How we handle your data

Privacy Policy

Last updated: July 24, 2026

Plain-English summary: We collect what we need to run your account and the app. The customer data you store belongs to you — we don't sell it, and no other shop can see it. We use trusted services (Supabase to host, Stripe to process payments, Google Gemini to read card photos) to operate. You can access, export, or delete your data anytime.

1. Who we are

Bowlers Depot 2 LLC, trading as "AI Drill Card Manager" ("we," "us," "our"), is the data controller responsible for the personal information described in this Privacy Policy. It explains how we handle information in connection with our website at aidrillcard.com and the application at bowlers-card-archive.lovable.app (together, the "Service"). Questions? Contact us at info@aidrillcard.com.

2. Information we collect

  • Account information. When you sign up we collect your shop name, email address, and login credentials. Passwords are stored in securely hashed form.
  • Payment information. Subscriptions are processed by Stripe on behalf of Bowlers Depot 2 LLC. We do not store your card number on our servers — Stripe handles payment details directly. We receive limited billing information such as your subscription status, renewal date, and customer identifier.
  • Content you enter. The customer records and drilling information you add — names, contact details, and ball/drilling specifications — plus any photos of drill cards you upload for scanning.
  • Usage and device information. Basic technical data such as browser type, device type, and log information, collected to keep the Service secure and working.

3. About your customers' information

The Service lets you store information about your customers. That data is entered and controlled by you. You are responsible for having the right to collect and store it, and for informing your own customers about how you handle their information where the law requires. We process this data only to provide the Service to you — we do not use it for our own purposes, and we never sell it.

4. How we use information

  • To provide, operate, and maintain the Service
  • To process drill card photos you upload and return the extracted data to you for review
  • To handle billing, subscriptions, and renewals
  • To respond to support requests and communicate about your account
  • To protect the security and integrity of the Service

5. How the photo scanning works — please read

When you upload a photo of a drill card, the image is sent to Google's Gemini API solely to read the card and return the text to you for review. The image is also stored in your private account so you can reference the original.

Important: We currently use the Gemini API's standard (free) tier. Under Google's terms for that tier, data submitted to the API — including uploaded card images and their contents — may be used by Google to improve its services and models. If you do not want a particular card's information handled this way, do not use the photo-scan feature for it; you can always enter that card manually instead. Google's handling of this data is governed by Google's own privacy terms. We are working toward moving to a paid processing tier that excludes this use, and we will update this policy if and when that changes.

6. Who we share information with

We do not sell your information. We share it only with service providers who help us run the Service:

  • Hosting, database & image storage: Supabase and Lovable
  • Payments: Stripe, our payment processor. Stripe receives your billing name, email, address, and payment details to process and tax your subscription.
  • AI card scanning: Google (Gemini API)

We may also disclose information if required by law, or to protect our rights, safety, or the security of the Service.

7. Data isolation between shops

Each shop's data is kept private and separated from every other shop's data through account-level access controls. One shop cannot see, search, or access another shop's customers or drill cards.

8. Data retention

We keep your account and content while your account is active. If you cancel, we retain your data for 30 days to allow reactivation, after which it may be deleted. You can request deletion sooner (see below).

9. Your choices and rights

You can access and update most of your information directly in the app. You may also contact us at info@aidrillcard.com to request a copy of your data, correct it, or delete your account and its contents. Depending on where you live, you may have additional rights under applicable privacy laws.

10. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No system is perfectly secure, but we work to safeguard your data and to address any issues promptly.

11. Children

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, notify you.

13. Contact

Questions about this policy? Email us at info@aidrillcard.com.