Privacy Policy

Holo Vaults operates holovaults.com.au, an Australian marketplace for trading card games and collectibles. Contact: privacy@holovaults.com.au.

• Account information: name, email, hashed password, state/location
• Identity verification: government ID documents processed by Stripe Identity for seller verification
• Payment information: processed by Stripe — Holo Vaults does not store card numbers or banking credentials
• Listing information: card photos, descriptions and prices uploaded by sellers
• Transaction data: order history, sale prices, shipping addresses
• Collection data: cards added to portfolio tracker (Vault Pro users)
• Communications: contact form submissions and dispute correspondence
• Technical data: IP address, browser type, device information and usage data collected via analytics

• To operate the marketplace and process transactions
• To verify seller identity and prevent fraud
• To send transactional emails (order confirmations, dispatch notifications)
• To provide customer support and resolve disputes
• To improve platform features and performance
• To comply with legal obligations including Australian tax law and AML/CTF requirements

We will not use your information for unrelated purposes without your consent.

We may share your information with:

• Stripe (payments and identity verification) — United States — Stripe's privacy policy applies
• Resend (transactional email delivery) — United States
• Supabase (database hosting) — Australian region (Sydney, ap-southeast-2)
• Law enforcement or government agencies where required by Australian law

We do not sell your personal information to third parties.

Some service providers operate outside Australia (Stripe, Resend). We take reasonable steps to ensure these providers meet privacy standards equivalent to the Australian Privacy Principles. By using the platform you consent to these transfers as described in this policy.

Your data is stored on Supabase servers located in Sydney, Australia. We implement technical and organisational measures including encryption at rest and in transit, access controls and regular security reviews. Despite these measures no system is completely secure and we cannot guarantee absolute security.

If a data breach occurs that is likely to cause serious harm we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Privacy Act 1988.

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of marketing communications at any time

To exercise these rights contact privacy@holovaults.com.au.

We use essential cookies to maintain your session and preferences. We may use analytics tools to understand platform usage. You can disable cookies in your browser but this may affect platform functionality.

Holo Vaults may use automated processes to detect fraudulent listings, flag suspicious activity and calculate platform fees. Where automated decisions materially affect you, you may contact us to request human review.

The platform is intended for users 18 years and older. We do not knowingly collect personal information from children under 18 without parental consent.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform constitutes acceptance of the updated policy.

If you believe we have breached the Australian Privacy Principles you may contact us at privacy@holovaults.com.au. If your complaint is not resolved you may lodge a complaint with the OAIC at www.oaic.gov.au.

Holo Vaults — privacy@holovaults.com.au