Privacy Policy

At Oddstamps, we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, store, and share your information when you use our application.

1. Scope & Geographic Limitations

This Service is operated by a Canadian entity and is designed and intended strictly for residents of the United States and Canada (specifically excluding the Province of Quebec). The Service and its privacy documentation are provided solely in the English language. We do not knowingly collect, process, or store personal data from residents of the Province of Quebec, the European Union (EU), the European Economic Area (EEA), the United Kingdom, China, or any other region outside the Permitted Territories. If we discover that we have inadvertently collected personal data from a resident of an excluded jurisdiction (including the Province of Quebec), we will promptly delete that data.

2. Information We Collect

We collect the minimum amount of information necessary to run our Service:

• Account Data: When you sign up, we collect your email address, user ID, and basic profile information. Authentication is securely managed by our third-party identity providers. We do not store your passwords or passkeys on our systems.
• Payment & Billing Information (Currently Suspended): The Service is currently operating on a complimentary free preview basis, and payment processing is suspended. Oddstamps does NOT collect, receive, or store payment card numbers, CVVs, or billing addresses at this time. Should paid subscriptions (such as Collector Pro) or scan allowances be introduced in the future, payment card processing will be handled directly and securely by our third-party payment partners, and this policy will be updated prior to collecting any financial data.
• User Content: We collect and store the raw scans, uploaded sheets, and cropped stamp images you submit. These image files are stored securely in our cloud object storage.
• Incidental Data on Scans & Manual Crops (e.g., Covers and Envelopes): We recognize that philatelic items—such as full postal covers, postcards, or envelopes—inherently contain names, physical addresses, or postmarks. We treat this visual data strictly as part of your User Content. You maintain sole discretion over bounding boxes drawn using automated or manual cropping tools. We do not extract, transcribe, or maintain searchable directories of personal names or residential addresses visible on postal items. Mathematical image embeddings generated for stamp matching capture visual philatelic patterns and do not identify, index, or search for individuals. If you choose to make a collection "Public," you are solely responsible for reviewing and redacting any private, identifying, or sensitive information visible on your physical items or selected crops prior to publishing.
• No Biometric Processing: While our computer vision tools analyze visual stamp artwork and borders, our systems do not extract, generate, capture, or store facial geometry, biometric identifiers, or biometric information from individuals depicted on postal items.
• Collection Records: We collect and store database records representing your digital stamp albums, tag names, customized fields, stamp attributes, and album structures in our cloud databases.
• Technical & Security Data: We collect diagnostic and edge routing logs (including IP addresses, browser types, and request paths) via our network edge providers to safeguard system security, prevent bot abuse, and enforce our Canada and US geographic restrictions.
• Analytics, Observability & Diagnostics: We use third-party observability and analytics services (including PostHog) to monitor application health, analyze aggregate feature usage, track AI inference performance and reliability, and troubleshoot software errors. This may collect technical data such as your IP address, browser type, operating system, high-level interaction events (such as page views and explicit feature triggers), diagnostic crash reports, and AI generation telemetry (including execution prompts and generated structured responses used to evaluate prompt quality, token latency, and identification accuracy). This telemetry is text only; your scans and images are not sent to our analytics provider. For authenticated users, diagnostic crash reports and usage telemetry are linked strictly via pseudonymous account identifiers without transmitting your personal name or email address to our analytics provider. To safeguard user privacy and protect the confidentiality of your personal collections and postal scans, we do NOT use screen recording, keystroke logging, arbitrary click trackers (autocapture), or session replay technologies.
• Cookies & Local Data Storage: We use first-party cookies, browser localStorage, sessionStorage, IndexedDB, and the browser Cache API. These are used exclusively for session authentication, network protection, analytics session continuity, saving client-side UI preferences (such as theme settings, canvas zoom, and filter states), and caching client-side AI models (such as ONNX runtime files) to improve performance and save bandwidth. We do NOT use third-party advertising trackers or cross-site marketing cookies.

3. How We Use Your Information

We use your information solely to:

• Verify your identity, authenticate your sessions, enforce geographic access limits, and manage your account.
• Administer account access, enforce rate limits and system quotas, and communicate important service updates.
• Operate and execute our cropping, image segmentation, matching, and collection organization tools.
• Process images via computer vision and machine learning pipelines to detect stamp boundaries and suggest descriptive details (such as country, year, and denomination). Images sent to our AI providers are processed transiently to return results to us. We do not use your scans, images, or collection records to train, fine-tune, or improve any machine learning models (see Section 7).
• Render, organize, and display your private or publicly shared collections.
• Monitor application stability, diagnose software errors, analyze aggregate feature usage, and evaluate the quality and performance of AI-generated outputs, as described in Section 2.

