Gradient
Back to Home

Privacy Policy

Last updated: October 2026

At Gradient, we understand that your collection is more than just assets—it's a passion. Protecting your personal data and the privacy of your collection is a core part of our mission. This Privacy Policy (“Privacy Policy”) explains how we handle your information across our Services (as defined in our Terms). By using our Services, you agree to this Privacy Policy. The Services are provided by Olympic Collectible AI Solutions, Inc. and/or its subsidiaries and affiliates (referred to in this document as “Gradient,” “we,” “our,” or “us”).

1. Information We Collect

To provide a seamless experience from “raw to sold,” we collect the following:

  • Account Information: Your name, email, phone number, and encrypted password.
  • Logistics Data: Physical shipping addresses and tracking numbers for inbound and outbound shipments.
  • Collection Metadata: High-resolution images of your cards, AI-generated “Digital Fingerprints,” condition reports, and valuation history.
  • Payment Information: Billing details are processed through secure, PCI-compliant third-party processor Stripe. We do not store your full credit card numbers on our servers.
  • Essential Cookies and Similar Technologies: We use required cookies and browser storage for sign-in, checkout and payment processing, security, fraud and abuse prevention, and core site functionality. These technologies are always active and cannot be switched off through Privacy Preferences because the related services would not function properly.
  • Advertising and Usage Data: Optional Meta Pixel and TikTok Pixel technologies remain off until you accept them using the Privacy Preferences control. After you accept optional advertising tracking, Meta and TikTok receive the page URL and related browser and advertising context that their own software supplies: referrer and campaign or click information, IP address, timestamps, browser, user-agent and device information, provider cookies or browser identifiers, and PageView or landing-page measurements. On deliberately public catalog or share pages, that page URL may contain a public product, listing, referral, or share identifier. Pages whose address identifies a private order, sell-back operation, transfer, claim code, or admin resource are excluded: we do not initialize the pixels on a direct visit to those pages. If a pixel was already loaded on an earlier page, its code may remain in the browser, but Gradient suppresses advertising page-view and commerce events while the excluded page is being visited. Gradient's custom AddToCart, InitiateCheckout, and Purchase events are limited to event type, currency, aggregate monetary value, aggregate quantity, and a deduplication identifier. Gradient does not add product names, categories, SKUs, listing IDs, or product IDs as custom commerce-event fields. We use this information for advertising measurement, attribution, campaign optimization, and ad delivery. You can initially reject optional advertising measurement or later withdraw it using the Privacy Preferences control. After withdrawal, Gradient stops optional advertising measurement; an already loaded provider may receive a limited request recording the changed consent choice.
  • Referral Attribution: If you arrive through a referral link, we set a first-party cookie that stores an opaque referral-link code for 30 days. If that code is still present when you register, we may connect it to your account to attribute the referral to the referring link.
  • Referral Link Analytics: When you open an active referral link, we also set a first-party referral_visitor_id cookie containing a random browser identifier. The cookie expires 1 year after your most recent active referral-link visit. We use it solely to estimate how many distinct browsers opened each referral link without repeat visits inflating the number. The identifier does not contain your name, email, account ID, IP address, device details, or location. A per-link cryptographic hash is retained with the link's analytics and is not connected to your account.

2. How We Use Your Data

We use your information to:

  • Analyze & Value: Power our AI models to provide accurate condition reports and market estimates.
  • Secure & Protect: Maintain a definitive “Digital Fingerprint” record to protect against loss or condition disputes.
  • Facilitate Sales: Push listings to third-party marketplaces and manage the logistics of a completed sale.
  • Improve Technology: Use anonymized collection data to train and refine our AI grading and valuation algorithms.
  • Advertising Measurement and Delivery: Measure and attribute visits, referrals, add-to-cart activity, checkout initiations, completed purchases, and campaign performance, and support campaign optimization and ad delivery for Meta and TikTok advertising.
  • Credit Referrals: Attribute a new registration to the referral link it came from, using the first-party referral cookie described above (retained for 30 days).
  • Communicate: Send essential service updates, such as intake confirmations, renewal reminders, and sold notifications.

