Privacy Policy
Last updated: September 2026
CardMart is a Phase 1 academic thesis project. This page explains what data the demo platform actually stores and why — it's written for transparency, not as a substitute for legal review.
1. What We Collect
- Your name, email, and profile image from Google sign-in.
- Your username, shipping address, and phone number, entered during onboarding.
- Live-camera verification photos you capture when listing an item.
- Name, email, and message text if you submit the contact form.
- A mock wallet address if you connect the demo Web3 wallet.
2. How We Use It
This data operates the marketplace: matching buyers and sellers, routing physical items through the warehouse inspection flow, and letting our team respond to contact form submissions.
3. Where It's Stored
Account, listing, and message data live in a hosted Postgres database (Neon). Verification photo files are stored in Vercel Blob storage. Authentication is handled by Google via Auth.js.
4. What We Don't Do
We don't sell your data to third parties. We don't use your contact form submissions or shipping address for anything beyond operating this demo.
5. Your Rights
You can ask us to delete your account data or contact submissions at any time — reach out through the contact form or email below.
6. Contact
Questions about this policy can be sent to acreforcoding@gmail.com.