Basezo helps you identify sports cards and understand their potential value. This Privacy Policy explains how information is handled when you use the Basezo mobile app, visit basezo.com, create an account, or contact our team.

The service is operated by VISIGEN PTE. LTD. (“we,” “our,” or “us”), a company registered in Singapore. We are responsible for the personal information processed for Basezo. Our registered office is 112 Robinson Road, #03-01, Robinson 112, Singapore 068902. Privacy questions and requests can be sent to [email protected].

1. The information involved in using Basezo

Different features involve different information. Not retaining your card photos does not mean that Basezo operates without account, transaction, or technical data.

Passwords are stored as hashes rather than as readable passwords. Please do not send us your password, login token or verification code in a support message.

2. A card photo is an input, not a permanent upload

Recognition takes place on our servers. When you submit a photo, it is transmitted from your device to infrastructure we operate for Basezo. The photo is used to perform the requested card analysis and return the result. We do not send submitted card photos to a third-party AI service for recognition.

We do not retain submitted card photos after processing. Any temporary image data needed for the request is discarded when processing finishes or the request is terminated. We do not keep a server-side gallery of your scans or retain accompanying photo metadata as a separate record of your photographs. Scan photos are not included in our analytics or advertising events and are not retained for model-training datasets.

This policy concerns the photos submitted through the card-identification workflow. An original already stored in your device’s photo library remains under your control. A photo you separately attach to a support email is part of that support conversation and is handled as support information, rather than as a temporary scan.

Point the camera at the card and avoid including people, identity documents, addresses or other unrelated personal details. A recognition result, such as a card name or estimated value, is different from the image used to produce it. Collection and scan-history features may save identification details, estimated values and other information you choose to keep. These records are separate from the submitted image. The no-photo-retention commitment does not mean that collection records or account activity are automatically erased after each scan. Account-associated information is handled under the retention and deletion rules below.

3. You control access to the camera and photo library

Camera. Basezo requests access when you choose to photograph a card. The permission is used for that user-initiated action, not for background surveillance or unrelated recording.

Photo library. You can select an existing card image instead. Basezo uses the images you deliberately select for analysis; it does not need to inspect or index your entire library. Where your operating system supports a system photo picker or selected-photo access, you can use that limited access.

You can change these permissions in iOS or Android settings. Refusing or withdrawing a permission prevents the corresponding photo-input method from working, but it does not authorize us to collect information by another route. Operating-system permission is separate from permission for advertising tracking.

4. App analytics, advertising measurement and website cookies

We use Google Analytics for Firebase to understand interactions with Basezo, evaluate feature usage and identify areas for improvement. Depending on the enabled features and your choices, analytics can involve app-instance identifiers, device and app characteristics, and events describing how features are used. These records may be associated with a device or pseudonymous identifier; they should not be assumed to be fully anonymous. Google describes its Firebase processing in its Firebase privacy information.

We also use Google Ads to measure promotional campaigns, including whether advertising leads to an installation or another relevant conversion. Depending on platform support, consent and configuration, this may involve campaign information, conversion events and advertising identifiers such as Apple’s IDFA or Android’s advertising ID. Our card photos, password hashes and verification codes are not advertising-measurement inputs. Google’s own processing is explained in its Privacy Policy.

On iOS, activity that requires App Tracking Transparency authorization must wait for your permission. You may decline or later change that permission without losing access to card identification solely because you declined tracking. On Android, you can use the advertising-privacy controls available in your device settings. We also obtain consent for optional analytics or advertising technologies where the applicable law requires it. Changing a device identifier or a tracking setting does not necessarily erase records already lawfully processed; you can contact us about deletion or other rights.

The Basezo website uses cookies or equivalent browser storage for sign-in, security and reliable operation. Blocking those necessary technologies may prevent account features from working. Any optional website analytics or advertising cookies are subject to the applicable notice and consent requirements; a website visit does not itself give blanket permission for optional tracking.

5. Purposes and grounds for processing

We use information to provide card analysis, operate accounts, deliver verification and recovery emails, administer subscriptions, respond to support requests, diagnose problems, prevent fraud and meet legal obligations. Analytics and advertising measurement are used for the purposes and under the controls in section 4.

Where the Singapore Personal Data Protection Act applies, we process information with the required consent or another basis permitted by that Act. Where European or UK data-protection rules apply, processing necessary for the service you request is based on contract; proportionate security and operational work may rely on legitimate interests; mandatory recordkeeping relies on legal obligations; and processing that requires consent relies on that consent. You may withdraw consent without changing the lawfulness of earlier processing. We will explain if withdrawal means that a particular requested feature can no longer be provided.

Card identification is automated analysis of the submitted image, not a decision about your employment, credit, insurance eligibility or other legal status. A card value shown by Basezo is an estimate and may be wrong; the limitations of the service are explained in our Terms of Use.

