Privacy Policy

1. Introduction

Welcome to Pikks. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our Super Bowl Squares pool service, and tell you about your privacy rights.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address, display name, and password when you create an account
Payment Information: Payment details processed securely through Square for purchasing pool squares
Profile Information: Display name for pool participation

2.2 Information From Social Login Providers

When you sign in using a third-party service, we may receive:

Google: Name, email address, profile picture
X (Twitter): Username, display name, profile picture
Instagram: Username, profile picture, email (if available)
Amazon: Name, email address

We only request the minimum permissions necessary for authentication and account creation.

2.3 Automatically Collected Information

Usage Data: Pages visited, time spent, features used
Device Information: IP address, browser type, operating system
Cookies: Session cookies for authentication and functionality

3. How We Use Your Information

To provide and maintain our Super Bowl Squares pool service
To process payments and manage your pool participation
To send you important service updates and notifications
To personalize your experience
To improve our service and develop new features
To detect and prevent fraud or abuse
To comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Consent: When you sign up and agree to our terms
Contract Performance: To provide the pool service you requested
Legitimate Interests: To improve our service and prevent fraud
Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

5.1 We Share Information With:

Payment Processors: Square processes payments securely on our behalf
Other Pool Participants: Your display name is visible to other participants in the same pool
Service Providers: Hosting, analytics, and email services that help us operate
Legal Requirements: When required by law or to protect our rights

5.2 We Do NOT:

Sell your personal information to third parties
Share your email address with other users
Use your data for advertising purposes
Share your payment information (handled securely by Square)

6. Third-Party Services

6.1 Social Login Providers

When you use social login, you're subject to the privacy policies of those providers:

Google: Google Privacy Policy
X (Twitter): X Privacy Policy
Instagram/Meta: Meta Privacy Policy
Amazon: Amazon Privacy Notice

6.2 Payment Processing

Square processes all payments. We do not store your full credit card information. See Square's Privacy Policy.

7. Data Security

We implement industry-standard security measures:

HTTPS encryption for all data transmission
Secure password hashing (bcrypt)
Regular security updates and monitoring
Restricted access to personal data
Secure database storage with encrypted backups

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

Account Data: Retained while your account is active
Transaction Records: Retained for 7 years for tax and legal compliance
Pool Data: Retained for the duration of the pool season plus 1 year
Deleted Accounts: Personal data anonymized within 30 days of deletion request

9. Your Privacy Rights

You have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a structured, machine-readable format
Restriction: Limit how we process your data
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@pikks.com.

9.1 California Privacy Rights (CCPA)

California residents have additional rights:

Right to know what personal information is collected, used, and shared
Right to delete personal information
Right to opt-out of the sale of personal information (we don't sell data)
Right to non-discrimination for exercising privacy rights

10. Cookies and Tracking

We use cookies for:

Essential Cookies: Required for authentication and security
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Understand how you use our service (anonymous)

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

11. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

Posting the new policy on this page
Updating the "Last Updated" date
Sending an email notification for material changes

Continued use of our service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

Email: privacy@pikks.com

Company: Pikks

15. Data Deletion Requests (Social Login)

If you signed in with a social provider and want to delete your data:

Log in to Pikks
Go to your account settings
Click "Delete Account"
Or email us at privacy@pikks.com with your request

We will delete or anonymize your personal data within 30 days, except where retention is required by law.