PickEngine ("we", "us", "our") is the controller of the personal information described in this Policy. This Policy covers everyone who visits our site, uses our portal or apps, contacts support, follows our links from social media, or takes part in our rewards, referral or affiliate programs. It does not cover the practices of sportsbooks, exchanges, app stores, payment processors or other third parties, which have their own policies (Section 20). Capitalised terms not defined here have the meaning in our Terms of Service.
| Category | Examples | Source | Why |
|---|---|---|---|
| Identifiers | Name, username, email, phone, date of birth, Account ID, IP address, device identifiers, cookie identifiers, referral code | You; your device; a referrer | Account, sign-in, communication, security, fraud prevention, referrals |
| Account and profile | Plan, onboarding status, state you bet from, avatar, banner, bio, preferences, tours seen, low power setting, public-picks setting | You | Run and personalise the Service |
| Commercial and financial | Plan purchases, top-ups, promo codes, credits granted and spent, rewards, commissions, last four digits and expiry of your card, billing address, payment status, disputes | You; payment processor | Billing, receipts, fraud and chargeback handling, tax reporting |
| Activity | Picks viewed and unlocked, stacks saved, follows, feed interactions, searches, pages and features used, taps, timestamps, errors, session length | Your device | Provide features, grade picks, improve the Service, security |
| Content you provide | Profile text, review screenshots, support messages and chat transcripts, uploaded photos, feedback | You | Features you use, support, rewards verification |
| Device and connection | Browser, operating system, screen size, language, referring page, network, approximate location from IP (Section 4) | Your device | Compatibility, security, availability by state, analytics in aggregate |
| Connected-account data | Operator account identifier, API keys (encrypted), balances, positions, orders, fills, fees and results returned by the Operator (Section 3) | You; the Operator | Only the features you enable |
| Verification | Government ID, selfie, proof of address, tax forms (for example W-9) when we ask for them | You; verification services | Age, identity, eligibility, fraud prevention, affiliate payouts, legal compliance |
| Inferences | Your rank, win-loss record, feature eligibility, risk flags | Derived by us | Features, security, fraud prevention |
| Staff and applicant data | For staff: console sign-ins and page views. For applicants: what you send us | You; our systems | Operations, security, hiring |
We do not collect biometric identifiers, precise GPS location, health information or government identifiers except where you provide an ID document for verification, and we do not use ID documents for any other purpose.
If you connect an account you hold with an Operator (for example an exchange) we collect and store: the credentials or API keys you provide, encrypted at rest; the account identifier; and the balances, positions, orders, fills, fees, prices and results that the Operator returns when the Service reads from or acts on the account. We use this information only to show it to you, to run the bettor according to the rules you set, to record what it did, to grade results, and to resolve any question about an order. We do not use Connected-Account data for marketing, do not share it with other Members, and do not sell it. Price readings for your open positions are kept so you can see their history. When you disconnect an account, the stored credentials are deleted within 7 days; the record of orders placed is kept as described in Section 12. The Operator's own privacy policy governs what the Operator does with your data.
We derive an approximate location (country and state) from your IP address to show the right availability notice, to comply with law, and for security. We may also use the state you tell us you bet from. We do not collect precise GPS location from your device, and we do not track your movements. If a feature ever needs precise location, we will ask your permission first through your device's own prompt.
Our picks and confidence scores are generated automatically by statistical models and AI from public sports data; they are not decisions about you. Some decisions about your Account are automated: for example granting weekly credits, spending a credit when you unlock, grading a pick, gating a feature by plan, pausing the bettor when a limit you set is reached, and flagging unusual activity for review by a person. None of these produce legal or similarly significant effects without the ability for a person to review them on request. If you believe an automated decision about your Account is wrong, contact us (Section 22) and a person will review it.
If data-protection law in your country requires a legal basis, we rely on: contract (to provide the Service you signed up for, including billing, picks and Connected-Account features); legitimate interests (security, fraud prevention, improving the Service, understanding use, defending claims), balanced against your rights; legal obligation (tax, accounting, responding to lawful requests, responsible gaming); and consent (marketing emails and texts, non-essential cookies, precise location if ever requested), which you may withdraw at any time without affecting earlier processing.
We do not sell personal information, and we do not share it with third parties for cross-context behavioural advertising. We disclose personal information only as follows:
| Type | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Session cookie that keeps you signed in; CSRF token that protects forms; the record that you dismissed the privacy banner | Only by blocking cookies in your browser, which prevents sign-in |
| Preferences (local storage) | Low power mode, feature tours you have seen, your support chat on this device, unsent drafts, the tab or filter you last used | Yes, by clearing site data; these never leave your browser |
| Analytics | None at present. If we add analytics we will update this Policy and, where the law requires, ask for your consent first | Yes |
| Advertising | None. We do not use third-party advertising cookies or pixels | Not applicable |
We do not respond to "Do Not Track" browser signals because there is no common standard. We do honour Global Privacy Control signals as a request to opt out of any sale or sharing, where state law gives that right, although we do not sell or share in any case.
