Effective Date: June 29, 2026

Introduction

This Privacy Policy explains how Bedias, Inc. (“Bedias,” “HOLO,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects information when you use holotradingcards.com and any related websites, subdomains, mobile applications, tools, products, subscriptions, and services (collectively, the “Services”).

HOLO helps users scan, identify, price, organize, track, and manage trading cards, sports cards, and related collectibles.

By using the Services, you acknowledge that your information will be handled as described in this Privacy Policy. If you do not agree, do not use the Services.

1. Information We Collect

1.1 Account Information

When you create or use a HOLO account, we may collect: name; email address; username or display name; password or authentication credentials (stored in hashed form); login method; profile photo or avatar; account settings and preferences; subscription status; account creation and activity dates; and account deletion or cancellation status.

1.2 Collection and Card Data

When you use HOLO to manage your collection, we may collect: cards added to your collection, portfolio, inventory, or wishlist; card names, sets, variants, years, card numbers, languages, conditions, and grades; quantity owned; purchase price, estimated value, market value, portfolio value, and price history; notes, tags, folders, and other metadata you add; collection analytics, trends, and completion progress; and cards you search for, view, scan, favorite, track, or compare.

1.3 Camera, Scanning, and Image Data

If you use card scanning or image upload features, we may process: images or video you capture or upload; card scan results and recognition data; AI, machine learning, or computer vision outputs; and corrections or feedback you provide on scan results. Camera access is used solely to provide scanning functionality. We do not access your camera without your permission.

1.4 AI and Automated Feature Data

Some Services use AI, machine learning, or computer vision to identify cards, estimate card information, analyze images, detect errors, prevent abuse, and improve the Services. We may use scan results, corrections, usage patterns, and related data to improve AI accuracy and database quality.

1.5 Payment and Subscription Information

If you purchase a subscription or paid feature, payment is processed by third-party providers such as Apple, Google, Stripe, or RevenueCat. We may receive: subscription status and tier; product or plan purchased; purchase, renewal, and cancellation dates; trial and refund status; and app store or payment provider identifiers. We do not store full credit card numbers, CVV codes, or bank account numbers.

1.6 Communications With Us

If you contact us, we may collect: your name and email address; message content and attachments; support history; and technical information related to your issue.

1.7 Device, Usage, and Technical Information

When you use the Services, we may automatically collect: IP address; browser type and version; device type, model, and operating system; app version; device identifiers; language and region settings; approximate location from IP; time zone; pages and features viewed; session duration; crash logs and diagnostic data; and security and fraud prevention signals.

1.8 Cookies and Similar Technologies

We may use cookies, pixels, SDKs, local storage, web beacons, and similar technologies for:

•       Authentication, login session management, and security.

•       Remembering your preferences and account settings.

•       Analytics and product improvement.

•       Crash reporting and performance monitoring.

•       Fraud prevention and abuse detection.

•       Advertising measurement and attribution.

You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.

1.9 Promotions and Surveys

If you participate in a survey, giveaway, contest, or promotion, we may collect: your name and email address; social media handle if required; survey responses and promotion entries; eligibility information; and mailing address if needed to deliver a prize.

2. How We Use Your Information

We use information we collect to:

•       Provide, operate, maintain, and improve the Services.

•       Create and manage accounts, authenticate users, and maintain security.

•       Scan, identify, and match cards; help users organize and manage collections.

•       Provide pricing, value, market, portfolio, and collection insights.

•       Process subscriptions, payments, renewals, cancellations, and refunds.

•       Provide customer support and respond to questions and requests.

•       Send service-related communications and, where permitted, marketing communications.

•       Improve scan accuracy, card matching, pricing tools, AI systems, and user experience.

•       Analyze usage, debug errors, and fix technical issues.

•       Prevent fraud, spam, scraping, misuse, and unauthorized activity.

•       Enforce our Terms of Service and other policies.

•       Protect the rights, safety, and security of users, Bedias, and others.

•       Comply with legal obligations and respond to legal process.

•       Evaluate or complete a merger, acquisition, financing, reorganization, or business transaction.

3. How We Share Your Information

We do not sell your personal information. We share it only as described below.

3.1 Service Providers

We share information with vendors and service providers that help us operate the Services, including providers for hosting, data storage, authentication, payment processing, analytics, crash reporting, customer support, email delivery, push notifications, security, fraud prevention, advertising measurement, AI, image processing, and card recognition. These providers are authorized to use information only as needed to provide services to us.

3.2 Payment Providers and App Stores

If you purchase a subscription or paid feature, information is shared with payment processors, billing providers, or app stores as needed to process payments, renewals, cancellations, refunds, and fraud checks.