6. Who may receive information

Access is limited to the purposes described here:

• Operational providers. Our hosting and security arrangements include Cloudways and Cloudflare. Elastic Email delivers account-related emails and therefore processes the recipient address and the necessary message contents. These providers receive the information needed for their role; hosting our own recognition service does not mean that the infrastructure has no service providers.
• Google. Firebase and Google Ads receive the analytics or advertising-measurement information described in section 4, subject to applicable choices and restrictions. They do not receive scan images for card recognition.
• Apple and Google Play. The store used for a purchase processes payment information under its own terms and privacy policy. We receive the purchase or entitlement information needed to deliver the service, rather than your full card number or payment-security code.
• Legal and protective disclosures. We may disclose information when legally required, or where permitted and reasonably necessary to investigate abuse, defend a claim or protect people and the service.
• A change of business ownership. Relevant information may transfer during a genuine merger, restructuring or business sale, subject to applicable safeguards and notice requirements. Such a transaction does not remove the protections promised for existing information.

We do not sell personal information for money. Some privacy laws define advertising-related “sharing” or targeted advertising more broadly than a monetary sale. If our advertising processing falls within those definitions, the relevant opt-out rights apply; the absence of a monetary sale does not cancel those rights. Contact us to exercise them.

We require appropriate confidentiality, security and purpose restrictions from providers processing information on our behalf, including protection consistent with this Policy and applicable platform requirements. External sites you choose to visit operate under their own privacy policies.

7. Retention, safeguards and international processing

Our photo-handling rule is described in section 2. Other information has a different lifecycle:

• Account details remain available while needed to maintain your account, unless you request deletion or another retention obligation applies.
• Session and verification records expire or are invalidated as needed for authentication and account security. Some expired records may remain until routine cleanup.
• Support records are retained for resolving the request and any related follow-up, complaint or legal obligation.
• Transaction records may need to remain for accounting, tax, fraud-prevention or dispute purposes after access to the app ends.
• Security, analytics and attribution records are limited to the relevant operational purpose and configured retention periods, rather than retained indefinitely merely because storage is available.

When a retention purpose ends, information is deleted or made no longer identifiable. Deleted account information may remain in restricted backups until those backups expire under the applicable retention schedule. This backup qualification does not create an exception to our rule against retaining scan photos.

We use encrypted connections, access restrictions and other appropriate safeguards. No online service can promise that every risk is eliminated.

VISIGEN is based in Singapore, but service providers may process information in other countries. Where a transfer requires additional protection, we use the contractual or other safeguards required by the applicable law, including Singapore’s overseas-transfer requirements. We do not treat your use of Basezo as a waiver of those protections.

8. Delete your account and associated data

You can initiate account deletion using the deletion option in the app’s account controls. We may require you to sign in again or verify your identity before completing a request. Deletion is different from signing out, disabling an account or uninstalling the app.

You do not need to reinstall Basezo to request deletion. Email [email protected] with the subject “Basezo account deletion”, preferably from the email address registered to your account. Do not include your password. If you cannot use that email address, explain the situation so that we can arrange proportionate identity checks.

A verified deletion request covers your Basezo account and associated personal information held by us, including account-profile information and authentication records. It also covers associated data held in other Basezo-operated app systems; deleting only the login record is not a substitute for handling the full request. We may retain limited records where required by law or necessary for a lawful fraud, security or dispute purpose, and will explain applicable exceptions. Backup handling follows section 7.

For requests requiring manual handling, we aim to respond within 30 days and will explain the expected completion time or any lawful extension. Applicable legal deadlines take precedence.

Deleting an account or uninstalling the app does not itself cancel an App Store or Google Play subscription. Manage renewal separately in the store where you subscribed. You may request account deletion even if you have a subscription; an active subscription is not a reason to make you wait until the billing period ends.

9. Other privacy choices and requests

Depending on the laws that apply to you, you may ask to access or correct information, receive a copy, request deletion, restrict or object to certain processing, or withdraw consent. Some jurisdictions also provide data portability, advertising opt-outs and a right to appeal a decision about a privacy request. We will not unlawfully discriminate against you for exercising a right.

Send requests to [email protected]. We may seek information reasonably needed to confirm identity or an authorized representative’s authority. We respond within the period required by the applicable law and explain any restriction or extension. You may also raise a concern with the Singapore Personal Data Protection Commission or another competent privacy regulator in your jurisdiction.

Basezo is not intended for children under 13. Where a higher minimum age or parental authorization is legally required, that requirement applies. If you believe a child has provided information without the required authorization, contact us so that we can investigate and take appropriate action.

10. Changes and contact

We will update the date above when this Policy changes. Significant changes will be brought to your attention through an appropriate notice. Where a new use requires consent, we will ask for it; publishing an updated policy is not a replacement for that consent.

Privacy contact: VISIGEN PTE. LTD.
112 Robinson Road, #03-01, Robinson 112, Singapore 068902
Email: [email protected]
Website: https://basezo.com