PRIVACY POLICY

Last updated: April 25, 2026

TL;DR: We collect what we need to run your account and the Service. We don't sell your data. Stripe handles all card data. Passwords are bcrypt-hashed. You can export, correct, or delete your data at any time.

1. Who We Are

Parlay Posse ("we", "us", or "our") operates the website and software platform at parlayposse.com. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By using the Service, you agree to the practices described here.

2. Information We Collect

Account information: name, email address, hashed password, referral code, and account preferences.

Usage data: parlays you build, AI analyses you run, picks you save or purchase, leaderboard standings, parlay outcomes you submit, login times, and IP address.

Payment information: when you subscribe to Pro or buy a pick, payment details (card number, billing address) are collected and stored by Stripe — not by us. We receive only a Stripe customer ID, the last 4 digits of your card, and a payment status.

Device & analytics: browser type, operating system, pages visited, and aggregate session data via PostHog (product analytics).

Email engagement: open and click events on emails we send (via Resend) so we can improve deliverability.

3. How We Use Your Information

To create and operate your account, including authentication, password reset, and email verification.

To provide AI analysis, save your parlays, surface relevant statistics, and otherwise deliver core Service features.

To process payments and prevent fraud (in cooperation with Stripe).

To send transactional emails (verification, password reset, parlay results, referral rewards, Pro confirmations).

To improve the Service through aggregate analytics. We do not sell your personal information.

To comply with legal obligations and enforce our Terms of Service.

4. Cookies and Tracking

We use HTTP-only authentication cookies to keep you signed in. We use PostHog to collect anonymized product-usage events. You can clear cookies in your browser at any time, but doing so will sign you out.

5. Who We Share Information With

Stripe, Inc. — payment processing.

Resend, Inc. — transactional email delivery.

PostHog Inc. — privacy-respecting product analytics.

MongoDB Atlas — managed database hosting (US region).

Cloudflare — CDN, WAF, and bot protection.

Emergent — application hosting and infrastructure.

We do not sell, rent, or trade your personal information to third parties for marketing.

We may disclose information when required by law, subpoena, or to protect our rights or the safety of users.

6. Data Retention

We retain your account information while your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law (e.g., financial transaction records for 7 years per US tax law).

7. Your Rights

Access: you can view your account data in /profile.

Export: you can export your full parlay history as CSV from /stats.

Correction: you can update profile info in /profile and change your password in /admin (admins) or /profile (users).

Deletion: email support@parlayposse.com to request account deletion.

Marketing opt-out: every email contains a List-Unsubscribe header and footer link.

EEA / UK / California residents: you have additional rights under GDPR and CCPA, including the right to know, delete, and not be discriminated against for exercising those rights.

8. Security

Passwords are hashed with bcrypt. Sessions use signed JWT cookies with HttpOnly and SameSite=Lax flags. All traffic uses HTTPS via TLS 1.2+. Database access is restricted by VPC and authentication. Stripe handles all card data — we never see or store full card numbers. While no system is completely secure, we apply industry-standard safeguards.

9. Children

The Service is not directed to anyone under 21. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided us personal information, we will delete it.

10. International Transfers

Parlay Posse is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US, which may have data-protection laws different from those in your jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes will also be communicated via email.

12. Contact

Privacy questions, data-subject requests, or concerns: support@parlayposse.com.