Privacy Policy
Last updated: 2026
Note: Plain-language summary. Have counsel review for your jurisdiction before launch.
What we collect
- Account: email, display name, Dotto Life handle, avatar
- Profile: mailing address, phone, card interests (optional)
- Payment: processed by Stripe — we store customer IDs, not card numbers
- Grading submissions and photos you upload
- Marketplace listings, orders, messages, and reviews
- Device and usage data (IP, browser, pages viewed) for security and analytics
How we use it
- Operate the grading service, marketplace, and live shows
- Process payments and payouts via Stripe
- Ship graded cards and marketplace orders via Shippo
- Send transactional emails (order updates, payment links, shipping notices)
- Prevent fraud, enforce our Terms, and comply with law
Who we share with
- Stripe (payments & payouts)
- Shippo (shipping labels & tracking)
- Supabase (database & auth infrastructure)
- Email delivery providers for transactional messages
- Law enforcement when legally required
We do not sell your personal information.
Your choices
- Update or delete profile information from your profile page
- Unsubscribe from marketing email via the link in any email
- Request account deletion by emailing us
- Regional rights (GDPR, CCPA) honored on request
Data retention
Order, transaction, and grading records are retained for as long as required by tax and consumer-protection law. Account data is deleted within 30 days of a verified deletion request, except records we're required to keep.
Contact
Privacy questions: contact@dottocardco.com
