Gambit Privacy Policy

Effective Date: July 29, 2026 · Last Updated: July 29, 2026

Gambit Commerce Technologies LLC (“Gambit,” “we,” “us,” or “our”) builds technology for collectors, vendors, dealers, and card stores to identify, organize, price, track, buy, sell, and trade collectible items. This Privacy Policy explains, in plain terms, what information we collect and how we use, share, and protect it when you use the Gambit mobile app, our web app, our websites (including rungambit.com), and our TestFlight beta program (together, the “Services”).

This Policy covers Gambit’s own practices. It does not cover the independent practices of third parties you interact with through the Services — such as Apple, Google, eBay, TCGplayer, payment processors, or grading companies — which handle information under their own privacy policies.

1. Information We Collect

What we collect depends on the features you use and the permissions you grant. It includes:

Account information. Your email address (used to sign in), display name, business or store name, user type (for example, collector, vendor, or store), account and communication preferences, and anything you send us for support. If you sign in with Google, we receive an identifier linking your Google account to Gambit. Passwords are never stored in readable form — we keep only a salted, hashed version.

Inventory and images. Details about the items you manage — names, sets, condition, grading company and certification or serial numbers, identifiers (barcodes, SKUs, Gambit Collectible Numbers), quantities, storage-location labels you assign, acquisition and pricing information, notes and custom fields, and photos you capture or upload.

Camera and photos. With your permission, Gambit uses your camera and selected photos to scan and identify cards, graded slabs, sealed products, and barcodes, read grading certification or serial numbers, and capture item images. Images and the text read from them may be sent to service providers that help identify products and read labels (currently Scrydex and Google). You can revoke camera or photo access anytime in your device settings.

Sales and payments. Transaction and trade records, amounts, discounts, fees, taxes, receipts, counterparty information you enter, and business metrics like profit and cost basis. For card payments made through point-of-sale features, processing is handled by third-party payment processors you or your business connect (such as Square or Shopify) — Gambit stores only the payment category (such as cash or card) and a reference from the processor. We never collect or store full payment-card numbers, expiration dates, or security codes.

Device and usage information. Automatically collected details such as device and app version, IP address, device identifiers, language and time zone, features used, and error and crash diagnostics (collected through our error-monitoring provider, Sentry) that we use to operate, secure, and improve the Services.

Bluetooth and notifications. With your permission, Gambit uses Bluetooth only to connect to a supported label printer, and — if you enable notifications — a device push token to send you alerts you’ve asked for. It does not use Bluetooth for background scanning, location, or advertising.

Location: Gambit does not currently collect device (GPS) location, and the app does not request location permission. The “location” we store is a text label you assign, like a shelf or booth name. We plan to add optional features that use your location (for example, finding nearby vendors, stores, and events); if we do, we will ask permission and update this Policy first.

2. How We Use Your Information

We use information to:

provide and operate the Services — accounts, scanning, inventory, binders, trade sheets, receipts, labels, and reports;
identify and organize collectibles and generate Gambit identifiers and QR codes;
calculate cost basis, profit, and inventory performance, and provide pricing estimates and analytics;
run and improve the beta program, fix bugs, and develop new features;
communicate with you about your account, security, support, alerts, and product updates;
maintain security, prevent fraud and abuse, and enforce our agreements; and
comply with legal, tax, and recordkeeping obligations.

3. AI-Assisted Features

Gambit uses artificial intelligence and image recognition (currently from Scrydex and Google) to identify collectibles, read text and serial numbers from images, categorize inventory, find product matches, and estimate market values. These outputs can be inaccurate or incomplete, and are provided for information only — they are not appraisals, authentications, guarantees, or financial advice. Always verify an item’s identity, condition, authenticity, certification, and value before relying on a result.

