Privacy Policy

Picks University is owned and operated by Actually Insane, Inc. (“Company”, “we”, “us”), a Delaware corporation. We operate picksuni.com and its subdomains (the “Service”). This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

• Account information. Your email address (used for sign-in via one-time code) and, if you choose Google sign-in, the basic profile fields Google returns (name, email, avatar URL).
• Subscription and payment information.When you start a trial or pay, Stripe processes the transaction. We store your Stripe customer ID, current subscription status, current period end, and trial end. We never see or store your full card details — those live with Stripe.
• Usage and analytics information. We use PostHog to understand how the Service is used: pages viewed, features clicked, session activity, device and browser type, approximate location derived from IP address, and referral/attribution data (such as the campaign or link that brought you here). This helps us improve the product and measure marketing.
• Server logs. Standard logs (IP address, user agent, path requested, timestamp) kept for a limited period for debugging, security, and abuse prevention.
• Communications. If you email us, we keep the correspondence so we can respond and maintain a record of the request.

How we use it

• To authenticate you and keep your session active.
• To grant or revoke access to paid features based on your subscription status.
• To send transactional emails (sign-in codes, billing notices, material changes to our terms or this policy).
• To analyze usage, improve the Service, and measure the effectiveness of marketing campaigns.
• To detect fraud and abuse, enforce our Terms of Service, and comply with legal obligations.

Who we share it with

We share data with the service providers required to run the Service: Supabase (authentication and database hosting), Stripe (payments), Cloudflare (TLS and traffic routing), Vercel (application hosting), and PostHog (product analytics). Each processes data on our behalf under its own privacy and security commitments. We may also disclose information if required by law, subpoena, or to protect our rights, users, or the public. We do not sell your personal information.

Cookies and similar technologies

We use strictly-necessary cookies to keep you signed in and to maintain your Stripe checkout session, and analytics cookies/local storage set by PostHog to recognize returning visitors and attribute sign-ups to marketing campaigns. You can block cookies in your browser, but sign-in will not work without the strictly-necessary ones.

Data retention

Account and subscription records are kept while your account exists and for up to 90 days after deletion, except where longer retention is required for financial recordkeeping, dispute resolution, or legal compliance. Server logs roll off on a short cycle. Analytics data is retained per PostHog's standard retention. You can request deletion at any time by emailing us at the address below.

Your rights

• Access, correct, or delete your account data on request.
• Export your subscription history.
• Opt out of any non-essential email.
• If you are in the EU/UK, you have the rights afforded by GDPR (access, rectification, erasure, restriction, portability, objection). If you are a California resident, you have the rights afforded by the CCPA/CPRA, including the right to know, delete, and correct. We do not discriminate against you for exercising these rights.

Security

We use industry-standard measures (TLS in transit, encrypted storage with our hosting providers, least-privilege access) to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

Children

The Service is intended for adults of legal sports-wagering age in their jurisdiction (21+ in most US states, 18+ minimum everywhere). We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.

International users

The Service is operated from the United States and your data is processed there. By using the Service, you consent to the transfer of your information to the US.

Changes

We may update this policy. Material changes will be announced on this page with a new “last updated” date and, where required by law, by email. Continued use after a change constitutes acceptance.

Contact

Actually Insane, Inc. — questions, requests, or complaints: hello@picksuni.com.