Privacy Policy
Last updated: July 2026

Data We Collect
We collect account details (such as email), card images, listing metadata, eBay OAuth linkage, billing records, and product telemetry used to operate Hawk.
How We Use Your Data
We use data to identify cards, generate pricing context, create listings, provide account support, and improve reliability and fraud prevention.
Third-Party Services
Hawk uses Supabase (auth, database, storage), Google Gemini AI (card identification; card images are sent to Google's API), eBay API (listing operations), Stripe (payments), 130point (pricing comparisons), Vercel (frontend hosting), and Railway (backend hosting).
Data Retention
Card records and associated media are retained until you delete your account. Operational logs may be retained for security, billing, and legal compliance.
Cookies
Hawk uses authentication/session cookies (including Supabase auth cookies) and onboarding state cookies required for core product flows.
Your Rights
Depending on your location, you may request access, correction, deletion, and portability. Account deletion is available in Settings.
Children
Hawk is not intended for children under 13, and we do not knowingly collect personal data from children under 13.
Changes
We may update this policy as legal and product requirements evolve, and we will communicate material changes.