Privacy Policy

Effective date: October 29, 2026

1. Who we are

This Privacy Policy explains how Ketexa Inc. ("Ketexa", "we", "us" or "our") collects, uses and shares personal information through the Grailhood website at https://www.grailhood.com, our apps and related services (together, the "Service").

Ketexa Inc. is a Delaware corporation. We are responsible for the personal information described in this Policy.

Grailhood is an online platform for adults in the United States. Users buy digital packs. Opening a pack reveals one collectible card. After the reveal, the user can request delivery of the card or accept our offer to buy it back for a credit to the user's Grailhood balance.

Pre-launch. The Service is not yet open to the public. Until launch, we collect only website usage data and the details you give us when you join our waitlist or contact us. All other parts of this Policy apply from launch.

This Policy forms part of our Terms of Use. Capitalized terms not defined here have the meaning given in the Terms of Use.

2. Information we collect

Information you give us

• Account data: name, email address, password, date of birth, phone number and account settings.
• Identity verification data: government ID, photo or selfie, residential address and verification results. Our identity verification providers may collect this data directly.
• Shipping data: delivery address and contact details for card shipments.
• Payment and payout data: payment card or account details, billing address and payout details. Our payment and payout providers process full card and bank account numbers. We receive only limited details, such as card type, last four digits and transaction status.
• Transaction data: pack purchases, card reveals, buyback offers you accept, shipment requests, balance history and withdrawals.
• Communications: messages you send to support, survey answers and waitlist sign-ups.

Information we collect automatically

• Device and usage data: IP address, browser and device type, device identifiers, pages viewed, clicks, referring pages and the date and time of each visit.
• Location data: approximate location from your IP address. When you use the Service, we may also collect precise device location to confirm that you are in an eligible location. We ask for your permission where the law requires.
• Cookies and similar tools: see Section 6.

Information from third parties

We may receive information from identity verification, fraud prevention, geolocation, payment and payout providers; from our card inventory and fulfillment partner (for example, shipment status); and from analytics and marketing partners. We may combine this information with the information we hold about you.

3. How we use information

We use personal information to:

• create and manage your account and provide the Service, including pack purchases, card reveals, buybacks, shipments, your balance and withdrawals;
• verify your identity, age and location, and confirm that you are eligible to use the Service;
• prevent, detect and investigate fraud, abuse, chargebacks, money laundering and sanctions violations;
• process payments, payouts and refunds;
• answer your questions and provide customer support;
• send you service messages, such as receipts, shipment updates and changes to our terms;
• send you marketing messages, where the law allows (you can opt out at any time);
• analyze and improve the Service and develop new features;
• keep the Service and our systems secure;
• comply with the law, respond to lawful requests and enforce our Terms of Use; and
• establish, exercise or defend legal claims.

We may also create de-identified or aggregated data that does not identify you. We may use it for any lawful purpose.

4. How we share information

We share personal information only as follows:

• Service providers. Companies that help us run the Service, such as hosting, payment and payout processing, identity verification, fraud prevention, geolocation, analytics, email and SMS delivery, and customer support. They may use the information only to provide services to us.
• Inventory and fulfillment partner. The partner that holds the cards and ships them. We share the details needed to fulfill your shipment request, such as your name, delivery address, phone number and order details.
• Shipping carriers. To deliver your cards.
• Professional advisors. Lawyers, auditors, insurers and banks, where they need the information to advise or serve us.
• Legal and safety reasons. Courts, regulators, law enforcement and other parties, when the law requires it, to respond to lawful requests, or to protect the rights, property or safety of Ketexa, our users or others.
• Business transfers. A buyer or other party in a merger, financing, sale of assets or similar transaction.
• With your consent or at your direction.

We do not sell your personal information for money. We do not share it with third parties for their own marketing purposes.

5. Your choices and rights

• Account data. You can review and update your account details in your account settings.
• Marketing. You can opt out of marketing emails through the unsubscribe link, and out of marketing texts by replying STOP. We will still send service messages.
• Access, correction and deletion. You can ask us to access, correct or delete your personal information by emailing legal@ketexa.com. Depending on your state of residence, you may have further rights, such as the right to opt out of targeted advertising or to appeal our decision. We will verify your identity before we act on a request. We will not treat you differently for exercising your rights.
• Limits. We may keep information when the law requires it or when we need it for fraud prevention, security, tax, anti-money-laundering or dispute purposes.

6. Cookies and similar tools

We use cookies, pixels and similar tools to keep you signed in, remember your settings, secure the Service, measure usage and, where permitted, measure our advertising. You can block or delete cookies in your browser settings. Some features may not work without them. We do not currently respond to "Do Not Track" browser signals.

7. Data retention

We keep personal information for as long as your account is open and as long as we need it for the purposes in this Policy, including legal, tax, accounting, anti-money-laundering and dispute requirements. When we no longer need it, we delete it or de-identify it.

8. Security

We use reasonable administrative, technical and physical safeguards to protect personal information. No method of transmission or storage is fully secure, and we cannot guarantee security. You are responsible for keeping your password confidential. Tell us at once if you think your account is compromised.

9. Age limit

The Service is only for persons above age 18 or the age of majority where you live if that is higher. We do not knowingly collect personal information from anyone under this age. If we learn that we have, we will delete it. If you believe a minor has given us information, contact us.

10. United States only

The Service is intended only for users located in the United States. We store and process personal information in the United States. Our service providers may process it in other countries, under appropriate safeguards.

11. Third-party sites and services

The Service may link to sites and services that we do not control, such as payment providers and carriers. Their own privacy policies apply. We are not responsible for their practices.

12. Changes to this Policy

We may update this Policy from time to time. We will post the new version on this page and change the effective date. If the changes are material, we will give you additional notice, such as by email or in the Service.

13. Contact us

Ketexa Inc., legal@ketexa.com.

Back to home