Privacy Notice

1. Who we are

Zentri is a software-as-a-service platform available through zentrigrading.app.

Zentri is a SaaS platform operated by a-ag, registered in the Netherlands with the Dutch Chamber of Commerce. Zentri is a registered trade name of a-ag. When you use Zentri Grading, create an account, purchase credits, start a subscription, or receive an invoice, your contractual and billing relationship is with a-ag.

2. What this Privacy Notice covers

This Privacy Notice explains what personal data Zentri collects, why it is used, how long it may be kept, what choices you have, and how you can request access, correction, deletion, or other privacy actions.

Zentri aims to collect only the data needed to operate the service, generate centering reports, manage user accounts, process billing, maintain platform security, and comply with legal obligations.

3. Account data we process

When you create or use a Zentri account, we may process account-related data such as:

• username or display name;
• email address;
• account identifiers;
• login and session information;
• account settings and preferences;
• communication preferences;
• security and access logs.

Your username or display name may be used inside your account, billing interface, portfolio area, report management tools, and other account-related screens.

4. Report and portfolio data we process

When you use the centering studio or save reports, Zentri may process report-related data such as:

• card name, set, number, and TCG type entered by you;
• front and back centering measurements;
• centering percentages, taper values, angle values, warnings, and score estimates;
• generated report payloads and report metadata;
• generated or saved card/report images;
• report status, such as front-only, back-only, or complete;
• portfolio collections and collection names;
• report sharing status and share tokens where applicable.

Reports are private by default unless you choose to enable public sharing for a specific report.

5. Uploaded and generated images

Zentri may process images uploaded or generated during the centering workflow. These images may be used to create corrected card-side images, display reports, support your portfolio, and preserve the report result.

If image deletion or account deletion features are used, Zentri removes images from active report/account areas where technically available, except where temporary backups, logs, legal obligations, or technical retention limitations apply.

6. Billing and payment data

Payments are processed through Stripe. Zentri does not store full payment card numbers on its own servers.

Zentri may store or process billing-related information needed to operate purchases, subscriptions, credits, invoices, and account access, including:

• Stripe customer ID;
• Stripe subscription ID;
• Stripe invoice references;
• payment status and payment event records;
• subscription status and billing period dates;
• credit balances and credit ledger entries;
• checkout session references;
• invoice and audit information required by law.

7. Technical and security data

Zentri may process technical information needed to operate, secure, debug, and improve the service. This may include:

• IP address;
• browser and device information;
• timestamps;
• session data;
• security logs;
• error logs;
• request and response information related to billing or account actions.

This data is used to maintain security, detect abuse, troubleshoot issues, prevent fraud, and operate the service reliably.

8. Why we use your data

Zentri processes personal data for the following purposes:

• creating and managing your account;
• allowing access to the centering studio;
• generating, saving, displaying, and managing reports;
• displaying reports in your portfolio;
• organizing reports into collections;
• processing payments, subscriptions, and credit purchases;
• granting credits or unlimited access after successful payment;
• showing invoice history and billing status;
• managing communication preferences;
• responding to support requests;
• preventing fraud, misuse, and unauthorized access;
• complying with tax, invoice, accounting, audit, dispute, and legal obligations.

9. Legal bases for processing

Depending on the purpose, Zentri may process personal data based on:

• Performance of a contract, for account access, report generation, credits, subscriptions, billing features, and support.
• Legal obligation, for tax, invoice, accounting, audit, and legal retention duties.
• Legitimate interests, for security, fraud prevention, service operation, error handling, and abuse prevention.
• Consent or user preference, for optional communication settings where consent or preference control is required.

10. Communication preferences

You can manage communication preferences from your profile settings.

These settings may include marketing emails, promotional emails, product updates, and low-credit reminders.

Transactional, billing, security, account, or legally required messages may still be sent where necessary to operate your account, process purchases, maintain security, or comply with legal obligations.

11. Sharing of data

Zentri does not sell your personal data.

Zentri does not share your personal data with third parties for their own marketing purposes.

Zentri may use third-party services only where needed to operate the platform, process payments, provide hosting, maintain security, send required service communications, or support technical infrastructure.

Where third-party services are used, data is limited to what is necessary for that service.

12. Stripe payment processing

Payments are processed by Stripe. Stripe may process payment-related information as a payment provider according to its own terms and privacy practices.

Zentri stores Stripe identifiers and payment status information needed to:

• create checkout sessions;
• manage subscriptions;
• grant credits;
• handle failed payments;
• display billing status;
• maintain invoice and audit records;
• support payment disputes or billing support requests.

Zentri does not store full card numbers on its own servers.

13. Report sharing

Reports are private by default.

If you enable public sharing for a report, anyone with the correct share link may be able to view that report. Public report links may include a share token that allows access to the shared report.

Do not enable sharing for a report if you do not want others with the link to view it. You can disable sharing where the feature is available.

14. Report deletion

You can delete saved reports from your profile settings.

When reports are deleted, Zentri removes the report data and associated report content from the active account/report system where technically available, except where limited backups, security logs, legal retention obligations, dispute records, or technical retention limits apply.

15. Account deletion

You can delete your account from your profile settings.

When your account is deleted, Zentri deletes your account data and associated report data from the active account system, except data that must be retained for legal, tax, invoice, audit, accounting, payment dispute, fraud prevention, or security obligations.

If you have an active subscription, you may need to cancel the subscription before account deletion can be completed, so that no future subscription charges are created.

16. Data we must retain

Certain records may need to be retained even after report deletion or account deletion. This includes data required for:

• invoices;
• tax administration;
• accounting records;
• audits;
• payment disputes;
• fraud prevention;
• legal claims or legal obligations.

Where retention is legally required, the retained data is limited to what is necessary for that purpose.

17. How long we keep data

Zentri keeps personal data only for as long as needed for the purpose for which it was collected, unless a longer retention period is required by law, accounting obligations, tax rules, invoice requirements, dispute handling, fraud prevention, or security needs.

Report data is normally kept while your account is active, unless you delete reports or delete your account.

Billing, invoice, and audit records may be kept for the legally required retention period.

18. Security

Zentri uses reasonable technical and organizational measures to protect account data, report data, billing-related data, and platform security.

No online service can guarantee perfect security. You are responsible for keeping your login credentials secure and for using a strong password.

19. Your privacy rights

Depending on your location and applicable law, you may have rights to:

• access your personal data;
• correct inaccurate personal data;
• delete personal data;
• restrict processing;
• object to certain processing;
• receive a copy of your data;
• withdraw consent for optional communications;
• file a complaint with a data protection authority.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens.

20. How to exercise your rights

You can manage reports, communication preferences, and account deletion from your profile settings where those features are available.

For privacy requests, contact: support@zentrigrading.app.

Zentri may need to verify your identity before processing certain privacy requests.

21. International processing

Some technical, hosting, security, or payment services may process data outside your country. Where this happens, Zentri relies on appropriate safeguards where required by applicable law.

22. Children

Zentri is not intended for children. If you believe a child has provided personal data through Zentri, contact us so we can review and remove it where appropriate.

23. Changes to this Privacy Notice

Zentri may update this Privacy Notice from time to time. The latest version will be posted on this page.

If a change is important, Zentri may provide additional notice where appropriate.

24. Contact

For questions about privacy, report deletion, account deletion, or data requests, contact: support@zentrigrading.app.