3.3 Other Users or the Public

If the Services include public profiles, community features, collection sharing, or marketplace features, certain information may be visible to other users or the public depending on your settings. You are responsible for information you choose to make public.

3.4 Legal, Safety, and Enforcement

We may disclose information if reasonably necessary to: comply with law, legal process, or government requests; enforce our Terms of Service; detect, prevent, or investigate fraud, abuse, or illegal activity; protect the rights, property, or safety of Bedias, users, or others; resolve disputes; or preserve evidence.

3.5 Business Transfers

If Bedias is involved in a merger, acquisition, financing, sale of assets, reorganization, or bankruptcy, user information may be disclosed, transferred, or assigned as part of that transaction. We will provide notice if your information becomes subject to a materially different privacy policy.

3.6 With Your Consent

We may share information when you ask us to or otherwise give us specific consent.

3.7 Aggregated or De-Identified Information

We may use and share aggregated, anonymized, or de-identified information that cannot reasonably identify you, such as general statistics about card trends, platform usage, or pricing activity.

4. Advertising, Analytics, and Tracking

We may work with analytics, attribution, and advertising partners to understand how users find and use the Services, measure marketing performance, and improve our advertising. Depending on your location, certain activities may be considered a “sale,” “sharing,” or “targeted advertising” under applicable privacy laws. You may opt out by contacting support@holotradingcards.com or using any privacy controls we make available.

5. Text Messaging and SMS

If we offer SMS features, we may collect your phone number, message content, opt-in status, opt-out status, and related messaging records.

SMS opt-in data, consent records, and mobile numbers collected for text messaging will not be sold, shared, rented, or disclosed to any third party for that party's own marketing or promotional purposes. This data may be shared only with carriers, aggregators, and vendors necessary to deliver and support text messaging services.

Standard message and data rates may apply. Reply STOP to opt out or HELP for assistance.

6. Email, Push Notifications, and Other Communications

We may send account messages, security alerts, subscription updates, product updates, support responses, marketing emails, push notifications, and in-app messages. You can opt out of marketing emails using the unsubscribe link in any message or by contacting support@holotradingcards.com. You can control push notifications through your device settings. We may still send non-promotional service messages even if you opt out of marketing.

7. Third-Party Links, Services, and Data Sources

The Services may include links, integrations, APIs, card database providers, app stores, payment providers, analytics tools, or other third-party services. We are not responsible for the privacy practices, content, policies, or security of any third party. Your use of third-party services is governed by their own policies.

8. Data Retention

We retain information for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud and abuse, and maintain required records.

General retention guidelines:

•       Account data: retained for the life of your account plus up to two (2) years after deletion, or as required by law.

•       Transaction and payment records: retained for up to seven (7) years for tax and financial recordkeeping.

•       Support communications: retained for up to three (3) years after resolution.

•       Security and fraud prevention logs: retained for up to five (5) years.

•       Backup copies: may persist in encrypted systems for up to ninety (90) days after deletion from active systems.

When information is no longer needed, we delete, de-identify, or aggregate it in accordance with applicable law.

9. Account Deletion and Data Requests

You may delete your account through the in-app settings or by contacting support@holotradingcards.com. Some information may be retained where legally permitted, including financial records, fraud prevention records, records needed to enforce agreements, and backup copies (purged within 90 days).

Deleting the app does not automatically delete your account or cancel your subscription. Subscription cancellation must be completed through the applicable app store, payment provider, or your account settings.

10. Security

We use reasonable administrative, technical, and organizational measures to protect your information, including encryption in transit and at rest, access controls, authentication controls, monitoring, audit logging, secure infrastructure, and internal security policies. No system is completely secure. You are responsible for maintaining the confidentiality of your login credentials.

11. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are under 13, do not use the Services. If we learn we have collected personal information from a child under 13, we will promptly delete it. Contact support@holotradingcards.com if you believe a child has provided us with personal information.

12. International Users and Cross-Border Data Transfers

Bedias, Inc. is based in Austin, Texas, United States. If you access the Services from outside the United States, your information may be collected, processed, stored, and transferred in the United States and other countries where we or our service providers operate. Privacy laws in these countries may differ from those in your location. Where required by applicable law, we implement appropriate safeguards for cross-border transfers, which may include Standard Contractual Clauses or other lawful mechanisms.

13. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases:

•       Contract: processing necessary to provide the Services you request.

•       Legitimate Interests: operating, improving, securing, and promoting the Services; preventing fraud; and analyzing usage.

•       Legal Obligation: complying with laws, regulations, legal process, and government requests.

