Drop Zone Privacy Policy
Operated by DropZone Cards LLC (an Iowa limited liability company), Des Moines, Iowa, USA · Effective August 15, 2026 · Version 2026-08-15
This Privacy Policy explains what information Drop Zone (“Drop Zone,” “we,” “us”) collects, how we use and share it, how long we keep it, and the choices and rights you have. Drop Zone is a software-as-a-service tool that helps trading-card sellers identify cards, price them against market comparables, and analyze, list, and optimize their eBay store. It is a software subscription — we are not a marketplace, we do not sell trading cards, and we are not affiliated with, endorsed by, or sponsored by eBay Inc.
This policy works together with our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.
1. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account information | Email address, password (stored only as a salted hash — we never store your plaintext password), business/store name, your seller-profile answers at signup | You |
| eBay connection | OAuth access & refresh tokens for your eBay account (stored encrypted at rest), your eBay user ID | eBay, via your authorization |
| Store data synced from eBay | Your listings, inventory, item specifics, pricing, promotions, sales, traffic/analytics, and order records. Order records include buyer-provided information such as buyer usernames, names, shipping addresses, and order details. | eBay API, on your behalf |
| Card images & content | Photos of cards you upload, and titles/descriptions you or the Service generate | You / the Service |
| Payment information | Subscription tier, billing status, and payment records. Card numbers and payment credentials are collected and stored by our payment processor (Stripe) — not by Drop Zone. We receive only tokens and transaction metadata. | You, via Stripe |
| Consent & legal records | Your acceptance of our terms (version, timestamp, and IP address), automation-consent settings, and your do-not-touch / floor / cost-basis preferences | You |
| Technical & usage data | IP address (recorded with consent events), basic request logs, and privacy-respecting, cookieless product analytics | Automatically |
2. How We Use Your Information
- To provide the Service: sync and analyze your store, identify cards, compute market comparables and recommendations, and — only where you have connected your account and enabled it — carry out the listing, pricing, and offer actions you authorize.
- To operate the AI features described in Section 3.
- To process your subscription, trials, and billing, and to detect and prevent fraud and abuse.
- To secure the Service, enforce our Terms, keep records of consent, and comply with law.
- To provide support and to communicate with you about your account and service changes.
We do not use your store data, buyer data, or card images to train third-party AI models, and we do not sell your personal information.
3. Automated & AI Processing
To identify cards and generate recommendations, Drop Zone sends card images and related listing text to a third-party AI provider (Anthropic) for processing. This processing is used solely to return identifications, descriptions, and recommendations to you. The Service also provides an AI assistant that answers questions about your store; it is advisory only and does not take actions on your account. Recommendations and identifications are estimates and are not guarantees — see the disclaimers in our Terms.
4. How We Share Information
We do not sell your personal information. We share it only with service providers (“subprocessors”) who help us run the Service, and only as needed to provide it:
| Subprocessor | Purpose | Data involved |
|---|---|---|
| Stripe, Inc. | Payment processing & subscription billing | Billing identifiers, payment records |
| eBay Inc. | The marketplace you connect and authorize us to act on | Your store data and the actions you authorize |
| Anthropic, PBC | AI card identification, descriptions, and assistant | Card images and listing text (Section 3) |
| Hetzner Online GmbH | Cloud hosting & data storage (servers located in the European Union — Finland) | All hosted application data |
| Cloudflare, Inc. | Content delivery, DNS, and security/DDoS protection | Network traffic metadata |
We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (subject to this policy).
5. Your Buyers’ Information
Some data we process on your behalf — such as buyer names and shipping addresses in your eBay orders — relates to your customers, not to you. With respect to that data, you are the controller and we act as your processor: we use it only to provide store-operations features to you (for example, order-aware analysis), never for our own marketing, and we do not sell it. You are responsible for handling your buyers’ information in compliance with applicable law and eBay’s policies.
6. Data Retention
We keep your information only as long as needed to provide the Service and for legitimate legal, security, and accounting purposes. In particular: uploaded card images are deleted after a listing is created (eBay then hosts the display images); account, billing, and consent records are retained while your account is active and for a limited period afterward as required by law and for dispute resolution. When you close your account or request deletion, we delete or de-identify your personal data within a reasonable period, except where we must retain limited records to comply with law (for example, tax and payment records).
7. Security
We use technical and organizational measures to protect your information, including: encryption of sensitive credentials (such as eBay tokens) at rest; encrypted connections (HTTPS) in transit; salted, hashed passwords; strict per-account data isolation so one customer cannot access another’s data; and access controls and logging. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
8. Your Privacy Rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights, or delete your account, from your account settings or by contacting us at the address below; you can also disconnect Drop Zone from your eBay account at any time from your eBay settings.
California residents (CCPA/CPRA): you have the rights to know, access, correct, and delete your personal information, and to not be discriminated against for exercising them. We do not sell or “share” your personal information as those terms are defined under California law.
EEA/UK residents (GDPR): our legal bases for processing are performance of our contract with you, your consent (which you may withdraw), our legitimate interests in operating and securing the Service, and compliance with law. You have the right to lodge a complaint with your local data-protection authority.
9. International Data Transfers
Drop Zone is operated from the United States, and our application data is hosted on servers located in the European Union (Finland). If you access the Service from another country, your information may be transferred to, stored in, and processed in the United States, the European Union, and the locations of the subprocessors listed above. We rely on appropriate safeguards for such transfers where required.
10. Cookies & Analytics
Drop Zone uses privacy-respecting, cookieless product analytics and does not use third-party advertising or tracking cookies. We use only the strictly necessary cookies required to keep you signed in and to secure the Service.
11. Children
Drop Zone is a business tool intended for users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to This Policy
We may update this policy from time to time. We will change the version and effective date above and, for material changes, provide notice through the Service. Your continued use after an update means you accept the revised policy.
13. Contact Us
DropZone Cards LLC
Des Moines, Iowa, USA
[email protected]