4. Third-Party Service Providers (Subprocessors)

To deliver our serverless, high-availability, and AI-driven tools, we engage trusted third-party service providers (subprocessors) to process technical and personal data strictly under our instruction. We do NOT sell your personal data or your uploaded images. Our subprocessors fall into the following operational categories:

• Identity & Authentication Providers: To securely manage user sign-ups, issue authentication tokens, process passwordless or social logins, and maintain active sessions. We do not store raw passwords on our systems.
• Cloud, Edge & Storage Providers: To host our application at the network edge, route encrypted traffic, enforce geoblocking boundaries, execute asynchronous background processing queues, store raw and cropped stamp images in encrypted object storage, and maintain our databases.
• Analytics & Observability Providers: To monitor application stability, capture crash reports, track AI inference telemetry (including token metrics, prompt inputs, and model outputs for diagnostic quality evaluation), and analyze user interactions (via PostHog) to improve product design and resolve software bugs.
• Machine Learning & Vision Infrastructure: To detect stamp boundaries, generate image embeddings that power matching features, and suggest descriptive details (such as denomination, country, and year), we send images and related text to third-party AI model providers and hosted GPU compute services. These providers process the data transiently to return results to us, and are restricted by contract or account configuration from using it to train, improve, or fine-tune their own AI models. The resulting outputs (such as crop boundaries, embeddings, and suggested details) are stored with your collection records.
• Web Search Providers: When an AI model performs a web search while analyzing your scan, the search service receives only text queries written by the model based on what it sees (such as a country, printed year, or subject). Your images and account identifiers are not sent to search services.
• Payment Processors (Currently Suspended): While payment integrations remain part of our technical architecture, payment processing is currently deactivated during this free preview launch. No payment card details or billing records are collected or transmitted at this time.

5. Public Sharing & Data Visibility

• Private Data: By default, your uploaded scans, cropped stamps, and collection records are private and accessible only to you when logged in.
• Public Sharing & Toggling to Private: If you explicitly toggle a collection to "Public," anyone with the unique URL on our domain will be able to view the stamps and metadata within that specific collection. If you toggle a public collection or stamp back to "Private," our API will immediately restrict unauthorized direct access to that record. Please note that due to the architecture of distributed edge networks and asynchronous background queues, it may take up to forty-eight (48) hours for cached image assets, CDN edge nodes, and vector search indices to fully propagate and invalidate across our global infrastructure.
• Third-Party Crawlers and Caching: While a collection is designated as "Public," it may be crawled, cached, or indexed by external search engines, automated web spiders, or public web archives. Oddstamps does not control, and cannot remove content from, third-party search engines or external caches that indexed your content while it was publicly accessible.
• Published Binder Templates: When you publish a binder template, its layout, slot details, and image fingerprints derived from its stamps (embeddings) are used to help other users match stamps from their own collections to it. Other users never receive your private stamps or the fingerprints themselves. Matching features may be subject to usage limits or paid plans, and publishing a template does not entitle you to any payment.

6. Data Retention & Deletion

• Account Deletion: You can request account deletion at any time through the in-app settings or by contacting support@oddstamps.com.
• Data Removal: Upon account deletion, your metadata records in our cloud database and your image assets in our cloud object storage will be permanently destroyed, and we will request deletion of the pseudonymous analytics and diagnostic data associated with your account from our observability provider. Because payment processing is currently suspended and no monetary transactions are processed, Oddstamps maintains no payment card or transactional billing records for current users. Should paid transactions occur in the future, relevant financial records would be retained only for the minimum statutory period required by Canadian and US tax and accounting regulations.
• Orphaned & Inactive Scans: Raw scan sheets uploaded but abandoned without being cataloged, or raw source scans associated with free accounts inactive for more than twelve (12) consecutive months, may be periodically pruned from our cloud object storage to conserve infrastructure storage.
• Analytics & Diagnostic Data: Pseudonymous analytics events, error reports, and AI telemetry held by our observability provider are retained only as long as needed for the purposes described in Section 2.

7. Canadian & US User Rights

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada, as well as applicable US state privacy principles (including the California Consumer Privacy Act, CCPA/CPRA). Depending on your location, you have the following rights:

• Access and Portability: You have the right to access the personal data we hold about you and request an export of your catalog records.
• Correction: You have the right to request corrections to any inaccurate or outdated personal information.
• Deletion: You may request that we delete your account, personal data, and uploaded content.
• No Sale or Sharing: We do not sell your personal information, nor do we share your personal data or images for cross-context behavioral advertising.
• Opt-Out Preference Signals & Do Not Track: Because Oddstamps does not sell your personal data or track your activity across third-party websites for targeted behavioral advertising, our platform by default adheres to the privacy preferences intended by "Do Not Track" (DNT) headers and Global Privacy Control (GPC) signals.

