Privacy Policy

Picks University is owned and operated by Actually Insane, Inc. (“Company”, “we”, “us”), a Delaware corporation. We operate picksuni.com and its subdomains (the “Service”). This policy explains what information we collect, how we use it, and the choices you have.

Information we collect

• Account information. Your email address (used for sign-in via one-time code) and, if you choose Google sign-in, the basic profile fields Google returns (name, email, avatar URL).
• Subscription and payment information. When you start a trial or pay, Stripe processes the transaction. We store your Stripe customer ID, current subscription status, current period end, and trial end. We never see or store your full card details — those live with Stripe.
• Usage and analytics information. We use PostHog to understand how the Service is used: pages viewed, features clicked, session activity, device and browser type, approximate location derived from IP address, and referral/attribution data (such as the campaign or link that brought you here). This helps us improve the product and measure marketing.
• Server logs. Standard logs (IP address, user agent, path requested, timestamp) kept for a limited period for debugging, security, and abuse prevention.
• Mobile number. If you enter a phone number on the Lightning Deal form, during onboarding, or in Account settings and agree to texts, we store that number and the fact that you opted in, along with when you opt out.
• Communications. If you email us, we keep the correspondence so we can respond and maintain a record of the request.

How we use it

• To authenticate you and keep your session active.
• To grant or revoke access to paid features based on your subscription status.
• To send transactional emails (sign-in codes, billing notices, material changes to our terms or this policy).
• To send account recovery and offer emails to your verified account email (for example unfinished signup, billing, or checkout) unless you unsubscribe or opt out in Account settings.
• To send the recurring marketing texts described below, and only after you opt in. A one-time sign-in code you request is separate from that marketing program.
• To analyze usage, improve the Service, and measure the effectiveness of marketing campaigns.
• To detect fraud and abuse, enforce our Terms of Service, and comply with legal obligations.

Who we share it with

We share data with the service providers required to run the Service: Supabase (authentication and database hosting), Stripe (payments), Cloudflare (TLS and traffic routing), Vercel (application hosting), and PostHog (product analytics). Each processes data on our behalf under its own privacy and security commitments. We may also disclose information if required by law, subpoena, or to protect our rights, users, or the public. We do not sell your personal information. That sharing does not include your mobile number or your consent to receive text messages for any marketing or promotional use.

Text messages

PicksUni is operated by Actually Insane, Inc. If you submit your mobile number on the Lightning Deal form at picksuni.com, during onboarding, or by texting START, and you agree to receive texts, we send recurring marketing messages: promotional codes (including a code for 31% off your first purchase), limited-time offers, reminders, and product announcements about the PicksUni subscription. Message frequency varies. Message and data rates may apply. Reply STOP to opt out and HELP for help. Consent to these texts is not a condition of purchase.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Cookies and similar technologies

We use strictly-necessary cookies to keep you signed in and to maintain your Stripe checkout session, and analytics cookies/local storage set by PostHog to recognize returning visitors and attribute sign-ups to marketing campaigns. You can block cookies in your browser, but sign-in will not work without the strictly-necessary ones.

Data retention

Account and subscription records are kept while your account exists and for up to 90 days after deletion, except where longer retention is required for financial recordkeeping, dispute resolution, or legal compliance. Server logs roll off on a short cycle. Analytics data is retained per PostHog's standard retention. You can request deletion at any time by emailing us at the address below.

Your rights

• Access, correct, or delete your account data on request.
• Export your subscription history.
• Opt out of account recovery / offer emails via unsubscribe links or Account → Communications; opt out of SMS by reply STOP or the same settings.
• If you are in the EU/UK, you have the rights afforded by GDPR (access, rectification, erasure, restriction, portability, objection). If you are a California resident, you have the rights afforded by the CCPA/CPRA, including the right to know, delete, and correct. We do not discriminate against you for exercising these rights.

Security

We use industry-standard measures (TLS in transit, encrypted storage with our hosting providers, least-privilege access) to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

Children

The Service is intended for adults of legal sports-wagering age in their jurisdiction (21+ in most US states, 18+ minimum everywhere). We do not knowingly collect data from anyone under 18. If we learn we have, we will delete it.

International users

The Service is operated from the United States and your data is processed there. By using the Service, you consent to the transfer of your information to the US.

Changes

We may update this policy. Material changes will be announced on this page with a new “last updated” date and, where required by law, by email. Continued use after a change constitutes acceptance.

Contact

Actually Insane, Inc. — questions, requests, or complaints: hello@picksuni.com.