Privacy Policy

1. Introduction

Welcome to PickCapture ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website located at pickcapture.com (the "Website") and our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Website or use our services.

2. Information We Collect

2.1 Information You Provide

• Authentication Data: When you sign in using Google OAuth, we collect your email address, name, and Google profile ID.
• Betting Data: When you capture or manually enter betting picks, we collect information including sport, event name, selection (bet type and details), odds, stake amount, potential payout, event date, and sportsbook name.
• Screenshots: When you use our Chrome extension to capture bet slips, we collect and store base64-encoded images of the screenshots you select.
• Source URLs: We may collect the URL of the webpage where you captured a screenshot for reference purposes.

2.2 Automatically Collected Information

• Usage Data: We track your monthly pick count and subscription usage to enforce subscription limits.
• Subscription Information: We collect and store your subscription tier, Stripe customer ID, subscription status, and billing period information.
• AI-Generated Insights: We generate and store AI-powered analysis of your betting picks using OpenAI's GPT-4o model.

2.3 Payment Information

Payment information is processed directly by Stripe, our payment processor. We do not store your credit card details or other payment information on our servers. Stripe handles all payment data in accordance with their privacy policy and PCI DSS compliance standards.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services
• To authenticate your identity and manage your account
• To process and store your betting picks and related data
• To analyze screenshots using AI (OpenAI GPT-4o Vision) to extract betting information
• To generate AI-powered insights about your betting picks
• To automatically grade completed bets by fetching game scores from third-party sports data providers
• To manage your subscription, process payments, and enforce usage limits
• To provide customer support and respond to your inquiries
• To send you important updates about our services (account-related notifications)
• To comply with legal obligations and protect our rights

4. Data Storage and Security

Your data is stored securely in our database hosted on Supabase (PostgreSQL). We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication using NextAuth and Google OAuth
• Database access controls and user isolation
• Regular security assessments and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services that may collect or process your information:

5.1 Google OAuth

We use Google OAuth for authentication. When you sign in with Google, Google shares your email address, name, and profile ID with us. Your use of Google's services is subject to Google's Privacy Policy.

5.2 OpenAI

We use OpenAI's GPT-4o Vision model to analyze screenshots and extract betting information, and GPT-4o to generate betting insights. Screenshots and betting data are sent to OpenAI for processing. Your use of our service is subject to OpenAI's Privacy Policy.

5.3 Stripe

We use Stripe to process subscription payments. Stripe collects and processes your payment information directly. We only receive confirmation of successful payments and subscription status. Your payment data is subject to Stripe's Privacy Policy.

5.4 The Odds API

We use The Odds API to fetch sports data and game scores for automatically grading your completed bets. We send event information (sport, team names) to The Odds API to retrieve relevant game data. This service is subject to The Odds API's terms and privacy practices.

5.5 Supabase

We use Supabase to host our database. All your data is stored on Supabase's infrastructure. Supabase's data handling is subject to Supabase's Privacy Policy.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session and authenticate your identity:

• Session Cookies: We use NextAuth session cookies (such as authjs.session-token) to maintain your login session. These cookies are essential for the Website to function properly.
• Authentication Cookies: Cookies related to authentication and CSRF protection are used to secure your account.

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Website.

7. Your Rights

You have the following rights regarding your personal information:

• Access: You can access your betting data and account information through the Website dashboard.
• Deletion: You can delete individual betting picks through the Website. To delete your entire account and all associated data, please contact us using the information provided below.
• Data Portability: You can export your betting data through the Website interface.
• Correction: You can update your betting picks and account information through the Website.
• Subscription Management: You can manage your subscription, including cancellation, through the subscription page or Stripe customer portal.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Betting picks and associated data (including screenshots) are retained until you delete them or request account deletion.
• Account information is retained for as long as your account is active.
• Subscription and billing information is retained as required by law and for accounting purposes.
• We may retain certain information after account deletion if required by law or for legitimate business purposes (e.g., fraud prevention).

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our services, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information receives adequate protection.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: