Privacy Policy
FiveRowBox is a desktop application and hosted service for cataloguing sports and trading cards and listing them on eBay. This policy describes what the service collects, why it holds it, who else sees it, and how to have it removed. It covers the desktop app, the API it talks to, and this website.
Two kinds of information pass through the service and they are treated differently throughout this document: your information, as the person using FiveRowBox, and information about eBay members who buy from you, which reaches us from eBay only because you connected your eBay account and only so that your orders can be fulfilled.
1. Information you give us directly
Account
Signing in is handled by Clerk, an identity provider. We store your email address, the identifier Clerk assigns you, your plan and account status, and the date the account was created. We never receive or store your password — Clerk holds authentication credentials, not us.
Device tokens
The desktop app and the command-line tool authenticate with a device token you create. We store only a SHA-256 hash of it, the first sixteen characters as a label so you can recognise it in a list, the name you gave it, and when it was created and last used. The token itself is shown once, at creation, and there is no field in the database it could be read back out of.
Your inventory
The card records you create: attributes, condition, prices, storage locations, notes, photographs, and the edit history that lets a change be rolled back. Card images are stored in object storage (see §4). This is your data; it is not shared with anyone except as described in §4, and it is not used to train anyone’s models.
2. Information we receive from eBay
If you connect an eBay account, we receive and store:
- eBay authorisation credentials for your seller account, so the service can list, revise and end listings and read your orders on your instruction. These are encrypted at rest.
- Your listings — item identifiers, titles, prices, quantities and the listing images, which are copied into our object storage so the app can display them.
- Your orders, including the buyer’s eBay username, the shipping name and postal address, the items purchased, order totals, shipping service and tracking number.
- A verbatim copy of eBay’s order payload. We keep eBay’s full response for each order so that sales reporting can be recomputed later. Beyond the fields listed above, that copy contains the buyer’s email address, first and last name, and telephone number. We state this explicitly because it is not visible from the shape of the rest of this section, and because it is the widest form of buyer information the service holds.
This information is used to fulfil and support your orders — producing pick lists, tracking shipments and refunds, and reporting on sales. We do not use it to market to buyers on our own behalf, we do not build profiles of buyers across sellers, we do not sell it, and we do not disclose it to anyone except as described in §4.
3. Information generated by using the service
- Operational logs. The service writes job and error logs to diagnose failures. An eBay buyer’s username can appear in these logs, and in error text returned by eBay. Logs are not part of the reporting data and are not shared.
- Usage counters for AI features — a per-day count of calls made, with the model used and the token counts, so that daily limits can be enforced and cost tracked. These records describe calls, not people.
- Cookies. This website sets only the cookies Clerk needs to keep you signed in. There is no analytics, advertising, telemetry or crash-reporting service anywhere in the product — not on this site, not in the desktop app, and not in the API.
4. Who else sees this information
We use a small number of service providers. Each receives only what the specific feature requires.
- Clerk — authentication. Receives your sign-in identity and email address.
- Cloudflare R2 — object storage. Holds your card images and the images copied from your own eBay listings. It holds no order information.
- Google AI Studio and OpenRouter — the AI identification and pricing features. These receive card images and card attributes only. No buyer information is ever sent to an AI provider — not a username, not a name, not an address, not an order. This is a property of how the features are built rather than a policy we apply by hand: the AI features load the card record, and no order or buyer field is a parameter of any AI request.
- A card-identification service we host ourselves — used for trading-card-game scans. It receives card images only, and runs on our own infrastructure rather than a third party’s.
- eBay — we send eBay the listing and order actions you ask for, under your own eBay authorisation.
That is the complete list. We do not sell personal information, we do not share it with advertisers or data brokers, and we do not transfer it for anyone else’s independent use. We may disclose information if we are legally required to, or to protect the service or its users from harm.
5. How it is protected
- Traffic between the app, this website and our API is encrypted in transit.
- Your eBay authorisation credentials are encrypted at rest with AES-256-GCM under a key held outside the database.
- Every account’s rows are isolated inside the database itself by row-level security, not by a filter the application has to remember to apply. Card images are stored under a per-account key prefix the request cannot influence.
- Device tokens are stored only as hashes. Image URLs carry short-lived credentials.
No system is perfectly secure, and we do not claim otherwise.
6. How long it is kept
Stated plainly, because it would be easy to imply otherwise: we do not currently apply an automatic time-based deletion schedule to order records. An order record, including the buyer information described in §2, is retained for as long as your account exists unless it is deleted on request or under §7.
We are working to introduce a defined retention period. Until that ships, the sentence above is the accurate description, and this section will be updated when it changes.
Account information is kept for as long as the account exists. Inventory records are kept until you delete them or delete your account. Operational logs are kept for troubleshooting and are cleared periodically.
7. Deletion
eBay account deletion notifications
eBay notifies us when one of its members closes their account. On receiving such a notification we remove that person’s personal information from order records across every account on the service, not only the account that happened to receive the notification: the buyer username, shipping name and address, and the stored copy of eBay’s order payload, which is rebuilt to contain only the order and item fields needed for sales reporting and none of the buyer’s details. If the closing member is a seller who had connected their eBay account here, their stored eBay credentials are cleared at the same time.
Two limits on that, disclosed rather than glossed: an order that is still open on eBay is re-mirrored from eBay’s own response on a recurring basis, so scrubbed details for such an order can reappear until the order completes; and a manually triggered shipment sync re-reads shipped orders from eBay. In both cases what is written back is whatever eBay itself returns.
We retain the shipping tracking number for a scrubbed order. It is the seller’s evidence of despatch in a delivery dispute, and we are not aware of guidance requiring carrier references to be removed. If that changes, this will.
Your own data
You can delete cards, lots and listings from the app at any time. Disconnecting eBay from the app clears the stored eBay credentials immediately. To request a copy of the information we hold about you, to have it corrected, or to have your account and its data deleted, write to us at the address in §10. Depending on where you live you may have further rights over your information, and we will honour them.
8. eBay data specifically
Information obtained through eBay’s APIs is used only to provide the features you asked for, and only for you. We do not aggregate it across sellers, sell it, transfer it for another party’s independent use, or send it to an AI provider. Competitor listing information gathered for repricing is used to compute a price range and is never transmitted anywhere.
9. Children
FiveRowBox is a tool for selling on eBay and is not intended for anyone under 18. We do not knowingly collect information from children.
10. Changes and contact
If this policy changes materially we will say so on this page and update the effective date above. Questions, requests and complaints go to [OPERATOR: contact email address], or to [OPERATOR: legal entity name], [OPERATOR: postal address].