About Gradetor
Gradetor is operated by AITech Anjos, Postfach 158, 8488 Turbenthal, Switzerland ("we", "us", or "our"). This Privacy Policy explains how we process personal data when you use the Gradetor web app at gradetor.com/app ("the Web App"), the public registry at gradetor.com/registry ("the Registry"), and this website (together, "the Service").
For the personal data described in this policy, we act as the controller. For privacy questions or requests, contact us at contact@aitechanjos.com.
The Short Version
- You sign in with Google or Apple. We store your account details, your grade reports and photos, and your grade balance and purchases on our servers.
- The photos you submit for grading are sent to our AI provider, OpenAI, to generate your report. Under our settings, they are not used to train OpenAI's models.
- Location metadata (EXIF/GPS) is removed from your photos when they are uploaded.
- A report becomes publicly visible in the Registry only if "Save in the registry" is on when you grade (it is on by default and you can turn it off before grading, or at any time afterwards), and never with your name or email address.
- Payments are handled by Stripe; we never see or store your card details.
- We do not sell personal data, we do not show advertisements, and we do not use analytics or advertising cookies.
What We Collect and Why
- Account data - when you sign in with Google or Apple: your name, email address, profile picture (if provided by the sign-in provider), the sign-in provider, and a provider account identifier. If you use Apple's "Hide My Email", we receive only the relay address. Purpose: to create and secure your account, to enforce one account per person, and to contact you about your account and purchases.
- Country and language - your country, derived from your browser's time zone (not from your precise location), and your preferred language. Purpose: to show prices in your local currency where available, to show an approximate local grade for coins and banknotes, and to display the Service in your language.
- Photos - the photos of the front and back of the items you submit. Photos are re-encoded on upload, which removes embedded metadata such as EXIF data and GPS location. Photos that are rejected as not gradable are not stored with a report. Purpose: to generate your report, to show it to you, and, if you choose, to show it in the Registry.
- Grade reports - the report number, category, grade, and the other details of each report, and whether it is saved in the Registry. Purpose: to provide your report history and the Registry.
- Purchase data - the grades you buy and use, amounts, currency, dates, and Stripe payment and customer identifiers. Card details are collected and processed directly by Stripe; we do not receive or store them. Purpose: to credit and use your grades, to process payments and refunds, and to meet accounting obligations.
- Technical and security data - IP address, browser and device information (user agent), sign-in times, session records, and records of AI requests (for example time, success or error, and amount of AI processing used). Purpose: to keep you signed in, to limit an account to one active session, to enforce fair-use limits, to protect the Service against abuse and fraud, and to troubleshoot errors.
- Registry searches - when anyone looks up a report number in the Registry, we store a hashed (irreversibly scrambled) form of the IP address, the time, and whether a report was found. Purpose: to limit the number of searches per visitor and prevent report numbers from being guessed. We do not store the plain IP address for this purpose.
- Support communications - if you contact us, the content of your messages and your contact details. Purpose: to answer your request.
Please do not submit photos that show people, documents, addresses, or other personal data. The Service is not intended to process sensitive categories of personal data.
Why We Are Allowed to Process Your Data
Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases. Under the Swiss Federal Act on Data Protection (FADP), we process personal data in accordance with its principles.
- Performance of a contract (Art. 6(1)(b) GDPR) - to provide your account, generate reports, sell and credit grades, and, when you turn it on, publish a report in the Registry.
- Legitimate interests (Art. 6(1)(f) GDPR) - to secure the Service, prevent abuse, fraud, and account sharing, enforce fair-use and search limits, and improve reliability.
- Legal obligations (Art. 6(1)(c) GDPR) - to keep accounting and tax records and to respond to lawful requests.
- Consent (Art. 6(1)(a) GDPR) - where we ask for it; you can withdraw consent at any time.
What Becomes Public, and How You Control It
Every report receives a random 12-digit report number. The "Save in the registry" switch on the grading screen is on by default; turn it off before grading to keep the report private. You can also change it on the report at any time. While it is on:
- anyone who has the report number can view the report at gradetor.com/registry, including the photos you submitted, the grade, and the other report details;
- your name, email address, and profile picture are never shown;
- Registry pages are marked so that search engines do not index them;
- you can turn it off at any time in the Web App; the report is then no longer shown, and anyone looking up its number is told that it could not be found or was removed by its owner. Deleting the report or your account also removes it from the Registry. While an account is blocked for a breach of our Terms, all of its reports are hidden from the Registry; they become visible again if the block is lifted. If someone believes a public report uses their photos without permission, they can ask us at contact@aitechanjos.com to remove it.
