Privacy Policy

Last updated: April 1, 2026

Graded World LLC (“Graded,” “we,” “us,” or “our”) values your privacy. This Privacy Policy (“Policy”) describes how we collect, use, disclose, and safeguard information when you use the Graded mobile application, website at gradedworld.com, and related services (collectively, the “Services”).

By accessing or using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with the terms of this Policy, please do not access the Services.

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Services:

• Account Information. When you create an account, we collect your email address or other authentication credentials provided through our third-party authentication provider (Privy). You may also choose to provide a display name and profile avatar.
• Portfolio Information. Card details you add to your portfolio, including grading company, certificate number, grade, card description, images, and cost basis information you choose to enter.
• Listing and Trade Data. Information related to cards you list for sale, trade proposals you create or respond to, asking prices, and transaction details.
• Communications. When you contact us for support, provide feedback, or participate in surveys, we collect the content of those communications along with your contact information.
• User-Uploaded Content. Images and other content you upload, such as card photos for Instagram Story generation or profile avatars.

1.2 Information Collected Automatically

When you access the Services, we automatically collect certain information:

• Device Information. Device type, operating system version, unique device identifiers, app version, and hardware model.
• Usage Data. Features accessed, pages viewed, interactions with the app, session duration, and navigation paths.
• Performance Data. Crash reports, error logs, and performance metrics to help us maintain and improve the Services.
• Network Information. IP address (processed only as necessary for security, fraud prevention, and establishing network connections — never used for marketing or linked to your wallet address).

1.3 Account and Ownership Information

• Public Account Addresses. When you link an account (Solana, Ethereum, or Polygon), we store your public address to display your vaulted cards, balances, and transaction history.
• Public Ownership Data. We access publicly available ownership records associated with your account addresses, including card ownership, balances, and transaction history. This data is already publicly visible.
• Embedded Accounts. If you use our embedded account feature (provided by Privy), your account is created and managed by Privy’s secure infrastructure. Graded does not have access to your private keys at any time.

1.4 Information from Third-Party Sources

We may receive information about you from third-party services:

• Authentication Providers. If you sign in via Google, Apple, or other identity providers through Privy, we receive basic account information (such as email) as authorized by you.
• Ownership Data Providers. We use services like Helius (Solana), OpenSea (Ethereum/Polygon), and similar providers to retrieve publicly available ownership data associated with your account addresses.
• Card Data Providers. We use GemRate and other services to retrieve publicly available grading information, population data, and certification details for cards in your portfolio.
• Market Data Providers. We aggregate publicly available sales data from platforms including eBay and Fanatics Collect to provide fair market valuations.

2. How We Use Your Information

2.1 Provide and Maintain the Services

• Display your portfolio, card valuations, price history, and portfolio performance charts.
• Facilitate trades, listings, and transactions between users.
• Process and display your vaulted card holdings and balances.
• Provide card lookup, pricing data, and market analytics.
• Enable account functionality including balance viewing and fund transfers.

2.2 Improve and Develop the Services

• Understand how users interact with the Services to identify improvements.
• Diagnose technical issues, debug errors, and monitor performance.
• Develop new features and functionality based on usage patterns.
• Conduct research and analysis on an aggregated, anonymized basis.

2.3 Security and Fraud Prevention

• Protect against unauthorized access, fraud, and abuse.
• Verify transactions and deposits in escrow-based trades.
• Monitor for suspicious activity and enforce our Terms of Service.
• Comply with applicable legal obligations, including sanctions screening.

2.4 Communications

• Send service-related notifications (trade updates, listing activity, important account alerts).
• Respond to your support inquiries and feedback.
• With your consent, send promotional communications about new features or updates. You may opt out at any time.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers. We share information with third-party service providers who perform services on our behalf, including authentication (Privy), database hosting (Supabase), ownership data retrieval (Helius, OpenSea), app distribution (Expo/EAS), and card data (GemRate). These providers are contractually obligated to use your information only as necessary to provide services to us.
• Other Users. Certain information is visible to other users of the Services, including your display name, avatar, listed cards, and public trade activity. Your account addresses may be visible in connection with listed cards or trade proposals.
• Transaction Networks. Transactions you initiate through the Services are broadcast to the applicable network (Solana, Ethereum, or Polygon) and become part of the public, immutable ledger. We have no ability to modify or delete this data.
• Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Graded, our users, or the public.
• Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Security

We take the security of your information seriously and implement appropriate technical and organizational measures to protect it, including:

• Encrypted connections (TLS/SSL) for all data in transit.
• Secure, authenticated access to our databases with role-based access controls.
• Third-party authentication infrastructure (Privy) with industry-standard encryption for wallet and identity management.
• Regular security reviews and monitoring for unauthorized access.
• Non-custodial architecture ensuring private keys never touch our servers.

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you use the Services at your own risk.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Services. We may also retain certain information as necessary to comply with legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes.

If you request deletion of your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law. Note that certain transaction records (transfers, ownership changes) cannot be deleted as they are part of the public, immutable ledger.

6. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access. Request a copy of the personal data we hold about you.
• Correction. Request that we correct inaccurate or incomplete personal data.
• Deletion. Request that we delete your personal data, subject to certain exceptions.
• Restriction. Request that we restrict the processing of your personal data.
• Portability. Request a portable copy of your personal data in a structured, machine-readable format.
• Opt-Out. Opt out of promotional communications at any time by following the unsubscribe instructions or contacting us directly.

To exercise any of these rights, please contact us at pat@graded.world. We will respond to your request within 30 days.

7. International Data Transfers

Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. By using the Services, you consent to the transfer of your information to the United States and other jurisdictions where we or our service providers operate.

8. Children’s Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible. If you believe a child under 18 has provided us with personal information, please contact us at pat@graded.world.

9. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services that are not operated by us, including marketplace platforms, transaction explorers, and card grading company websites. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our Services.

10. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As stated above, we do not sell personal information.

To exercise your California privacy rights, contact us at pat@graded.world.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR), including the rights described in Section 6 above. Our legal bases for processing your personal data include your consent, the performance of a contract with you, compliance with legal obligations, and our legitimate business interests.

You may also lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last updated” date at the top of this Policy and, where appropriate, provide additional notice through the Services or via email.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Graded World LLC
Email: pat@graded.world
Website: gradedworld.com