How we handle your data.

Who we are

GrailSpy is a subscription service providing card price signals and alerting for trading cards. We operate from Australia and are bound by the Australian Privacy Principles.

What we collect

• Email address
• Account details and subscription tier
• Watchlist and alert preferences
• Billing information (handled by our payment provider)
• Usage and device information
• Support correspondence

How we use it

To provide the service, send alerts, manage subscriptions, improve product quality, comply with legal obligations, and respond to support requests. We never sell your personal information.

Who we share with

Service providers that help us operate: hosting, authentication, email delivery, billing, analytics. All are bound by data protection agreements.

AI processing

Your watchlist data and market queries are processed by AI models (Claude Haiku and Sonnet) to generate alerts and analysis. These providers are bound by strict data handling agreements.

Market data

GrailSpy provides derived price signals from public market data and approved data sources where available. We do not provide or redistribute raw eBay sold listings, raw comp datasets, or private eBay transaction data to users.

Your rights

Under the Australian Privacy Principles you can request access to, correction of, or deletion of your personal information. Email hello.grailspy@gmail.com and we'll respond within 7 days.

Retention

Account data is kept while your account is active and removed within 30 days of deletion, except where retention is required by law.

Complaints

If you believe we've mishandled your information, email us first. If unsatisfied, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Contact

Email: hello.grailspy@gmail.com