product. Each is bound by their own privacy and DPA terms.
Your rights
You can export everything, request deletion, or get in touch about anything you'd like to know. Email privacy@cardsmind.ai.