Privacy Policy

This Privacy Notice for Card Notes Pro ("we," "us," or "our") describes how and why we might access, collect, store, use, and share your personal information when you use our services, including when you visit cardnotespro.com or use our Chrome extension.

01 What Information Do We Collect?

Personal information you provide

We collect personal information that you voluntarily provide when you express interest in our products or contact us. This includes your email address when you purchase a subscription through Whop.

Information collected automatically

When you use our Chrome extension, we store your listing notes, star ratings, and custom tags in your browser's local storage and optionally in Firebase cloud storage. This data belongs to you and is tied to an anonymous user ID generated on first install — not to your personal identity.

Sensitive information

We do not process sensitive personal information such as racial or ethnic origins, sexual orientation, or religious beliefs.

Third-party data

We do not collect any information from third parties beyond what is necessary to process your subscription via Whop.

02 How Do We Process Your Information?

We process your information to:

• Provide, operate, and improve the Card Notes Pro extension and website
• Sync your notes and ratings across devices via Firebase cloud storage
• Verify active subscriptions through the Whop API
• Respond to your support requests and inquiries
• Comply with applicable legal obligations

We process your information only when we have a valid legal reason to do so.

03 What Legal Bases Do We Rely On?

We process your personal information only when it is necessary and we have a valid legal basis, including:

• Consent — where you have given explicit permission, such as agreeing to our terms when purchasing a subscription
• Contract performance — to deliver the services you have paid for
• Legitimate interests — to improve our product and prevent fraud, provided those interests do not override your rights
• Legal obligations — where required by applicable law

If you are located in Canada, you may withdraw your consent at any time by contacting us at michaelmessina37@gmail.com.

04 When and With Whom Do We Share Your Information?

We do not sell your personal information. We may share information in the following limited circumstances:

• Whop — our subscription and payment processor. When you purchase a subscription, Whop handles payment processing and license key generation.
• Google Firebase — used to sync your notes and ratings across devices. Only your anonymous user ID and your listing data (notes, ratings, tags) are stored.
• Business transfers — in connection with any merger, sale, or acquisition of all or part of our business.

We have not disclosed, sold, or shared any personal information to third parties for commercial purposes in the past 12 months, and we do not intend to in the future.

05 Third-Party Websites

Our website and extension may link to third-party websites such as eBay, Whop, and others. We are not responsible for the privacy practices of those sites. Any data you provide to third-party sites is governed by their own privacy policies. We recommend reviewing their policies before providing any personal information.

06 How Long Do We Keep Your Information?

We retain your personal information only as long as necessary to provide our services and fulfill the purposes outlined in this notice, unless a longer retention period is required by law.

Your notes, ratings, and tags stored in Firebase are retained as long as your account is active. You may delete your data at any time by contacting us. When we have no ongoing legitimate business need to process your information, we will delete or anonymize it.

07 How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures to protect your personal information. Your notes data is stored in Google Firebase, which provides industry-standard security including encryption at rest and in transit.

However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. While we do our best to protect your information, transmission of personal information to and from our services is at your own risk.

08 Do We Collect Information From Minors?

We do not knowingly collect data from or market to children under 18 years of age. By using our services, you represent that you are at least 18 years old. If we learn that personal information from users under 18 has been collected, we will take reasonable measures to promptly delete such data.

If you believe we may have collected information from a minor, please contact us at michaelmessina37@gmail.com.

09 What Are Your Privacy Rights?

Depending on where you are located, you may have the following rights regarding your personal information:

• Right to access and obtain a copy of your personal information
• Right to request correction or deletion of your personal information
• Right to restrict or object to the processing of your personal information
• Right to data portability
• Right to withdraw consent at any time

To exercise any of these rights, please email us at michaelmessina37@gmail.com. We will respond to your request in accordance with applicable data protection laws.

10 Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") feature you can activate to signal your privacy preference not to have your browsing activities tracked. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized, and we do not currently respond to DNT signals.

California law requires us to disclose how we respond to DNT signals. Because there is currently no industry standard for recognizing or honoring DNT signals, we do not respond to them at this time.

11 Do United States Residents Have Specific Privacy Rights?

If you are a resident of California, Colorado, Connecticut, Virginia, or other US states with applicable privacy laws, you may have additional rights including the right to:

• Know whether we are processing your personal data
• Access your personal data
• Correct inaccuracies in your personal data
• Request deletion of your personal data
• Opt out of the sale or sharing of personal data (we do not sell personal data)
• Non-discrimination for exercising your privacy rights

To exercise these rights, email us at michaelmessina37@gmail.com. We will verify your identity and respond in accordance with applicable law. If we decline your request, you may appeal by emailing us and we will provide a written explanation.

12 Do We Make Updates to This Notice?

Yes, we may update this Privacy Notice from time to time to reflect changes in our practices or applicable laws. The updated version will be indicated by an updated "Last updated" date at the top of this page. We encourage you to review this notice periodically.

13 How Can You Contact Us?

If you have questions or comments about this notice or wish to exercise your privacy rights, please contact us: