Privacy policy

Last updated: October 10, 2026 · DCG Labs Inc.

1. Who we are

Collect-O-Rama is made by DCG Labs Inc., an Ontario corporation (“we”, “us”), at 212 O'Donoghue Ave, Oakville, Ontario L6H 3W6, Canada. This policy covers the Collect-O-Rama apps for iPhone and Android, the website at collect-o-rama.com and its subdomains, and public share pages. Our Privacy Officer is responsible for how we handle personal information and can be reached at info@collect-o-rama.com.

2. What we collect

What you give us

• Account: email address, password (stored only as a secure hash), display name, and, if you choose them, a handle, region and profile picture.
• Your collection: the items you add and their details, your drawers, photos, wish list, what you paid, where you bought, notes, and spreadsheets you import.
• Marketplace and community: listings, offers, messages, deals, ratings, reports, blocks, follows, and your public profile if you turn it on.
• Price contributions: sale prices you log, which feed the anonymized community valuations unless you opt out in settings.
• Purchases: what you bought and when, where purchases are offered. Payment details stay with the store.
• Contact: what you send us.

What we receive automatically

• Technical data: IP address, device platform, app version, and a push token if you allow notifications.
• Service logs: which features were called and when, errors, and AI usage against your Collect-O-Bucks balance. These keep the service running, secure and within budget.
• Usage analytics, session recordings and attribution, only if you agree to them. See section 5.

What we receive from others

• Google or Apple, if you sign in with them: your email address and name.
• App stores: confirmation of a purchase or refund.
• Other collectors: ratings, messages and reports that involve you.

3. What stays on your phone

Some permissions work entirely on the device. Location, if you allow it, sorts shows by distance on your phone and is never sent to us. Calendar access adds a show you chose to your calendar; we don’t read your calendar. Camera and photo library access is used only for the pictures you take or pick.

4. How we use it

• To run the app: sign-in, your collection, identification, values, the marketplace, notifications and purchases.
• To keep it safe: fraud and abuse prevention, moderation, security monitoring and enforcing our terms.
• To improve it: fixing bugs, and understanding which features help collectors (section 5).
• To grow the shared catalog: when you scan a kind of collectible no one has added yet, the app proposes a new category (its name and the details worth recording). The category is shared; your photo and your own notes are not.
• To talk to you: service messages you need, and marketing only if you agreed to it (section 11).
• To meet legal obligations, such as tax records for purchases.

We use personal information only for the purposes described here, or a new purpose you consent to.

5. Analytics, product research and marketing measurement

Essential measurement (always on)

Error reports, service logs, security monitoring, and the counts we need to run the service, such as AI usage and spending limits. These are not used for advertising and aren’t linked to marketing profiles.

Optional measurement (only with your consent)

We may later ask to use product analytics (which screens and features are used), session recordings and heatmaps (with anything you type, prices, messages and photos masked on your device), and marketing measurement (which campaign or link brought someone to the app). Each is asked for separately, can be declined without limiting the app, and can be switched off at any time in the app or by writing to info@collect-o-rama.com.

What runs today: none of these. No analytics, recording or advertising-measurement tool runs in Collect-O-Rama. Each one is added to the provider list in section 8, with its consent choice in the app, before it goes live.

AI-assisted analysis

We may use AI tools, including the AI providers named in section 8, to summarize and find patterns in feedback and support messages. We don’t make decisions with legal or similarly significant effects about you by automated means alone.

6. What other people can see

• Your collection is private by default, and your email address is never shown to other collectors.
• Listings: an item you list for sale or trade appears in the marketplace with its photos, price, and your display name or handle.
• Public profile, off by default: if you turn it on, your handle, profile picture, region, followers and activity become visible, along with the drawers and wish list you allow. What you paid, where you bought, your notes and values are never shown.
• Adult categories: items in a category marked adult are kept out of the activity feed.
• Messages and deals are visible to the collectors involved, and to our staff when needed to handle a report or keep the service safe.
• Ratings you leave appear on the other collector’s profile.
• Catalog photos: a photo of an item that has no catalog image yet may become that item’s shared catalog image.
• Share links you create can be opened by anyone who has them.

7. When we share personal information

We don’t sell your personal information. We share it only:

• with the service providers in section 8, for the work described;
• with other collectors, as described in section 6;
• when the law requires it, or to protect the safety, rights or property of collectors, the public or us;
• with a buyer or successor if Collect-O-Rama or DCG Labs Inc. is sold, merged or reorganized, who must honour this policy; and
• with anyone else, only with your consent.

We may share aggregated or de-identified insights, such as how many collectors own an item or trends in what collectors scan, with partners, makers, retailers and the public. These can’t reasonably be used to identify you.

8. Service providers

These providers process personal information for us. Where their terms allow it, we use settings that stop them from training AI models on your data.

9. Where your information is stored

Our servers and most of our providers are in the United States, so your information is stored and processed outside Canada, and courts and authorities there may be able to access it under their laws. We rely on our providers’ contractual commitments to protect it.

10. How long we keep it, and deletion

Account and collection data is kept while your account is active. You can permanently delete your account in the app (Profile, then Settings, then Delete account). Deletion takes effect immediately and removes your collection, photos, listings, offers, messages, deals and Collect-O-Bucks balance. You can also ask us at info@collect-o-rama.com, and we’ll finish within 30 days. Copies in our backups are removed as those backups expire on their normal schedule.

A few things survive deletion by design: anonymized valuation data with no link to you; catalog entries and categories you contributed, with your name removed; a photo of yours that became an item’s shared catalog image; evidence attached to an unresolved report, until a moderator resolves it; records we must keep by law, such as purchase and tax records; and a minimal record of the deletion itself (your email address and when), kept for accountability.

11. Emails and notifications

We send the service messages you need, such as password resets, marketplace notifications you haven’t turned off, and important changes to these policies. Marketing messages go only to people who agreed to receive them, and every one has a working unsubscribe link. Push notifications can be turned off in your phone’s settings.

12. Your rights

• Access: ask what personal information we hold about you and how it has been used and shared.
• Correction: fix inaccurate information, most of it directly in the app.
• Portability: export your collection in the app, or ask us for your information in a structured, commonly used format.
• Withdraw consent: switch off optional measurement or marketing messages at any time.
• Deletion: delete your account in the app, or ask us to.

Write to info@collect-o-rama.com. We’ll answer within 30 days and may ask you to confirm your identity first. If you’re not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.

13. Security

Data is encrypted in transit. Passwords are stored only as hashes and are checked against known breach lists when set. Staff access to collector data requires sign-in, supports two-factor authentication and is logged. No system is perfectly secure; if a breach creates a real risk of significant harm, we’ll notify you and the regulators as the law requires.

14. Children

Collect-O-Rama is not directed at children under 13, and we don’t knowingly collect their personal information. If you believe a child under 13 has an account, write to info@collect-o-rama.com and we’ll delete it.

15. Changes

We’ll post changes here with a new date. For material changes, including any new kind of tracking, we’ll give notice in the app first, and where the law requires it we’ll ask for your consent again.

16. Contact

Privacy Officer, DCG Labs Inc., 212 O'Donoghue Ave, Oakville, Ontario L6H 3W6, Canada: info@collect-o-rama.com. Our terms of service are at /terms.