US Multi-State Privacy Disclosures (2026 Standards):

If you are a resident of California, Colorado, Connecticut, Virginia, Texas, Oregon, or other US states with applicable comprehensive consumer privacy legislation, you enjoy specific statutory protections:

• Right to Know & Data Portability: You may request disclosure of the specific pieces and categories of personal data we have collected about you and receive an electronic copy of your collection records.
• Right to Correct: You may request that we correct inaccurate personal data maintained in your account.
• Right to Delete: You may request the deletion of your personal data, subject to limited statutory exceptions.
• No Sale or Cross-Context Behavioral Advertising: Oddstamps does not "sell" personal data (for monetary or other valuable consideration) and does not "share" or process personal data for targeted or cross-context behavioral advertising.
• Non-Collection of Sensitive Personal Information (SPI): We do not collect, solicit, or process Sensitive Personal Information (such as government identification numbers, financial account credentials, precise geolocation, genetic data, or biometric identifiers).

Right to Appeal (Mandatory Statutory Notice):

If you submit a privacy request (such as an access or deletion request) and we decline to take action, we will inform you of the legal reasons for our decision. You have the right to formally appeal our decision within forty-five (45) days by contacting our Privacy Officer at support@oddstamps.com with the subject line "Privacy Request Appeal." Within forty-five (45) days of receiving your appeal, we will inform you in writing of any action taken or not taken, including an explanation of the reasons for the decision. If your appeal is denied, residents of applicable states (such as Colorado, Connecticut, and Texas) may submit a formal complaint directly to their state Attorney General.

Managing Your Preferences & Withdrawing Consent:

You maintain continuous control over how your data is utilized on Oddstamps:

• Public vs. Private: You can change any album or stamp from Public to Private (or vice versa) at any time through the collection editor.
• Community & AI Model Policies: Oddstamps processes images only to provide the Service's features, such as segmentation, descriptive suggestions, and matching. We do NOT use your private stamp scans, cropped images, or personal metadata to train, fine-tune, or calibrate public or proprietary machine learning models. We do not currently offer or require an opt-in data contribution program. Should any voluntary model enhancement program be introduced in the future, it will be strictly opt-in and fully configurable through your Account Settings.

8. Data Security & International Processing

Security Measures:

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal data from accidental loss, unauthorized access, alteration, or disclosure. These measures include industry-standard encryption protocols for data in transit (TLS/HTTPS) and data at rest, as well as restricted access controls to our database infrastructure. However, no method of electronic storage or transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Data Storage & Processing Locations:

Although our Service is intended for users in our authorized service regions, our cloud infrastructure, databases, and third-party service providers (such as hosting, analytics, and payment processors) may maintain servers and facilities in the United States and other jurisdictions. By accessing or using the Service, you acknowledge that your information may be transferred to, stored, and processed in locations outside your home state, province, or country, where data protection laws may differ from those of your local jurisdiction.

9. Children's Privacy

Our Service is not directed to children under 13, and we do not knowingly collect personal data from anyone under the age of 13. Users between 13 and the age of majority in their jurisdiction may only use the Service with parental or guardian involvement. If we discover we have inadvertently collected such data, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on the Service before the changes take effect, and update the "Last Updated" date at the top of this policy. Non-material changes (such as clarifications, corrections, or formatting) take effect when posted.

11. Contact & Privacy Officer

Oddstamps has appointed an internal Privacy Officer responsible for overseeing our privacy compliance program and handling data subject inquiries.

If you have questions regarding this Privacy Policy, wish to exercise your statutory rights to access, correct, or delete your data, or wish to file a formal privacy appeal, please contact our Privacy Officer using the following details:

Attn: Privacy Officer
Company: Oddstamps
Mailing Address: 2967 Dundas St. W. #288D, Toronto, ON M6P 1Z2, Canada
Email: support@oddstamps.com

Response Window: We endeavor to respond to all verified privacy and access requests within thirty (30) days of receipt.

12. Language of Policy

This Privacy Policy, along with all related privacy notices, communications, and data subject requests, is established and maintained exclusively in the English language. The parties confirm their express wish that this Privacy Policy and all related documents be drawn up exclusively in the English language. / Les parties confirment leur volonté expresse que la présente politique de confidentialité et tous les documents s'y rattachant soient rédigés exclusivement en langue anglaise.