Please remember that people who view a public report may take screenshots or copies, which we cannot recall. Do not include personal data in photos you publish.
Who We Share Data With
We share personal data only with providers that help us operate the Service, and only as needed for their task:
- OpenAI (United States) - AI analysis of the photos you submit for grading. Photos are sent to OpenAI's API. Under our settings and OpenAI's API terms, this data is not used to train OpenAI's models; OpenAI may keep it for a limited period for abuse monitoring. See openai.com/policies/privacy-policy.
- Stripe (Ireland / United States) - payment processing and checkout. Stripe processes your payment details as an independent controller for some purposes, such as fraud prevention. See stripe.com/privacy.
- Google and Apple - sign-in. When you use their sign-in buttons, Google or Apple process data under their own privacy policies.
- Our web hosting provider - hosting of the Web App, its database, and stored photos.
- Google Fonts - fonts on this website are loaded from Google's servers, which receive your IP address.
Reports you save in the Registry are also disclosed to anyone who has their report number (see section 5). We may disclose data where required by law, to protect our rights, or in connection with a merger or sale of our business. We do not sell or rent personal data.
Processing Outside Switzerland and the EU
Some providers process data in countries outside Switzerland and the European Economic Area, in particular the United States. Where these countries do not provide an adequate level of data protection, we rely on appropriate safeguards, such as the Swiss-U.S. and EU-U.S. Data Privacy Frameworks where the provider is certified, or the European Commission's Standard Contractual Clauses as recognised by Switzerland.
Retention
- Account data, photos, and reports are kept while your account exists.
- When you delete a report, it is removed from your account and from the Registry (soft deletion). The record and its photos are kept in our systems, linked to your account, so that your grade balance, purchase history, and fair-use counts remain consistent. They are permanently erased on request or when your account is permanently erased.
- When you delete your account in the Web App, you are signed out everywhere, your account and reports are hidden and can no longer be accessed, and your reports leave the Registry (soft deletion). The data is retained for the purposes above and to prevent abuse, and it is permanently erased on request, except data we must keep for legal reasons.
- Payment and invoicing records are kept for as long as required by accounting and tax law (in Switzerland, generally 10 years).
- Session records are kept for the duration of your sign-in session (up to 60 days) and for a limited period afterwards for security purposes.
- Records of AI requests and hashed Registry searches are kept only as long as needed for security, fair use, and abuse prevention.
Only What Is Necessary
We do not use analytics or advertising cookies. The website (gradetor.com and the public Registry pages) sets no cookies at all. The Web App uses only:
- A session cookie that keeps you signed in (valid for up to 60 days) and a short-lived security cookie used during sign-in.
- Local storage in your browser to remember your preferences, such as your language.
These are strictly necessary for the Service and do not require consent. If you use Google or Apple sign-in, those providers may set their own cookies under their policies.
If we introduce advertising measurement in the future (for example to understand which ads lead to visits or sign-ups), we will announce it in this policy and ask for your consent through a consent banner before any such cookie or technology is used. Nothing of this kind is set if you decline, and you will be able to change your choice at any time.
How We Protect Your Data
We use encrypted connections (HTTPS), sign-in through Google or Apple without storing passwords, session tokens that are stored only in hashed form, and access controls that restrict each account to its own data. Photos are served only to the account that owns them, unless you publish the report in the Registry. Uploaded photos are re-encoded, which removes embedded metadata such as location. No method of transmission or storage is completely secure, but we work to protect your data appropriately.
Access, Correction, Deletion, and More
Depending on the law that applies to you, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data;
- request deletion of your data and your account, including permanent erasure of soft-deleted data;
- restrict or object to certain processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent where processing is based on consent.
You can remove any report from the Registry and delete reports or your account yourself in the Web App. To exercise your other rights, contact contact@aitechanjos.com. We may need to verify your identity. You also have the right to lodge a complaint with a data protection authority, such as the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the authority in your country of residence in the EU or UK.
Not Directed at Minors
The Service is intended only for people aged 18 or older, or the age of majority in their country if that is higher. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
Policy Updates
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new date, and for material changes we will inform account holders in an appropriate way.
Governing Law
This Privacy Policy is governed by Swiss law, in particular the Federal Act on Data Protection (FADP). Where the Service is used in the European Union or the United Kingdom, we also comply with the GDPR where it applies to us.
Get in Touch
For questions, requests, or concerns regarding this Privacy Policy, please contact us at:
AITech Anjos
Postfach 158
8488 Turbenthal, Switzerland