Privacy Policy - ShoCase

At ShoCase, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

Information You Give Us

When you create an account or use our services, we may collect:

Name and contact information (email address, phone number)
Account credentials. Passwords are stored only in hashed form. If you sign in with Google, we receive your name, email address, and Google account identifier — never your Google password.
Profile information (bio, profile picture, location)
Business information for dealers and promoters (shop name, business details)
Content you post: inventory listings, photographs, show details and flyers, wish lists, saved searches, reviews, and reports
Messages you send to other users through ShoCase
Show activity: the shows you register for, RSVP to, or check in at

Payment Information

Payments made through ShoCase — such as a booth fee a dealer pays to a promoter, or a purchase of SMS credits — are processed by Stripe. Card numbers and bank details go directly to Stripe; ShoCase never sees or stores them. We keep a record of each transaction: who paid whom, the amount, the date, its status (paid, refunded, canceled), and Stripe's reference identifiers.

Promoters who accept booth fees through ShoCase set up a payout account with Stripe. Stripe collects the identity, tax, and bank information it needs to verify that account, under Stripe's own privacy policy. ShoCase receives the status of the account (for example, whether it is able to accept payments), not the underlying documents.

Phone Numbers and Text Messages

If you add a mobile number, we confirm it by texting you a one-time code. Text notifications are off until you turn them on. If you turn them on, we use your number to send the show-related texts you asked for. You can turn them off again in your settings at any time, or reply STOP to any message. Message and data rates may apply.

We do not sell mobile phone numbers or text-message consent to anyone, and we do not share them with third parties for their own marketing.

Information We Collect Automatically

Device information (browser type, operating system, device identifiers)
Log data (IP address, access times, pages viewed). Our servers also keep a record of requests made to ShoCase, which can include the content you submitted, for up to 90 days so we can troubleshoot problems and investigate abuse. Passwords and other sign-in credentials are excluded from these records, and uploaded files are not copied into them.
Location. With your permission we use your browser's location, or a ZIP code, postal code, or town you type in, to find shows near you. We store a location only if you save a search or add one to your profile.
Interaction data (searches, clicks, features used)
Error and performance reports, generated when something on ShoCase breaks or runs slowly

Information We Receive From Others

Show invitations. A promoter may give us the email address of a dealer they want to invite to a show. We use that address only to deliver the invitation. Every invitation includes a link to stop receiving them.
Show listings. ShoCase lists card shows using publicly available event information — the show's name, dates, venue, and the organizer's published contact details. If you run a listed show, you can claim the listing to manage it, or contact us to have it corrected or removed.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process booth-fee payments, refunds, and promoter payouts, and send related information
Verify your email address and phone number
Connect collectors with dealers and shows
Send notifications about shows, dealers you follow, and wish list matches
Respond to your comments, questions, and support requests
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent transactions and abuse
Personalize your experience, such as opening the show directory on your own area

3. Information Sharing

We do not sell your personal information. We share it only in the following circumstances:

With Other Users

Certain information is visible to other users based on your role:

Dealers: Your shop name, bio, inventory listings, and show attendance are visible to collectors. When you register for a show, the promoter of that show sees your registration details, your contact information, and whether your booth fee has been paid.
Promoters: Your show listings and the contact information you publish with them are publicly visible
Collectors: Your profile information is visible to dealers you interact with
Messages are visible to the people you send them to

With Service Providers

We share information with companies that perform services on our behalf, only as needed to perform them:

Stripe — payment processing, promoter payout accounts, and refunds
Amazon Web Services — hosting, databases, and storage of uploaded images
Postmark — delivery of account and notification email
Twilio — delivery of text messages
Google — Sign in with Google, Google Analytics, and embedded maps
Sentry — error and performance monitoring

Business Transfers

If ShoCase is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will tell you before your information becomes subject to a different privacy policy.

For Legal Reasons

We may disclose information if required by law or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4. How Long We Keep Information

Account and profile information: for as long as your account is open
Payment and transaction records: for as long as tax, accounting, and payment-network rules require, even after an account is closed
Server request records: up to 90 days
Backups: deleted information may persist in encrypted backups for a short period before it is overwritten

5. Data Security

We implement technical and organizational measures to protect your personal information, including:

Encryption of data in transit and at rest
Passwords stored only in hashed form
Payment card data handled by Stripe and never stored on our servers
Access controls and authentication requirements
Secure data storage with reputable cloud providers

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

You can:

Update your profile and contact information in your account settings
Choose which email and text notifications you receive in your account settings
Disable location access in your browser; you can still search by ZIP code, postal code, or town
Ask us for a copy of your personal information
Ask us to correct or delete your personal information, or to close your account

To request a copy, a correction, deletion, or account closure, contact us. We respond within 30 days. Some records — payment history in particular — must be kept after an account is closed, as described above.

Depending on where you live (for example, California or Canada), the law may give you additional rights over your personal information. We honor those requests from anyone, wherever they live, and we will never treat you differently for making one.

7. Cookies and Analytics

We use cookies and browser storage to keep you signed in and remember your preferences. We use Google Analytics to understand how ShoCase is used, and Sentry to learn about errors. We do not use advertising cookies or sell data to advertisers. You can control cookies through your browser settings, though some features may not function properly without them.

8. Where Your Information Is Processed

ShoCase is operated from the United States, and your information is stored and processed there. If you use ShoCase from Canada or anywhere else outside the United States, your information will be transferred to the United States, where privacy laws may differ from those where you live.

9. Children's Privacy

ShoCase is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. You must be at least 18 to register as a dealer or promoter or to make or receive payments through ShoCase.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date. If a change materially affects how we use your information, we will also notify you by email or with a notice on ShoCase before it takes effect.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us.