Privacy Notice

• We collect account and usage information to run the Service (verification history, collections, wishlist).
• Payments are handled by Stripe. We do not store full card details.
• Authentication is handled by Supabase Auth (passwords hashed, not stored in plain text).
• We are not affiliated with Providers; we display Provider data as provided by them.

A) Account information

• Email address, login method (Google or email/password)
• Name and avatar (if provided by Google)
• Account IDs and timestamps

B) Verification & catalog data

• Provider selected, certificate number entered/scanned
• Result metadata returned by Providers (as available)
• Scan/check type (AI/OCR vs Manual), timestamps, status
• Collections, wishlist, tags, notes, custom fields
• Uploaded images you choose to add to items

C) Usage & device information

• IP address (approximate location), device/browser info, logs
• Cookies or similar technologies (for sessions, preferences, analytics where enabled)

We use information to:

• Provide the Service (run checks, display results, save history)
• Maintain accounts and preferences
• Enforce limits/credits and prevent fraud/abuse
• Improve reliability and user experience
• Provide customer support
• Process billing status (via Stripe webhooks/events)

All payments are processed by Stripe. Your payment details are submitted directly to Stripe.

CheckCOA receives limited billing signals (e.g., subscription status, last4/brand may be shown by Stripe in the customer portal, invoice IDs) to manage your access. We do not store full card numbers or CVV.

If you use the Listing Builder, you can connect your own eBay seller account through eBay’s OAuth screen. CheckCOA never receives or stores your eBay password.

What we store

• eBay access and refresh tokens, encrypted at rest. They are never sent to your browser or mobile app.
• Your eBay user ID and username, to show which account is connected.
• The names and IDs of your eBay business policies and inventory locations, so a listing can reference them.
• The shipping origin you enter, and the listings, offers and item numbers CheckCOA created for you.

What we send to eBay

Only what a listing needs: its title, description, category, item specifics, condition, certificate number, quantity, price, business policies and photographs. Photographs are uploaded to eBay Picture Services so eBay hosts them on the listing. CheckCOA verification images are never sent to eBay.

We request only the eBay permissions the feature needs, creating and publishing listings, and reading your seller business policies and identity. We do not request your orders, buyer messages, payouts, or feedback.

Disconnecting and deletion

Disconnect at any time in CheckCOA’s eBay settings, or revoke CheckCOA in eBay under My eBay → Account → Sign in and security → Third-party app access. Disconnecting deletes the stored tokens immediately. CheckCOA is also subscribed to eBay’s marketplace account deletion notifications: when eBay tells us an account was closed or deleted, we delete the connection data we hold for it.

We may share information with:

• Service providers needed to run the Service (hosting, databases, auth, analytics, email support tools), including Supabase and Stripe.
• eBay, when you connect a seller account and ask us to create or publish a listing, see section 5.
• Legal/compliance if required by law.

We do not sell your personal information.

We keep your account and scan history while your account is active. You can request deletion; some records may be retained as required for legal, accounting, or security reasons.

We may process and store information in countries different from yours. We use safeguards where required.

Depending on your region, you may request access, correction, export, or deletion of your data.

Contact: [email protected]

The Service is not intended for users under 16. We do not knowingly collect data from children.

We may update this Notice and will revise the effective date.