Privacy Policy

PitchPool (“PitchPool,” “we,” “us”) collects the information needed to run prediction pools, manage subscriptions, and improve the Service.

Information you provide

• Account data — name, email address, password, and profile details you add.
• Organization & pool data — organizations you create or join, pool names, member lists, and your predictions and entries.
• Support & communications — messages, feedback, and support requests you send us.

Information collected automatically

• Usage & device data — pages viewed, actions taken, IP address, browser and device type, and approximate location derived from your IP.
• Cookies & similar technologies — see the Cookies section below.

Payment card details are collected directly by our payment processor, Paddle, and are not stored by us.

We use personal data to:

• Provide, operate, and maintain the Service, including creating and scoring pools, leaderboards, standings, and statistics.
• Process subscriptions, payments, and renewals through Paddle.
• Authenticate you, secure accounts, and prevent fraud and abuse.
• Communicate with you about your account, service updates, and (where permitted) product news.
• Analyze usage to understand and improve the Service, and to comply with our legal obligations.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and measure usage. Essential cookies are required for the Service to function; optional analytics and preference cookies are used only where permitted. You can manage cookies through your browser settings and, where applicable, through the consent controls presented in the Service.

We use analytics tools to understand how the Service is used — for example, which features are popular and where users encounter problems — so we can improve it. Analytics providers may process usage and device data on our behalf as described in this policy. Where required, we collect these insights only with your consent.

We process your credentials and session data to sign you in and keep your account secure. Passwords are stored using industry-standard hashing, and we may use session tokens and security signals to detect suspicious activity. If you sign in through a third-party provider, we receive basic profile information from that provider to create and secure your account.

Payments are processed by Paddle (Paddle.com Market Ltd) acting as merchant of record. Your full payment card number and related details are provided directly to Paddle and are never stored on our servers. We receive limited billing information — such as your subscription status, plan, billing country, and the last digits and type of your payment method — to manage your subscription. Paddle processes your payment data under its own privacy policy.

We do not sell your personal data. We share it only as needed to run the Service:

• Service providers — hosting, payments (Paddle), analytics, email delivery, and customer support, acting on our instructions.
• Other members — your display name and predictions may be visible to members of pools and organizations you join, and on leaderboards.
• Legal & safety — where required by law, to enforce our terms, or to protect the rights and safety of our users and the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We and our service providers may process your information in countries other than your own, which may have different data-protection laws. Where we transfer personal data internationally, we take steps to ensure it remains protected, including using appropriate safeguards such as standard contractual clauses where required.

We retain personal data for as long as your account is active and as needed to provide the Service. We may keep certain information longer where required to comply with legal, tax, or accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

We use technical and organizational measures — including encryption in transit, access controls, and secure hosting — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us at privacy@pitchpool.io.

Depending on where you live, you may have rights over your personal data, including the right to:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact privacy@pitchpool.io. We will respond in accordance with applicable law. You may also have the right to lodge a complaint with your local data-protection authority.

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Service or by email. We encourage you to review this policy periodically.

Questions about your privacy or this policy?

• Privacy & data requests: privacy@pitchpool.io
• General support: hello@pitchpool.io