•       Consent: processing based on your specific, informed consent for marketing or certain device permissions. You may withdraw consent at any time.

•       Vital Interests or Safety: protecting the health or safety of users or others in emergency circumstances.

To exercise your rights or ask about a specific legal basis, contact support@holotradingcards.com.

14. Your Privacy Rights

Depending on your location, you may have the right to:

•       Access: request confirmation and a copy of information we hold about you.

•       Correct: request correction of inaccurate or incomplete information.

•       Delete: request deletion of your personal information, subject to legal exceptions.

•       Portability: request a machine-readable copy of certain information you have provided.

•       Restrict Processing: request that we limit how we use your information in certain circumstances.

•       Object: object to processing based on our legitimate interests or for direct marketing.

•       Withdraw Consent: withdraw consent for processing where consent is the legal basis.

•       Opt Out of Sale or Sharing: opt out of the sale or sharing of your personal information for targeted advertising.

•       Non-Discrimination: exercise your privacy rights without receiving discriminatory treatment.

•       Appeal: if we deny a privacy request, you may appeal that decision.

To exercise your rights, contact support@holotradingcards.com. We may need to verify your identity before fulfilling a request and will respond within the timeframe required by applicable law.

15. U.S. State Privacy Rights

Residents of states with consumer privacy laws—including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, and others—may have additional privacy rights.

Depending on your state, your rights may include: access; correction; deletion; portability; opt out of targeted advertising; opt out of sale or sharing; opt out of certain profiling; and the right to appeal a denied request.

We do not knowingly sell or share the personal information of users under 16. We do not use sensitive personal information beyond what is necessary to provide the Services.

To exercise your state-specific privacy rights, contact support@holotradingcards.com.

16. California Privacy Notice (CCPA / CPRA)

Categories of Personal Information Collected (Last 12 Months)

•       Identifiers: name, email address, IP address, device identifiers, account username.

•       Customer records: subscription status, payment-related metadata.

•       Commercial information: transaction history, subscription purchases.

•       Internet or network activity: feature usage, app interactions, browsing on our Services.

•       Geolocation: approximate location derived from IP address.

•       Audio, electronic, visual, or similar: card images submitted for scanning.

•       Inferences: user profile based on collection preferences and card category interests.

•       Sensitive personal information: account login credentials, stored in hashed form.

Sources

We collect from: you directly; your device and browser automatically; payment providers and app stores; authentication providers; analytics and advertising partners; and public or licensed third-party card and pricing data sources.

Sale and Sharing

We do not sell your personal information for money. Some analytics, advertising, attribution, or cookie-based activities may be considered a “sale” or “sharing” under California law. You may opt out by contacting support@holotradingcards.com or using available privacy controls.

17. Do Not Track and Global Privacy Control

We do not currently alter our data practices in response to browser Do Not Track signals, as there is no uniform industry standard. Where required by applicable law (including California and Colorado), we honor legally recognized opt-out signals such as Global Privacy Control (GPC). If your browser sends a GPC signal, we will treat it as a request to opt out of the sale or sharing of your personal information for targeted advertising on that browser or device.

18. Your Choices and Controls

You may exercise the following at any time:

•       Update account information through your HOLO account settings.

•       Delete your account through in-app settings or by contacting support@holotradingcards.com.

•       Unsubscribe from marketing emails using the unsubscribe link or by emailing us.

•       Disable push notifications through your device settings.

•       Revoke camera access through your device settings.

•       Adjust cookie preferences through your browser settings.

•       Opt out of advertising or analytics activities by contacting us or using available controls.

•       Request access, correction, deletion, or portability of your personal information.

19. Public Content and User Responsibility

You should carefully consider what you choose to share publicly. If you post or share content through public features, that information may be seen, collected, copied, saved, indexed, or used by other users or third parties. We cannot control what others do with information you voluntarily make public.

20. Data Accuracy

We rely on you to provide accurate, current, and complete information. You may update account information through your account settings. Card information, pricing data, collection values, scan results, and AI-generated results may be inaccurate, incomplete, or unavailable. These outputs are provided for informational purposes only and are not professional appraisal or investment advice.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email, in-app notification, or website notice. Your continued use of the Services after the updated policy becomes effective constitutes acknowledgment of the updated policy.

22. Contact Us

For questions, requests, complaints, or concerns about this Privacy Policy or your personal information, contact:

Bedias, Inc.

7415 Southwest Parkway, STE 6-500-414, Austin, TX 78735, USA

Contact: support@holotradingcards.com

Support: support@holotradingcards.com

Website: holotradingcards.com