CollectChase

Privacy Policy

Last updated August 27, 2026

CollectChase ("we", "us") helps you research collectibles and find listings for them across online marketplaces. This policy explains what information we collect, how we use it, and the choices you have. We collect only what we need to run the service — we don't sell your data and we don't show ads.

Information you give us

  • Account details. Your nickname, email address, and a password (stored only as a secure hash). If you sign in with Google, we receive your name, email address, and profile picture from Google. If you set up a passkey or two-factor authentication, we store the credentials needed to verify you (a passkey's public key, or your authenticator secret and backup codes).
  • Content you create. Chat messages, photos you upload, items in your collection, notes, saved searches ("watches"), and research history.
  • Shopping preferences. Countries you can receive shipments in, the kinds of payment methods you use (for example "PayPal" or "Credit card" — never actual card numbers), preferred condition, and shipping-cost limits. These help us filter listings for you.
  • Sharing. If you share a research thread, we store the share link and, for email-gated shares, the list of email addresses you allow. When a viewer opens an email-gated share, we collect the email address they enter and send it a verification code (we store only a hash of the code, and expired codes are deleted automatically).

Information collected automatically

  • Session records. When you sign in we record your IP address and browser user agent as part of the session, which helps secure your account.
  • Usage metering. We track your use of research features (for example AI model usage and credits consumed) to run our plans and prevent abuse.

We use cookies only to keep you signed in, and your browser's local storage to remember verified access to shared links. We do not use advertising or third-party analytics trackers.

How we use your information

  • To provide the service: identifying items, running research tasks, and finding marketplace listings that match your watches and preferences.
  • To operate your account, plan, and credits.
  • To keep the service secure, including rate limiting and preventing abuse.

AI processing

CollectChase is an AI-assisted product. Messages and photos you submit for research are sent to AI models, accessed through an AI gateway, to generate identifications, answers, and search plans. We only send what is needed to complete your request.

Service providers

We share data with a small set of providers who run parts of the service:

  • Convex — our backend, database, and file storage. Your account data and content live here.
  • Cloudflare — hosts the application and performs browser-based lookups of marketplace listings.
  • Google — optional sign-in with your Google account, and web fonts served from Google Fonts (which involves your browser requesting files from Google).
  • AI gateway and models — as described under "AI processing" above.
  • Marketplaces (such as eBay and Poshmark) — your search queries and ship-to country are sent when we look for listings on your behalf. Your identity is not shared with them.
  • Browserbase — browser infrastructure we use to load marketplace pages when searching for listings on your behalf. It receives the search queries and pages involved, not your identity.
  • Resend — sends our emails, such as verification codes for email-gated share links. It receives the recipient's email address and the message content.
  • Polar — our payments provider and merchant of record. If you buy a plan or credits, Polar processes the payment; we share your email address and account ID with Polar, and your card details go directly to Polar — we never see or store them.

Beyond these providers, we only disclose information if required by law or to protect the service and its users.

Retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time from the Account page. Deleting your account permanently removes your research history, chats, photos, collection, watches, preferences, share links, and billing records from our database. You can also revoke an individual share link at any time, which immediately cuts off access to it.

Security

Passwords are stored hashed, connections are encrypted in transit, and you can add passkeys or two-factor authentication for extra protection. No system is perfectly secure, but we design for least access.

Your rights

You can view and update your account details in the app, and delete your account (and its data) yourself. Depending on where you live, you may have additional rights — such as access, correction, or portability — which you can exercise by contacting us.

Children

CollectChase is not directed at children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we'll update the date at the top. Material changes will be highlighted in the app.

Contact

Questions about privacy? Email help@collectchase.com.