Privacy Policy

Account details. When you sign in to the web app at app.tradingcards.dev, we store your email address, and your name and company if you add them.

Portal connections. For each HubSpot portal you connect, we store the name you give it, its portal ID, its hosting region, and the Personal Access Key you provide.

Deployment records. We keep a record of which templates you have deployed to which portal, their versions and times, and the output of each deployment so we can troubleshoot failures.

Website and technical information. We may collect technical information automatically, such as browser type, device information, referring pages, approximate location inferred from IP address, and usage data. On this website, that activity may be processed through HubSpot’s tracking code.

Waitlist and contact submissions. If you joined our waitlist or contacted us, we hold the details you submitted, such as your name, email address, company name, role, and message.

We use account details to sign you in, show you your own portals and deployments, and send service emails such as sign-in links.

We use portal connections and Personal Access Keys only to carry out the actions you request in the app, such as deploying, updating, or removing a template.

We use contact details to respond to inquiries and to send product updates you asked for.

We use aggregate usage data to understand how the site and app are used and to improve performance and content.

A Personal Access Key is checked with HubSpot when you save it and is then stored encrypted. The app only ever shows you a masked version of it, and it is never sent back to your browser.

The web app does not read or copy the CRM records in your portal, such as contacts, companies, or deals. It uses your key to deploy and manage the template projects you ask for. Once deployed, a template runs inside your own HubSpot portal.

You can replace or remove a key, or disconnect a portal, at any time in Settings. Removing a key deletes it from Trading Cards. You can also revoke the key in HubSpot.

We do not sell personal information.

We share information with service providers that help us run Trading Cards: Supabase for accounts, sign-in, and the database; Resend for sign-in emails; HubSpot for the portals you connect and for website tracking; and our hosting and network providers.

We may also share information with legal or professional advisers when needed, or disclose it if required by law, to respond to lawful requests, or to protect our rights, users, or the public.

The web app uses one essential cookie to keep you signed in, and stores your light or dark theme choice in your browser. It does not use advertising or tracking cookies.

This website uses cookies or similar technologies, including HubSpot’s tracking code, to understand aggregate site usage and measure the performance of our marketing pages. You can usually control cookies through your browser settings.

We keep your account, portal connections, keys, and deployment records until you delete them or delete your account. Deleting your account from the Account screen removes all of them. Templates you have already deployed stay in your HubSpot portals until you delete them there.

We retain other information only as long as necessary for the purposes described in this policy or as required by law.

We take reasonable administrative, technical, and organisational measures to protect information, including encrypting Personal Access Keys, but no system is perfectly secure.

You can edit your name and company, remove keys, disconnect portals, and delete your account in the app.

You may be able to request access, correction, deletion, or restriction of your personal information, subject to applicable law.

You can opt out of non-essential email communications using the unsubscribe link in those messages. Sign-in emails are sent only when you ask for one.

If you have questions about this policy, contact us through the website or the channels listed in our product documentation.

Trading Cards is not intended for children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us so we can review and delete it where appropriate.

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date above and post the revised policy on this page.