Privacy Policy

Arcainer ("we", "our", "us") operates the Arcainer application and website at arcainer.com. Arcainer is a trading card game (TCG) inventory management platform that integrates with Shopify. This policy describes how we collect, use, store, and protect your information when you use our application and Shopify integration.

1. Information We Collect

Account Information

When you create an Arcainer account, we collect your email address and password (stored securely via Firebase Authentication). When you create a store, we collect your store name.

Inventory Data

We collect card inventory data that you enter into the application, including card names, sets, collector numbers, conditions, purchase prices, sale prices, and sale dates. This data is entered by you and stored in association with your store account.

Shopify Data (via Shopify APIs)

When you connect your Shopify store, we access the following data through Shopify's authorized API scopes:

• Products (read/write): We create, update, and delete product listings on your Shopify store to reflect your card inventory. We read product data to sync inventory status.
• Orders (read only): We read order line items (product title, variant ID, price, quantity) to match Shopify POS sales with your Arcainer inventory. We use this to automatically mark cards as sold.
• Publications (read/write): We read and publish products to your active sales channels (Online Store, POS, Shop) so your listings appear where customers can buy them.

Information We Do NOT Collect

Usage Data

We collect basic usage data including login timestamps and error logs to maintain service quality. We do not use tracking pixels, third-party analytics, or advertising cookies.

2. How We Use Your Information

Your information is used solely to provide the Arcainer service:

• Managing your TCG card inventory
• Creating and syncing product listings with your Shopify store
• Tracking purchases, sales, and revenue
• Generating trade-in quotes and public buylists
• Refreshing market pricing for your inventory
• Identifying cards via the Arcainer VP scanner

We do not sell, rent, license, or share your data with third parties for marketing or advertising purposes.

3. Third-Party Services

Arcainer uses the following third-party services to operate:

• Google Firebase (Authentication, Firestore database, Cloud Functions, Hosting) — for account management, data storage, and application hosting
• Shopify — for product listing sync, order processing, and POS integration, accessed only through authorized OAuth tokens with your explicit consent
• Anthropic Claude AI — for card image identification via the scanner feature. Card images are sent to the API for identification only and are not stored by Anthropic
• TCGQA — our proprietary pricing API for card market price data. Anonymized sale and purchase data (card name, price, no store identity) may be used to improve pricing accuracy

4. Shopify Integration Details

When you connect your Shopify store to Arcainer:

• You authorize Arcainer through Shopify's standard OAuth flow
• We store an encrypted access token to make API calls on your behalf
• We use expiring access tokens that are automatically refreshed, following Shopify's security best practices
• We register a webhook to receive order notifications (ORDERS_CREATE) so we can automatically mark cards as sold when they sell through your POS or online store
• You can disconnect your Shopify store at any time from the Arcainer Settings page, which revokes our access

5. Data Storage and Security

• All data is stored on Google Firebase infrastructure within the United States
• Data is encrypted at rest and in transit using industry-standard TLS encryption
• Access to your store data is restricted to authenticated users you have explicitly invited to your store
• Shopify access tokens are stored securely and are never exposed to the client-side application
• Platform administration is restricted to verified admin accounts

6. Data Retention and Deletion

• Your data is retained as long as your Arcainer account is active
• If you uninstall the Arcainer app from Shopify, we automatically remove your Shopify access credentials and refresh tokens in compliance with Shopify's GDPR requirements
• You may request deletion of your entire account and all associated data at any time by contacting us
• Upon account deletion, all inventory data, sales history, quotes, and store settings are permanently removed

7. GDPR, CCPA, and Privacy Rights

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection regulations. You have the following rights:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your personal data
• Data portability — Request your data in a portable format (CSV export is available in-app)
• Restriction — Request restriction of processing
• Objection — Object to processing of your personal data

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

8. Children's Privacy

Arcainer is a business tool intended for use by TCG store owners and is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13.

9. International Data Transfers

Your data is processed and stored in the United States via Google Firebase. If you are located outside the United States, your data will be transferred to and processed in the United States. By using Arcainer, you consent to this transfer.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify active users of significant changes via email or in-app notification. The "Last updated" date at the top of this policy reflects the most recent revision.

11. Contact Us

For questions about this privacy policy, data requests, or privacy concerns:

Email: arcainerco@gmail.com
Website: arcainer.com