Privacy Policy

1. Information We Collect

We collect information necessary to provide and improve the On The Box platform:

• Account information: Email address, display name, password (hashed), and any profile details you provide.
• Gameplay data: League membership, picks, standings, and scoring history.
• Payment information: Payment processing is handled by Stripe. We do not store full card numbers; we may store billing-related identifiers and transaction history as needed for compliance and support.
• Technical data: IP address, device type, browser type, and usage data (e.g., pages visited, features used) to operate and secure the service.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the On The Box platform
• Process payments and manage leagues and payouts
• Authenticate users and enforce our Terms of Service
• Send transactional and service-related communications
• Respond to support requests and comply with legal obligations
• Analyze usage to improve product and security

3. Information Sharing

We do not sell your personal information. We may share information only as follows:

• Stripe: Payment data is shared with Stripe to process payments. Stripe's privacy practices are governed by their privacy policy.
• Legal requirements: We may disclose information when required by law, court order, or government request, or to protect our rights, safety, or property.
• Service providers: We may use trusted providers (e.g., hosting, analytics) that process data on our behalf under contractual obligations to protect your data.

4. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Data in transit and at rest is encrypted where applicable
• Authentication and data storage are secured via Supabase with industry-standard practices
• Payment card data is handled by Stripe; we do not store card numbers and rely on Stripe's PCI-compliant processing
• Access to personal data is limited to authorized personnel and only as needed for their role

No method of transmission or storage is 100% secure; we cannot guarantee absolute security but are committed to protecting your information.

5. Data Retention

We retain your information for as long as your account is active and as needed to provide the service and comply with legal obligations. In particular, for daily fantasy sports compliance, we retain transaction and gameplay records for at least 5 years. After account closure, we may retain certain data for legal, regulatory, or legitimate business purposes (e.g., dispute resolution, tax, or audit).

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data (you can update much of this in account settings)
• Deletion: Request deletion of your personal data, subject to legal or contractual retention requirements
• Portability: Request your data in a structured, machine-readable format where applicable

To exercise these rights, contact us at the email below. We will respond within a reasonable time. You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

7. Cookies and Tracking

We use cookies and similar technologies to operate the site (e.g., session management, preferences) and to understand how the platform is used. We do not use third-party advertising cookies that track you across other sites for ad targeting. You can adjust your browser settings to limit or block cookies; some features may not function fully if cookies are disabled.

8. Children's Privacy

The On The Box platform is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a minor, please contact us and we will take steps to delete it.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last Updated" date. Material changes may be communicated by email or a notice on the platform. Your continued use after the effective date constitutes acceptance of the updated policy.

10. Contact Information

For privacy-related questions or to exercise your rights, contact us at: support@onthebox.com