Privacy Policy

PokeROI (“we,” “our,” or “us”) provides financial record-keeping and tax reporting tools for Pokemon TCG collectors and resellers. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using PokeROI, you agree to the collection and use of information as described in this policy.

Account data. When you sign up, Clerk (our authentication provider) collects your name and email address. We store a copy of your email, first name, and last name in our database to associate your financial records with your account.

Financial transaction data. We store the transaction records you enter: purchase prices, sale prices, grading fees, lot details, and any other data you input into the app. This is the core data the service requires to generate tax reports and ROI calculations.

Card and price data. We fetch card information from TCGdex and market price data from PokeTrace. This data is not personal; it is publicly available card database information.

Payment information. Payments are processed by Stripe. We never see or store your credit card number, CVV, or full payment details. Stripe stores your payment method and provides us with a customer ID and subscription status.

Usage data. We use PostHog to collect product analytics about how the app is used (pages visited, features used). Once you sign in, this activity is linked to your account identifier (not your email), including masked session replay (inputs and on-screen text are masked before capture, so card and financial values are never recorded). We use Sentry to collect error reports, which may include technical details about your browser and operating system. Neither contains your financial transaction data.

We use the information we collect to:

• Provide the tax reporting, cost basis tracking, and ROI calculation service
• Process payments and manage your subscription via Stripe
• Associate your financial records with your account across sessions
• Diagnose and fix errors (Sentry)
• Understand how the app is used to improve it (PostHog)
• Send transactional emails related to your account (handled by Clerk)

We do not use your financial transaction data for advertising or sell it to third parties.

We share data only with the third-party services required to operate PokeROI. Each service has its own privacy policy:

• Clerk: authentication and user identity
• Stripe: payment processing and subscription management
• Sentry: error monitoring
• PostHog: product analytics and masked session replay
• Neon: database hosting (PostgreSQL)
• Vercel: application hosting
• Upstash: caching layer (Redis)
• PokeTrace: card market price data
• TCGdex: card database

We do not sell, rent, or trade your personal data to any third party.

Account and financial data is retained while your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law.

Financial records may be retained for up to 7 years to align with IRS record-keeping recommendations for tax purposes.

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your transaction data

To exercise these rights, contact us at privacy@pokeroi.app.

PokeROI uses cookies for authentication and analytics. Clerk sets a session cookie required for you to stay logged in. PostHog sets an analytics cookie to track anonymous usage patterns. You can disable cookies in your browser settings, but this will prevent you from using the authenticated features of the app.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email. Continued use of PokeROI after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at privacy@pokeroi.app.