Privacy Policy

1. Introduction

This Privacy Policy explains how [PICKSHARE LEGAL ENTITY] (“Pickshare,” “we,” “us”) collects, uses, shares and protects personal information when you use the Pickshare website, applications and services (the “Service”). It should be read together with our Terms of Service.

2. Information we collect

Information you provide

• Account & profile: username, email address, password (stored hashed by our auth provider), and any profile details, bio or avatar you add.
• Capper details: if you sell picks, the sports and specialities you cover, your picks, and identity/payout details collected by Stripe for verification.
• Communications: messages you send to support and your notification preferences.

Information collected automatically

• Usage data: pages viewed, picks accessed, subscriptions, referrals and similar activity.
• Device & log data: IP address, browser type, device identifiers and timestamps.
• Cookies: we use cookies and similar technologies to keep you signed in and to operate the Service (see Section 5).

Information from third parties

• Payments: Stripe processes payments and payouts. We receive limited transaction data (such as the last four digits, card brand, and status) but do not store full payment-card numbers.
• Odds data: we display sports odds and event data sourced from a third-party odds provider.

3. How we use information

• provide, operate, secure and improve the Service;
• process subscriptions, platform fees and capper payouts;
• track and display capper performance and leaderboards;
• send transactional messages and, where you opt in, notifications about new picks;
• detect, prevent and respond to fraud, abuse and security incidents;
• comply with legal obligations and enforce our Terms.

4. How we share information

We do not sell your personal information. We share it only:

• with service providers (processors) who act on our behalf, including:
  • Supabase — database, authentication and storage;
  • Stripe — payments, payouts and identity verification;
  • Resend — transactional and notification email;
  • Twilio — SMS notifications (where enabled);
  • Vercel — application hosting;
  • our odds-data provider — sports events and odds.
• publicly, by your choice — your username, public profile, picks you publish and aggregate performance stats are visible to others;
• for legal reasons — to comply with law, enforce our Terms, or protect rights, safety and property;
• in a business transfer — in connection with a merger, acquisition or sale of assets.

5. Cookies and tracking

We use strictly-necessary cookies for authentication and core functionality, and may use limited analytics to understand usage. [Counsel: add cookie-consent banner and details if required in your target markets, e.g. EU/UK.]

6. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then for any additional period required to comply with legal, tax, accounting or dispute-resolution obligations. Financial transaction records may be retained longer to meet these obligations.

7. Security

We use reasonable technical and organizational measures — including encryption in transit, hashed passwords, and database row-level security — to protect personal information. No system is perfectly secure, so we cannot guarantee absolute security.

8. Your rights and choices

• access, correct or delete your account information;
• opt out of non-essential notifications in your settings;
• request a copy of your data or its deletion by contacting us.

Depending on where you live, you may have additional rights under laws such as the GDPR/UK GDPR or CCPA/CPRA (including access, deletion, portability, and the right not to be discriminated against for exercising your rights). [Counsel: add jurisdiction-specific disclosures, legal bases for processing, and any “Do Not Sell/Share” mechanism required.]

9. Children

The Service is intended only for adults of legal age. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

10. International transfers

We and our providers may process information in countries other than yours. Where required, we use appropriate safeguards for such transfers. [Counsel: confirm transfer mechanism, e.g. SCCs.]

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be indicated by updating the date above and, where appropriate, by additional notice.

12. Contact

Privacy questions or requests: [PICKSHARE LEGAL ENTITY], [MAILING ADDRESS], privacy@pickshare.co. [Counsel: add EU/UK representative or DPO if applicable.]