CardabraPrivacy Policy
Last updated: 22 May 2026
1. Who we are
Cardabra is a tool operated from New Zealand. Contact: support@cardabra.nz. This policy explains how we handle your personal information under the Privacy Act 2020.
2. What we collect
- Account: your email address and Google account identifier when you sign in with Google. We never see your Google password.
- Trade Me connection: an OAuth access token authorising listing on your behalf. Token secrets are encrypted at rest. We do not receive your Trade Me password.
- Content: photos you upload and the card and listing data generated from them.
- Payments: processed by Stripe. We receive confirmation of payment and your purchase history, but we do not store your card details — Stripe handles those.
- Technical: a session cookie to keep you signed in, and basic logs.
3. How we use it
To identify and price your cards, create and manage your Trade Me listings, process credit purchases, provide support, and keep the service secure.
4. Who we share it with
We use the following providers to deliver the service: Google (sign-in), Stripe (payments), Trade Me (listing on your behalf), and Cloudflare (hosting, content delivery, and security). We do not sell your personal information.
5. Storage and security
Your data is stored with access controls, and sensitive credentials are encrypted. No system is perfectly secure, but we take reasonable steps to protect your information.
6. Retention
We keep your data while your account is active and for as long as needed for legal and accounting purposes. You can ask us to delete your account and associated data.
7. Your rights
You may request access to or correction of your personal information, or deletion of your account, by emailing support@cardabra.nz. You may also contact the New Zealand Office of the Privacy Commissioner.
8. Children
Cardabra is not intended for anyone under 18 years of age.
9. Changes
We will post updates to this policy here and note material changes in-app or by email.
10. Contact
Email support@cardabra.nz.