Privacy Policy

Effective July 23, 2026  ·  Last Updated July 23, 2026

Effective Date: July 23, 2026

Last Updated: July 23, 2026

Company: Art Official Grading LLC, a Colorado limited liability company

Contact: legal@artofficialgrading.com

1. OVERVIEW

This Privacy Policy explains what information Art Official Grading LLC ("AOG," "we," "us") collects when you use the Art Official Grading mobile application (the "App"), how we use it, who we share it with, and the choices and rights you have.

The short version:

• We collect your account info, the card photos you take, and basic usage data.
• Your card photos are processed by third-party AI and image-processing providers to generate condition assessments.
• We do not sell your personal information.
• You can delete your account and data from inside the App at any time.
• If you're not comfortable with how we handle data, please don't use the App.

2. INFORMATION WE COLLECT

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Camera and Photo Access

The App requests camera access to photograph cards. Images are captured for the purpose of generating assessments. We do not access your photo library except where you explicitly select an image.

2.4 What We Do NOT Collect

• We do not collect precise geolocation.
• We do not collect biometric identifiers. Card photographs are not used for facial recognition or biometric identification.
• We do not receive or store your payment card details — all payments are handled by Apple.
• We do not knowingly collect information from children under 13.

3. THIRD-PARTY SERVICE PROVIDERS

Using the App necessarily involves sharing your data with the providers below. If you are not comfortable with this, please do not use the App.

Each provider processes data under its own privacy policy and, where applicable, under a data processing agreement with us. We select providers we believe maintain appropriate security practices.

Important note about AI processing: card images sent to our AI provider are processed to identify the card and assist analysis. We do not send your name, email, or other directly identifying information along with card images.

4. HOW WE USE INFORMATION

We use your information to:

1. Provide the Services — generate condition assessments, render Digital Slabs, maintain your vault
2. Authenticate and secure your account, and detect fraud or abuse
3. Process transactions — tokens, packs, subscriptions
4. Improve the Services — fix bugs, measure performance, refine features
5. Maintain the certification record — preserving graded certificates so a certificate number stays independently verifiable
6. Produce aggregated insights — de-identified, aggregated statistics about cards, categories, conditions, and market trends
7. Communicate with you — service notices, support responses, and (with your consent where required) product updates
8. Comply with law and enforce our Terms

4.1 Legal Bases (for users in jurisdictions requiring them)

Performance of a contract (providing the Services); legitimate interests (security, improvement); consent (where required, e.g. marketing); and legal obligation.

5. HOW WE SHARE INFORMATION

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

We share information only as follows:

• Service providers listed in Section 3, for the purposes described
• Public certificate pages — if you share a Digital Slab, its public certificate page displays the card image, grade, and cert number. It does not display your name or email.
• Legal compliance — where required by law, subpoena, or legal process, or to protect rights, safety, or property
• Business transfer — in connection with a merger, acquisition, or sale of assets, subject to this Policy
• With your consent — for any other purpose you approve

5.1 Aggregated and De-Identified Data

We may create and use aggregated, de-identified data — information that does not identify you or any individual — to operate and improve the Services and to produce market insights. Aggregated data is not personal information and is not subject to the restrictions above.

6. DATA RETENTION AND ACCOUNT DELETION

6.1 Deleting Your Account

You may delete your account at any time from within the App: USER tab → DELETE ACCOUNT.

6.2 What Happens on Deletion

Deleted immediately. Deletion runs synchronously when you confirm it — there is no waiting period, no soft-delete, and no recovery window. By the time the request returns, the following are already gone:

• Your account, email address, display name, and authentication credentials
• Your vault contents and collection records
• Your card photographs stored under your account, including the originals
• Your token balances and entitlement records
• Any RAW (ungraded) card pages you published

Retained as a permanent certification record:

A graded certificate is a public record of a grading event, in the same way a certification number printed on a physical slab stays resolvable after the card changes hands. Those entries persist after account deletion, and they carry only:

• The card's identification, grade, and subgrades
• The certificate number and grading date
• The card image shown on the certificate page
• Technical details of the grading run itself — the grading tier, the protocol and engine versions that produced the grade, and whether each face of the card had a measurable border

They do not carry your account identifier, your email, your name, the card's value, or whether it was ever listed or sold. The certificate is not linked back to you.

We do not use your card images or grading outcomes to train, tune, or improve any model. Grading runs against a published formula and a general-purpose vision model provided by a third party. Nothing you submit is retained for machine-learning purposes.

Also retained:

• Transaction records, as required for tax, accounting, and audit obligations
• Aggregated statistics that do not identify you
• Information we are legally required to preserve

6.3 Retention While Active

We retain your information while your account is active and for as long as needed to provide the Services.

7. YOUR PRIVACY RIGHTS

7.1 Colorado Residents (Colorado Privacy Act)

If you are a Colorado resident, you have the right to:

1. Access the personal data we hold about you
2. Correct inaccurate personal data
3. Delete your personal data
4. Obtain a portable copy of your data in a readable format
5. Opt out of the sale of personal data, targeted advertising, and certain profiling

We do not sell personal data, do not conduct targeted advertising, and do not engage in profiling that produces legal or similarly significant effects.

To exercise these rights, use the in-app deletion tool or contact us at legal@artofficialgrading.com. We will respond within 45 days, extendable by an additional 45 days where reasonably necessary, with notice to you. If we deny your request, you may appeal by replying to our response; if the appeal is denied, you may contact the Colorado Attorney General.

We honor universal opt-out mechanisms as required by Colorado law.

7.2 Other U.S. State Residents

Residents of California, Virginia, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights. Contact us at legal@artofficialgrading.com and we will honor applicable rights.

7.3 Verification

To protect your information, we may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising your rights.

8. SECURITY

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your information, consistent with the Colorado Data Security Act (C.R.S. § 6-1-713.5). These include encryption in transit, access controls, server-side authorization rules, and authenticated API access.

No system is completely secure. We cannot guarantee absolute security. You are responsible for safeguarding your account credentials and device.

Breach notification: if a security breach involving unencrypted personal information occurs, we will notify affected Colorado residents within 30 days of determining a breach occurred, and will notify the Colorado Attorney General if more than 500 Colorado residents are affected, as required by C.R.S. § 6-1-716.

9. CHILDREN'S PRIVACY

The App is not directed to children under 13, and we do not knowingly collect personal information from them. Users must be 18 or older to make purchases. If you believe a child under 13 has provided us information, contact legal@artofficialgrading.com and we will delete it promptly.

10. INTERNATIONAL USERS

The App is operated from the United States and intended for U.S. users. If you access it from outside the U.S., your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

11. CHANGES TO THIS POLICY

We may update this Policy. Material changes will be communicated in the App or by email at least 14 days before taking effect, and the "Last Updated" date will change. Continued use after the effective date constitutes acceptance.

12. CONTACT US

Privacy questions or requests: legal@artofficialgrading.com

General support: support@artofficialgrading.com

Mail: Art Official Grading LLC, Colorado, USA

© Art Official Grading LLC. All rights reserved.