Last updated 11 November 2026

Privacy Policy

This explains what personal data PageNine ("PageNine", "we") collects when you use PageNine, why, who we share it with, and the choices you have. We keep it to what the service needs.

1. What we collect

Sellers

• Account: your email address. If you sign in with Google, Google also shares your name and profile picture with us.
• Your shop: shop name, link, table label, binders, page photos, and the cards, prices and settings you add.
• Usage: how many AI card reads your shop uses, and sign-in records and technical logs (such as IP address and browser) kept by our hosting providers for security.
• Payments: if you pay for a plan, your billing name, email, country and what you paid and when. Card details go straight to Stripe; we never see or store card numbers.

Buyers

• Buyers don't need an account. To hold a card, a buyer gives a first name, which only that shop can see. It's removed when the seller marks the card sold or releases it.
• We record what is searched in a shop (the search words and how many results came back), without any name or account, so sellers can see what buyers look for.

2. Why we use it

• To run the service: sign you in, store and show your shop, read cards from your photos, look up market prices, and enforce plan limits.
• To send emails you need: sign-in codes, and important notices about your account or plan.
• To keep PageNine secure, fix problems and understand how it's used so we can improve it.
• To meet legal and accounting obligations.

We don't sell your personal data and we don't use it for advertising.

3. Who we share it with

We use these providers to run PageNine. They process data for us under their own security and privacy commitments:

• Supabase: database, sign-in and photo storage, hosted in Singapore.
• Vercel: hosting the website and app.
• Anthropic: AI that reads the cards in your page photos. Photos are sent only when you ask PageNine to read a page. Anthropic doesn't use this data to train its models.
• Stripe: takes payments for plans and top-ups, and keeps billing records.
• Our email provider: sends sign-in codes.
• Google: only if you choose to sign in with Google.

Market prices and currency rates are fetched from public sources (TCGdex, ExchangeRate-API) using card IDs only; no personal data is sent. Card pictures load from public catalog image hosts. We may also disclose data if the law requires it.

4. Public information

Your shop page is public: anyone with its link or QR code can see your shop name, table label, binders, cards, prices (if you show them) and which cards are held.

5. Where data is stored

Data is stored in Singapore. Some providers process data in other countries, such as the United States. Where that happens we rely on their safeguards for international transfers.

6. How long we keep it

• Your account and shop data: while your account is open. When you delete your account, we delete it within 30 days, apart from backups, which roll off within 30 more.
• Buyers' hold names: until the seller marks the card sold or releases it.
• Search records and AI usage: while the shop's account is open, for insights and billing.
• Payment records: as long as tax and accounting law requires.

7. Cookies and local storage

We use one essential cookie to keep sellers signed in. The app also remembers small preferences on your device (such as which card languages you photograph). We don't use advertising or tracking cookies.

8. Your rights

You can ask to access, correct or delete your personal data, or ask a question about how we handle it, at ouruainc@gmail.com. We'll reply within 21 days. Depending on where you live, including under Malaysia's Personal Data Protection Act 2010, you may also have the right to complain to your data protection authority.

9. Security

Data is encrypted in transit, each shop can only reach its own data, and secrets such as API keys are encrypted at rest. No system is perfectly secure; if a breach affects your data, we'll tell you as the law requires.

10. Children

PageNine isn't aimed at children. Sellers must be 18 or have a guardian's consent, and buyers only share a first name for holds.

11. Changes

If we change this policy in a meaningful way, we'll update the date above and tell sellers by email or in the app.

12. Contact

PageNine, Malaysia. Email: ouruainc@gmail.com.