Privacy policy

Your data is yours

Grails stores the collection data you enter so we can show it back to you across your devices. We never sell your personal data.

What we collect

Account details (via Google or Apple sign-in), the card and collection data you add, and basic usage analytics to keep the app running well.

How we use it

To provide the service: syncing your collection, computing values and profit/loss, and powering the marketplace. We do not share your collection with other users unless you list a card publicly.

Export and deletion

You can export your full collection to CSV at any time and delete your account whenever you choose. Your data leaves with you.

What Buy now adds to your privacy

• Your delivery address is stored on the order and shown to exactly one person: your seller, only after you’ve paid, so they can post your card. It never appears on a public page.
• Seller identity checks are run entirely by Stripe. Your ID documents and bank details go to Stripe, not to Grails — we only ever see “verified” or “not yet”.
• Tracking events for your parcel are received from the courier’s systems and shown on your order to both buyer and seller.
• Order records — what was bought, for how much, and how the dispute went, if there was one — are kept after the order closes, because they’re the evidence for refunds, card-network disputes and tax. Deleting your account doesn’t erase the other party’s record of the deal.
• Order emails come from orders@grails.com.au and only ever link to your order — never to a payment page. That’s how you can tell a real one from a fake.

Contact

Questions about privacy? Reach us through the Help Center.