We do not sell your personal information. We share information only as needed to run the Services:

Service providers that work on our behalf — such as our cloud hosting and infrastructure provider (Railway, where your data and images are stored), image identification and AI (Scrydex and Google), error monitoring (Sentry), email delivery, and push notifications. These providers may use the information only to provide services to Gambit.
Integrations you or your business choose to connect — such as Google Sign-In, payment processors (Square or Shopify), and marketplaces (eBay or TCGplayer) — receive only what is needed for that connection and handle it under their own privacy policies.
Business accounts — if your account is managed by a business or store, its authorized administrators can access the information associated with that account.
Legal and safety — we may disclose information to comply with law or lawful requests, protect Gambit or others, investigate fraud or abuse, or establish or defend legal claims.
Business transfers — information may transfer as part of a merger, acquisition, financing, or sale of assets.
Aggregated or de-identified information that does not identify you may be used for analytics, research, and product development.

5. What We Don’t Do

Gambit does not sell your personal information for money, and does not use it for cross-company targeted advertising or track you across other companies’ apps and websites. We do not include third-party advertising or ad-analytics SDKs in the app or web app. If this ever changes, we will update this Policy, update our App Store disclosures, and request permission where required.

6. Cookies and Similar Technologies

Our website and web app use cookies and browser storage to keep you signed in, remember preferences, secure the Services, and measure performance for our own operations. You can block or delete these through your browser, though some features may stop working.

7. Data Retention

We keep personal information only as long as needed to provide the Services, meet legal, tax, and accounting requirements, resolve disputes, and enforce our agreements — generally while your account is active. After a verified deletion request we aim to delete or de-identify your information within about 30 days, except where we must retain certain records (for example, financial records) by law. Backup copies are purged on our normal backup cycle.

8. Your Rights and Choices

You can, at any time:

access, update, or correct your account information;
request a copy of your information or ask us to delete it;
disconnect third-party integrations and withdraw consent;
revoke camera, photo, Bluetooth, or notification permissions in your device settings; and
unsubscribe from promotional email.

Depending on where you live (including California and Texas), you may also have rights to confirm whether we process your information, access or delete it, obtain a portable copy, correct inaccuracies, opt out of any sale or targeted advertising, and appeal a decision. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not knowingly sell or share the information of anyone under 16. We do not discriminate against you for exercising these rights. To make a request, email privacy@rungambit.com with enough detail to identify your account; we may verify your identity first.

9. Deleting Your Account

You can request deletion of your account and personal information by using an in-app deletion option where available, or by emailing privacy@rungambit.com with the subject line “Account Deletion Request.” Deleting the app from your device does not delete your Gambit account. We may keep limited information where required for legal, tax, fraud-prevention, or dispute-resolution reasons. If your account is managed by a business, we may direct your request to that organization.

10. Security

We use reasonable safeguards to protect your information, including encrypted connections, access controls, salted password hashing, and secure cloud infrastructure. No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur. If a breach affecting your personal information occurs, we will notify you and the appropriate authorities as required by law. Please keep your login credentials confidential and tell us promptly about any suspected unauthorized access.

11. Children’s Privacy

Gambit is not directed to children under 13, and we do not knowingly collect their personal information (you must also meet any higher minimum age your local law requires). If we learn we have collected information from a child without valid authorization, we will delete it. A parent or guardian with concerns can contact privacy@rungambit.com.

12. Beta Testing

Gambit is currently in beta testing and may change frequently. During beta we may collect additional diagnostic information to find and fix problems, and you may be asked to submit screenshots or feedback, which authorized Gambit personnel and service providers may review. Please don’t enter confidential third-party information or unnecessary sensitive information into a beta version.

13. International Users

Gambit is based in the United States. If you use the Services from another country, your information will be processed in the United States, where data-protection laws may differ from your own. Where required, we use an appropriate lawful transfer mechanism.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last Updated” date above, and for material changes we will provide additional notice where required.

15. Contact Us

Questions, privacy requests, or complaints can go to:

Gambit Commerce Technologies LLC
6010 W Spring Creek Pkwy, Plano, TX 75024
Attn: Privacy Team
Email: privacy@rungambit.com
Web: https://www.rungambit.com