Privacy Policy

# Privacy Policy **Version 2.0** **Last Updated: March 10, 2026** --- ## Introduction InVelocity ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our inventory management platform (the "Service") at https://go.invelocity.app. ## Information We Collect ### Account Information When you create an account, we collect: - Email address - Account credentials (managed securely via Firebase Authentication) - Profile information you provide (store name, business details) ### Inventory Data To provide inventory management services, we collect: - Product information (names, sets, card numbers, SKUs, descriptions) - Pricing data (cost basis, selling prices, market prices) - Quantity, condition, and finish information - Category and custom metadata ### Product Photos Images you upload of collectible items for inventory tracking and AI-powered card identification. Photos are stored via Cloudinary. When you use AI identification features, photos are transmitted to OpenAI or Anthropic for processing. ### Marketplace Integration Data When you connect marketplace accounts, we collect: - **eBay:** eBay username, user ID, OAuth access tokens (encrypted), listing information, sales and order data, seller analytics - **Shopify:** Store domain, access tokens (encrypted), product listings, inventory levels, order data ### Sales and Transaction Data Point-of-sale transaction records, customer information you enter for in-store sales, and marketplace order data synchronized from eBay and Shopify. ### Market Intelligence Data As described in our Terms of Service, we collect anonymized data to power our Market Intelligence system: - Anonymized sales data (sale prices, sale dates) - Anonymized cost basis information - Anonymized engagement metrics (views, watchers, days listed) ## How We Use Your Information We use the information we collect to: - **Provide Services:** Manage your inventory, sync with marketplaces, process checkout, generate reports - **AI Features:** Identify cards from photos, suggest prices, generate listing content, match products (via OpenAI and Anthropic) - **Market Intelligence:** Aggregate anonymized data to provide pricing recommendations and market insights to all users - **Improve Features:** Analyze usage patterns to enhance functionality - **Communicate:** Send service updates, product announcements, support responses, and administrative notices - **Security:** Protect against unauthorized access, fraud, and abuse - **Legal Compliance:** Comply with applicable laws and regulations We do not sell your personal information to third parties. ## AI Processing The Service uses artificial intelligence powered by: - **OpenAI** (primary) — Processes product photos and inventory data for card identification, pricing analysis, and listing optimization - **Anthropic** (fallback) — Processes the same data types when the primary provider is unavailable Data sent to AI providers includes product photos, card names, set names, and listing content. We do not send personal information (name, email, payment data) to AI providers. Both providers process data under their API data usage policies and do not use API data to train their models. ## Data Sharing and Disclosure We do not sell your personal information. We may share data only in these limited circumstances: - **AI Providers:** OpenAI and Anthropic process product photos and inventory data for AI features - **Marketplace Platforms:** eBay and Shopify receive listing data, photos, and order information when you connect your accounts - **Firebase / Google:** Authentication and user management - **Whop, Inc.:** Merchant of Record for payment processing - **Cloudinary:** Photo storage and processing - **Render:** Backend hosting and database services - **Vercel:** Frontend hosting - **Sentry:** Error monitoring (PII excluded by configuration) - **Resend:** Transactional email delivery - **Market Intelligence:** Anonymized, aggregated data shared with other users (no personal information included) - **Legal Requirements:** When required by law, court order, or to protect our legal rights - **Business Transfers:** In the event of a merger, acquisition, or sale of assets We do not share your information for advertising purposes. ## California Privacy Rights (CCPA/CPRA) If you are a California resident, you have the following rights: - **Right to Know:** Request information about data we've collected, its sources, purposes, and who we share it with - **Right to Delete:** Request deletion of your personal information (subject to legal exceptions; anonymized Market Intelligence data cannot be deleted) - **Right to Correct:** Request correction of inaccurate personal information - **Right to Opt-Out of Sale/Sharing:** We do not sell or share personal information for advertising - **Right to Limit Use of Sensitive PI:** We do not collect sensitive personal information as defined by CCPA - **Right to Non-Discrimination:** We will not discriminate against you for exercising your rights **Automated Decision-Making:** We use