3. Sharing and Disclosure

We do not sell your personal information. We share data only in these specific contexts:

  • Marketplaces: If you choose to list an item, we share card details and images with platforms like eBay to facilitate your listings.
  • Technical Service Providers and Sub-Processors: To the extent we use third-party cloud hosting and AI infrastructure, we share data as necessary to provide the Services. All such providers are contractually bound to protect your data.
  • Logistics and Carriers: Sharing necessary logistics data with our shipping-label provider (EasyPost) and with carriers (USPS, FedEx, UPS) to handle your shipments.
  • Order and Bookkeeping System: Sharing order, payment, payout, and contact details with the order-management and bookkeeping system we use to fulfill orders, credit your wallet, and keep our books.
  • Payment Processors: Sharing necessary data with PCI-compliant partners (e.g., Stripe) to facilitate payments.
  • Advertising Partners: If you accept optional advertising tracking, sharing public page and landing-page measurements, aggregate add-to-cart, checkout-initiation, and completed-purchase events, campaign and click information, and related browser and provider identifiers with Meta and TikTok for advertising measurement, attribution, campaign optimization, and ad delivery.
  • Legal Compliance: Disclosing information if required by a valid legal order, or to protect the safety and property of Gradient and our users.

4. Data Security & Storage

  • Digital Security: We use industry-standard encryption and firewalls to protect your digital records.
  • Physical-Digital Link: Your physical cards in the Gradient Vault are linked to your digital account via secure internal identifiers to ensure your privacy is maintained within our facility.
  • No Absolute Guarantee: While we strive to use every commercially reasonable protection, no method of transmission or electronic storage is 100% secure.

5. Your Rights and Choices

  • Access & Correction: You can view and update your personal info and collection data through your dashboard.
  • Marketing Preferences: You can opt-out of non-essential communications at any time via the “unsubscribe” link.
  • Ad Tracking Controls: Optional advertising measurement remains off until you accept it. You can later withdraw your choice using the Privacy Preferences control and can also use browser settings and Meta or TikTok account controls.
  • Account Deletion: You can delete your account in Settings (on the web, under Profile). See Data Retention and Account Deletion below.

6. Data Retention and Account Deletion

You can delete your account once your wallet balance is zero and no money is still on its way to or from it, we hold no cards or packs for you, the orders we owe you have been delivered and no consignment is in progress. A card you sold on eBay holds deletion for 60 days after the sale, because eBay returns and claims can still reach your wallet. Deleting your account forfeits any rewards points, as described in the Rewards Terms. Your account is deleted immediately, and we delete your personal data or remove it from the records we keep. Remaining records are removed or anonymized within 30 days.

Deleting your Gradient account also closes an OCS My Cards account that uses the same email address.

After your account is deleted, we keep:

  • Transaction Records: Records of your orders, payments, refunds, taxes, wallet activity, payouts, sell-backs, and consignment sales, for as long as necessary for legal, tax, and business purposes. These records no longer include your name, email, or address.
  • Consigned Cards: If you consigned cards with us, you stay on the records of those cards as their consignor.
  • Invoices: Invoices we are legally required to keep. An invoice is a tax document, so it keeps the name and billing details it was issued with.
  • Payee Identity and Tax Information: If you received payouts, your payee identity and tax information are held by our payment processor, Stripe, under Stripe's own retention policies.
  • Shipping Records: Shipment records created through our shipping-label provider, EasyPost, which may include shipping addresses, are retained by EasyPost under its own policies.
  • Suspended Accounts: If your account was suspended, a one-way hash of your email address and the reason for the suspension, so that a suspension cannot be avoided by deleting and re-registering.
  • Deleted Accounts: A one-way hash of your email address for 2 years, so that new-member offers and referral bonuses can't be claimed again by deleting and re-registering.
  • Email Opt-Outs: If you unsubscribed from our emails, a one-way hash of your email address, so that we continue to honor your choice.
  • Other Services We Use: Data already sent to these services stays with them under their own policies: SendGrid (email delivery logs), Meta and TikTok (advertising events already sent, only if you accepted optional advertising tracking), Mapbox (address lookups), Slack (internal support notifications), and Sentry (error reports).
  • What Deletion Can't Reach: Payment records held by Stripe, under Stripe's own retention policies; emails we have already sent you; and your name where it was typed into free text, a PDF or an attachment, or mentioned on someone else's record.
  • Logs and Backups: Server logs expire after 90 days. Gradient's database backups expire after 7 days; backups of our order and bookkeeping system (hosted on Odoo.sh) expire on that service's own schedule.

7. International Data Transfers

Gradient is based in the United States. If you are accessing our services from abroad, your data will be transferred to and processed in the U.S., where data protection laws may differ from your home jurisdiction.

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our technology or legal obligations. We will notify you of any material changes via email or a prominent notification in the Services.

9. Contact Us

If you have any questions regarding your privacy, please reach out to our privacy team at: [email protected].