We collect the following categories of data:

• Account data (name, email, role, subscription tier)
• Card images and metadata you upload for analysis
• Collection inventory data (card names, set names, notes, folders)
• Measurement logs and analysis results
• Subscription and billing records
• Platform usage logs and interaction data

We process your data to:

• Run AI analysis on uploaded card images
• Generate identification, condition, and trim reports
• Produce market value estimates and investment insights
• Maintain your collection and scan history
• Manage subscriptions and billing
• Improve AI model accuracy and Platform functionality

Your data is stored on secure, cloud-based infrastructure. Card images and analysis results are linked to your account and may be retained for the duration of your subscription to allow you to access your history and reports.

Photo compression & optimization:

• When you upload a card photo, SCADapp automatically resizes it to a maximum of 1200 pixels and compresses it to approximately 150 KB — roughly a 90% reduction from a typical phone photo
• This happens in your browser before upload, preserving visual quality for analysis while keeping storage lean
• Compressed photos ensure your vault loads quickly even with hundreds of cards

File validation:

• Only JPG, PNG, WebP, and PDF files are accepted (maximum 10 MB per file)
• Uploads are validated twice — once in your browser and again on the server
• Executables, scripts, and unsupported file types are rejected before reaching storage

Row-level security:

• Every card record is locked to the account that created it — no other user can read, edit, or delete your collection
• Access controls are enforced at the database level, not just in the application

Storage capacity by tier:

• Free — up to 10 cards (~1.5 MB)
• Pro — up to 250 cards (~37 MB)
• Dealer & Enterprise (Coming Soon) — unlimited

Payment information is processed and stored by our payment provider (e.g., Stripe) and is not stored on SCADapp's servers.

Two ways to store your data:

• Cloud Vault (S3-backed) — every saved card and uploaded file lives on secure Amazon S3 infrastructure, accessible from any device
• Local Vault Sync — optionally download cards as self-contained HTML reports (photo + AI analysis + scan history embedded) straight to a folder on your computer, fully offline-capable

Complete storage and security details are available on our Storage & Security and Vault & Storage pages.

Uploaded card images and associated data may be processed by AI models — including third-party AI services — to generate analysis results. This processing may involve transmitting your data to external servers for computation.

We do not sell your card images, collection data, or personal information to third parties.

Your data may be shared with:

• AI and cloud service providers that power our analysis
• Payment processors handling your subscription billing
• Legal authorities when required by applicable law

All third parties are contractually bound to protect your data and use it only for the purposes we specify.

We retain your data for as long as your account is active. Upon account deletion, we will remove your personal data and uploaded content within a reasonable period, except where retention is required by law.

Automated retention windows:

• Soft-delete recovery — when you delete a card, it is hidden from your view but retained for 30 days, during which it can be fully restored
• Permanent purge — after the 30-day recovery window, deleted cards are permanently removed by an automated nightly cleanup process
• Scan history — analysis and scan history entries are automatically removed after 180 days
• Nightly cleanup — an automated process runs at 2:00 AM to enforce these retention windows without any action required from you

Aggregate, anonymized data that cannot identify you may be retained indefinitely for analytics and model improvement.

You have the right to:

• Access your stored data
• Request corrections to inaccurate data
• Export your collection and analysis data
• Request deletion of your account and associated data
• Withdraw consent for data processing (which may limit Platform access)

We use industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews. Despite these measures, no system is completely secure, and we cannot guarantee absolute data protection.

We may revise this Data Usage Policy from time to time. Updates will be posted on the Platform, and continued use after changes take effect constitutes acceptance.

SCADapp

Email: support@scadapp.ai