AI for card identification, pricing suggestions, and listing content. These are assistive tools — all output is presented as suggestions for your review. No automated decisions produce legal or similarly significant effects without your involvement. To exercise your rights, contact support@invelocity.app. We will respond within **45 days** (extendable to 90 days with notice). ## Data Security We implement industry-standard security measures: - Encryption in transit (HTTPS/TLS) - Encryption at rest for sensitive data (marketplace OAuth tokens encrypted with AES-256) - Secure authentication via Firebase with CSRF protection - Rate-limited API endpoints - Error monitoring configured to exclude PII (Sentry) - Regular security reviews and dependency scanning No internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your account credentials. ## Data Retention We retain your data as long as your account is active. Upon account deletion: - Account and inventory data: deleted within 90 days - Product photos: deleted within 30 days - Sales/transaction records: retained up to 7 years (tax/legal compliance) - Usage analytics: retained 24 months from collection - AI processing logs: retained 30 days - Anonymized Market Intelligence data: retained indefinitely (not associated with your identity) ## Data Breach Notification In the event of a breach involving your personal information, we will notify affected users via email within 30 days of discovery, describe the nature of the breach and steps we're taking, and notify the California Attorney General if required. ## Your Rights You have the right to: - **Access:** Request a copy of your personal data - **Correction:** Update or correct inaccurate information - **Deletion:** Request deletion of your account and data - **Export:** Download your inventory data in CSV format - **Revoke Access:** Disconnect eBay or Shopify integration at any time - **Opt-Out:** Unsubscribe from promotional marketing (essential administrative communications continue) To exercise these rights, contact us at support@invelocity.app. We will respond within 45 days. ## Cookies and Tracking We use essential cookies to: - Maintain your login session - Remember your preferences - Analyze application usage (anonymous) We do not use third-party advertising cookies or sell data to advertisers. ## Third-Party Services InVelocity integrates with the following third-party services, each with their own privacy policies: - **eBay:** Marketplace integration — [Privacy Notice](https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260) - **Shopify:** Marketplace integration — [Privacy Policy](https://www.shopify.com/legal/privacy) - **Firebase / Google:** Authentication — [Privacy Policy](https://firebase.google.com/support/privacy) - **OpenAI:** AI processing — [Privacy Policy](https://openai.com/policies/privacy-policy) - **Anthropic:** AI processing — [Privacy Policy](https://www.anthropic.com/policies/privacy) - **Whop:** Payment processing — [Privacy Policy](https://whop.com/privacy) - **Cloudinary:** Photo storage — [Privacy Policy](https://cloudinary.com/privacy) ## Support Widget Our support widget allows you to contact us directly. Messages and your email address are transmitted to our support system and processed through a security gateway. Conversations may be retained for quality assurance. ## Children's Privacy InVelocity is designed for business use by adults (18+). We do not knowingly collect information from anyone under 18. If you believe someone under 18 has provided us with personal information, contact us immediately. ## International Users InVelocity is operated in the United States. If you access our services from outside the U.S., your data may be transferred to and processed in the United States. ## Changes to This Policy We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in-app notification at least 30 days before the changes take effect. Your continued use constitutes acceptance. ## Contact Us If you have questions about this Privacy Policy or our data practices: **Email:** support@invelocity.app **Website:** https://go.invelocity.app --- ## eBay Marketplace Integration Notice This application uses eBay APIs to provide marketplace integration services. By connecting your eBay account, you authorize InVelocity to access your eBay data as described in this policy. Your use of eBay services is also subject to eBay's [User Privacy Notice](https://www.ebay.com/help/policies/member-behaviour-policies/user-privacy-notice-privacy-policy?id=4260) and [User Agreement](https://www.ebay.com/help/policies/member-behaviour-policies/user-agreement?id=4259). ## Shopify Integration Notice This application uses the Shopify Admin API to provide marketplace integration services. By connecting your Shopify store, you authorize InVelocity to access your Shopify data as described in this policy. Your use of Shopify is also subject to Shopify's [Privacy Policy](https://www.shopify.com/legal/privacy) and [Terms of Service](https://www.shopify.com/legal/terms).