Privacy

Capsule Privacy Policy

Last updated: July 28, 2026

This policy explains how Capsule Collections Corp., doing business as “Capsule” (“Capsule”, “we”, “us”), of 175 Bloor Street East, Suite 1800, South Building, Toronto, Ontario M4W 3R8, Canada, collects, uses, and shares information when you use the Capsule mobile app, collectcapsule.com (including public card pages), Capsule cases, and related services (the “Service”). It applies whether or not you have an account.

Our Privacy Officer is responsible for our compliance with privacy law and can be reached at info@collectcapsule.com.

1. Information we collect

Account and profile. Your email address (and, if you sign in with Google, your basic profile name), your chosen display name, handle, and avatar selection, an account identifier from our sign-in provider (Privy), and the address of the embedded wallet created for your account.

Card content. Photos you take of cards, the resulting Capsule Grade and condition data, and card identification details (for example, the card’s name, set, and number).

Provenance events. Records of registrations, verifications, and transfers: the wallet addresses involved, timestamps, and (if permitted) a city-level location stamp.

Location (city level only). With your permission, when you register, verify, or transfer a card, the app derives an approximate location on your device and reduces it to a city and region before it leaves your phone. We do not store precise GPS coordinates. The city stamp becomes part of the card’s public provenance record. If you decline the location permission, events are recorded without a city.

Device, usage, and log data. How you use the app (screens, feature events), device model and operating system, identifiers used by our analytics provider, crash and diagnostic data, and IP addresses (used for security and rate limiting).

Chip data. Capsule chip identifiers and the cryptographic keys that make tap verification work. We custody chip keys on our servers so cards remain verifiable.

Notifications. If you enable push notifications, a device push token.

Safety and moderation. Reports you submit, your block list, and our enforcement records.

Support. Messages you send us and the contact details you use.

Guest use. If you use scanning or grading without an account, we still process the card images, resulting grades, your IP address, and device information.

2. How we use information

To provide and operate the Service (registering cards, generating grades, recording provenance, verifying taps, processing transfers, showing card pages and profiles); to keep the Service safe (moderation, abuse prevention, rate limiting, securing chips and accounts); to communicate with you (service messages and, if enabled, push notifications); to understand and improve the Service (analytics, diagnostics); and to comply with law.

We do not sell your personal information, we do not show third-party advertising, and we do not track you across other companies’ apps or websites.

3. AI processing of card photos

To generate a Capsule Grade, your card photos and related metadata are sent to Google and processed by Google’s Gemini models under Google’s API terms, with Google acting as our service provider. We use the results to produce the grade shown to you and stored on the card’s record. If you sign in with Google, our use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

4. What is public

The following is visible to anyone, including on the web without signing in: your profile (display name, handle, avatar); card pages, including card photos, the Capsule Grade, and the card’s provenance history (wallet addresses, timestamps, and city-level location stamps); and records written to the Solana public blockchain. Blockchain records are permanent and cannot be edited or deleted by us or anyone. We minimize what goes on-chain (references and wallet addresses, not your name or contact details).

5. Who we share information with

We share information only with service providers who process it for us, and in the limited situations below.

We may also disclose information if required by law or legal process, to protect the rights, safety, or property of Capsule, our users, or the public, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to your information). We never share personal information with third parties for their own advertising.

6. How long we keep information

Account and profile data: while your account is active. Logs and IP data: for a limited period needed for security and rate limiting. Moderation and enforcement records: as long as needed for the safety of the Service and legal compliance. Card records and provenance events: permanently, because they document the physical card (see Section 7). Backups: purged on a rolling basis, typically within 30 days.

7. Deleting your account, and what deletion does

You can delete your account in the app (open your Profile, then Settings, then “Delete account”), or by emailing info@collectcapsule.com from your account email.

Deletion removes your profile (display name, handle, avatar, and activity points) and unlinks the cards you own so they no longer point to your account.

The following is retained after deletion: card records (card photos, grades, and provenance events, identified by wallet address rather than by your name), because they document the physical card itself and keep it verifiable for future holders; blockchain records, which are permanent by design; and moderation or legal records we are required or permitted to keep. Your sign-in identity at our provider Privy is not removed automatically: to have it removed, email info@collectcapsule.com from your account email and we will complete the removal within 30 days.

8. Your choices

Location: decline or revoke the location permission in your device settings; provenance events are then recorded without a city. Camera: used only when you scan; controlled by device permissions. Push notifications: opt in or out in your device settings. Marketing: we currently send only service communications.

9. Your rights

You may request access to, or correction of, your personal information, withdraw consent (which may limit what we can provide), and ask questions or complain by contacting info@collectcapsule.com. We will respond within the time required by law. If you are unsatisfied, you may complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator. If the law where you live (for example, in the European Economic Area, the United Kingdom, or certain U.S. states) grants you additional rights, you can exercise them through the same contact.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided personal information, contact info@collectcapsule.com and we will delete it.

11. Security

We protect information with safeguards appropriate to its sensitivity, including encryption in transit, access controls, and server-side custody of chip keys. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by law.

12. Where information is processed

Our service providers store and process information in the United States and other jurisdictions outside Canada. While information is outside Canada, it is subject to the laws of those jurisdictions and may be accessible to their authorities under lawful process. We use contractual protections with our providers.

13. Changes to this policy

We will post any changes here and update the date above. For material changes, we will notify you in the app or by email before they take effect.

14. Contact

Privacy Officer
Capsule Collections Corp. (doing business as Capsule)
175 Bloor Street East, Suite 1800, South Building, Toronto, Ontario M4W 3R8, Canada
info@collectcapsule.com