Your username, avatar, banner, bio, rank, follower and following counts, win-loss record and settled picks are visible to other signed-in Members by default. Members on higher plans may also see your live and upcoming picks. You can turn off public picks in Settings at any time, after which your profile shows no picks. Anything you post in community features can be seen, copied and reposted by other Members; the protections of this Policy do not extend to what you choose to make public. Support conversations are private between you and our team.
| Information | Kept for | Why |
|---|---|---|
| Account and profile | While the Account is open, plus 30 days after closure | Reactivation; finishing open matters |
| Picks, credits, stacks and grading | While the Account is open; de-identified afterwards | Your records; aggregate statistics |
| Billing, payment, dispute and chargeback records | 7 years | Tax, accounting, payment-network and legal requirements |
| Rewards, referral and affiliate records, tax forms | 7 years | Tax reporting; fraud defence |
| Connected-account credentials | Until you disconnect, then deleted within 7 days | Only needed while connected |
| Orders placed through a Connected Account and price readings | 7 years | Your records; disputes; legal requirements |
| Support conversations and chat transcripts | 2 years after the last message | Quality; continuity; disputes |
| Review screenshots | Until the reward is decided, then up to 90 days | Verification; appeal |
| Identity-verification documents | Deleted within 30 days of a decision; the fact and outcome of verification kept with the Account | Minimise sensitive data |
| Security, access and staff-activity logs | Up to 13 months | Investigations; security |
| Fraud and enforcement records | Up to 7 years after closure | Preventing re-registration; defending claims |
| Backups | Rolling 30 days | Disaster recovery; deleted data may persist until backups cycle |
We keep information longer where the law requires it, where it is needed to resolve a dispute, enforce our Terms or defend a claim, or where it has been de-identified so that it no longer identifies you.
We maintain a security program designed to protect personal information against unauthorised access, disclosure, alteration and loss, proportionate to the sensitivity of the data. It includes:
Incident response. If we learn of a security incident affecting your personal information we will investigate, contain it, and notify you and any regulator or authority without undue delay and within the time the law requires, with a description of what happened, what information was involved, what we have done and what you can do.
Your part. Security depends on you too: use a strong, unique password, keep your email account secure, do not share credentials or Connected-Account keys, and tell us at once if you suspect misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; by using the Service you accept this.
Wherever you live, you can ask us to:
Email support@pickengine.ai with the subject "Privacy request", or use support chat, and tell us which right you are exercising and your Account ID. To protect your information we will verify that the request comes from you, usually by confirming it from the email address on your Account and, for deletion or access requests involving sensitive data, by asking you to confirm details only the Account holder would know or to sign in. We will respond within 45 days and may extend once by a further 45 days where the request is complex, telling you why. We may decline a request where the law allows, for example where we must keep records for tax, fraud or legal reasons, and we will explain. Requests are free, but we may charge a reasonable fee or decline manifestly unfounded or repetitive requests. Authorised agents may make requests on your behalf if they provide your signed written permission and we can verify your identity; we may also confirm the request with you directly. Appeals. If we decline your request, you may appeal by replying within 30 days; a different member of staff will review it and respond within 45 days with reasons, and if we still decline we will tell you how to contact your state's attorney general.
Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with comprehensive privacy laws have the rights in Sections 14 and 15 under those laws. In the preceding 12 months we collected the categories of personal information listed in Section 2 from the sources listed there, used them for the purposes in Section 5, and disclosed them for business purposes to the categories of recipients in Section 8. We did not sell personal information, did not share it for cross-context behavioural advertising, and did not use or disclose sensitive personal information for any purpose other than providing the Service and the purposes permitted by law. We do not knowingly sell or share the personal information of anyone under 16. We do not engage in profiling that produces legal or similarly significant effects.
We are based in the United States and store and process information there, where privacy laws may differ from those of your country. If you use the Service from the EEA, the United Kingdom or Switzerland, we transfer your information under approved safeguards such as the European Commission's standard contractual clauses and the UK addendum, and you may ask us for a copy. By using the Service from outside the United States you acknowledge this transfer.
The Service is for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18, we do not direct the Service to minors, and we close any Account we find belongs to a minor and delete its information. If you believe a minor has provided us information, contact us (Section 22) and we will delete it promptly.
The Service links to and interacts with sportsbooks, exchanges, data providers, news sites, social platforms, app stores and payment processors. When you leave the Service, connect an Operator account, or install our app from a store, those third parties' privacy policies and terms apply to what they collect, and we are not responsible for their practices. We encourage you to read their policies.
We will post any changes to this Policy here with a new effective date and version number. For material changes, including any new purpose, new category of recipient, or any decision to sell or share personal information, we will notify Members by email or in-app notice before the change takes effect and, where the law requires, ask for your consent. Your continued use after the effective date is acceptance of the updated Policy. Earlier versions are available on request.
PickEngine · Privacy requests and questions: support@pickengine.ai (subject "Privacy") · or support chat inside the app. If you are in the EEA, UK or Switzerland and are not satisfied with our response, you may complain to your local data-protection authority.