How we handle your information.
Sawtooth Consignment ("we," "us," or "our") operates a sports card and Pokémon card consignment service based in Nampa, Idaho. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what rights you have over it.
By creating an account or using our Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Account Information
When you create an account, we collect your name and email address. Account creation and authentication are handled by Clerk, a third-party identity provider. Clerk manages your password securely — we never receive, see, or store your raw password. We receive from Clerk only a user identifier and your basic profile fields (name and email).
1.2 Consignment Information
When you consign cards with us, we collect and record:
- The cards you send us (descriptions, quantities, and any notes you provide).
- Photographs we take of your cards during intake and listing.
- Metadata associated with those photos (card condition notes, listing details, sale prices).
- Communications related to your submission, such as messages about your batch.
1.3 Payout Information
Payouts are processed through Stripe. You complete Stripe's onboarding flow directly with Stripe, providing your legal name, address, tax ID, and bank or debit information to them. We do not see, receive, or store your raw banking or tax ID details. We receive from Stripe only:
- A Stripe connected-account identifier, and
- High-level account status (e.g., payouts enabled or pending verification).
1.4 Communications
If you email or message us, we retain those communications to respond to your inquiry and for our records.
1.5 Usage Data
Our servers automatically collect standard technical logs when you visit our website, including your IP address, browser type, pages accessed, and timestamps. We use this solely for security monitoring and debugging. We do not use it for advertising or behavioral profiling.
2. How We Use Your Information
We use the information we collect only for the following purposes:
- To process your consignment — list your cards on eBay, handle buyer communication, ship sold cards, and pay you your share.
- To authenticate you when you sign in to your account portal (via Clerk).
- To send you transactional emails — batch received, card listed, sale completed, payout initiated.
- To generate listing copy — card photos are sent to Anthropic's Claude API to produce eBay listing descriptions. No personal information beyond the card image is included.
- To meet our legal and tax obligations, including issuing or facilitating 1099-K reporting if your proceeds reach IRS thresholds.
- To detect fraud and protect the integrity of our service.
We do not use your information for advertising, behavioral tracking, or any purpose not listed above.
3. Third Parties We Share Information With
We share information only as necessary to operate the Service, and only with the providers listed below. We do not sell your information to anyone.
| Provider | Purpose | Their Privacy Policy |
|---|---|---|
| Clerk | Authentication & account management (sign-up, sign-in, password hashing). We never receive your raw password. | clerk.com/privacy |
| Stripe | Consignor payouts via Stripe Connect. You complete their onboarding directly; we receive only a connected-account ID and status — not your banking details. | stripe.com/privacy |
| eBay | Your cards are listed on eBay. The buyer transaction flows through eBay's platform and their terms apply to buyers. | ebay.com/privacycenter |
All providers listed above are contractually required to handle your information in accordance with applicable privacy law and their own published privacy policies.
4. Cookies
We use two cookies:
__session(set by Clerk) — keeps you signed in to your account. This cookie isHttpOnly,SameSite=Lax, andSecureover HTTPS.- Flask session cookie — stores lightweight site preferences. Also
HttpOnlyandSameSite=Lax.
We do not use advertising cookies, cross-site tracking cookies, or any third-party analytics cookies. You can block or delete cookies via your browser settings, though doing so may prevent you from staying signed in.
5. Data Retention
We retain your information only as long as necessary for the purpose it was collected or as required by law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account info (name, email) | Duration of account + 7 years after closure | IRS / consignment record-keeping |
| Payout records | 7 years after most recent payout | Tax and audit compliance |
| Card photos & listing data | Indefinitely | Sales history; listing-quality improvement (no personal data in photos) |
| Server logs (IP, browser, page) | 90 days, then deleted | Security monitoring & debugging |
| Legal-acceptance audit trail | Life of account + 7 years | Compliance & dispute resolution |
You may request deletion of any personal information not subject to a legal retention requirement — see Section 6 (Your Rights) below.
6. Your Rights
Regardless of your state of residence, we extend the following rights to all users:
| Your Right | What It Means |
|---|---|
| Access | Request a copy of the personal information we hold about you. |
| Correct | Ask us to fix inaccurate or incomplete information. |
| Delete | Ask us to delete personal information we are not required by law to retain. |
| Port | Receive your account and sales data in a portable, machine-readable format. |
| Opt Out of Sale | N/A — we do not sell or share your information for advertising purposes. |
| Non-Discrimination | We will not deny service or change your pricing because you exercise any of these rights. |
To exercise any of these rights, email us at [email protected]. We will acknowledge your request within 5 business days and fulfill it within 30 days where the law permits. You can also update your email address or close your account directly from your account settings page.
Idaho does not yet have a comprehensive consumer privacy law as of this writing. However, we honor the rights above for all users regardless of location. If you are a California resident, additional rights may apply under the CCPA/CPRA. Contact us for more information.
7. Security
- Passwords are hashed and managed entirely by Clerk. We never see them.
- Authentication cookies are
HttpOnly,SameSite=Lax, andSecureover HTTPS. - Card images and database backups are stored on access-controlled infrastructure (Cloudflare R2, Render).
- All data transmitted between your browser, our servers, and our providers uses TLS encryption.
- Payout and card analyzer requests are transmitted over encrypted connections.
No system is 100% secure. While we take reasonable precautions, we cannot guarantee the absolute security of your information.
8. Data Breach Notification
If we discover a security breach that involves your personal information, we will notify affected users by email within 72 hours of confirming the breach and comply with all applicable state data breach notification laws. Notification will describe the nature of the breach, the information affected, and steps you can take to protect yourself.
9. Children
Our Service is not directed to anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately at [email protected] and we will delete the account and associated information promptly.
10. Third-Party Links
Our website or communications may contain links to third-party websites such as eBay. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing them any personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document. For material changes — those that meaningfully affect how we handle your information — we will:
- Prompt you to review and re-accept the updated policy the next time you sign in, and
- Send an email notification to all active account holders.
Your continued use of the Service after a material change takes effect constitutes your acceptance of the updated policy.
12. Contact Us
For privacy questions, rights requests, or concerns:
[email protected]
Sawtooth Consignment · Nampa, Idaho