Draft, not final. This is a strong starting draft prepared for TrendsEngine, not a substitute for review by a qualified lawyer or privacy professional. It must be reviewed before the Service accepts real payments or collects real user accounts.

Privacy Policy

Last updated: [DATE]

1. Information We Collect

Account information: email, password (hashed), name if provided
Payment information: processed entirely by Stripe; full card numbers never stored on our servers
Usage data: pages visited, features used, login timestamps, general analytics
User-entered data: watchlist selections (including your fantasy My Team and opponent roster), fantasy scoring settings, saved board views, display preferences and a first name if you enter one, tracked pricing-discrepancy/cross-market lines, bankroll figures if entered. When you're logged in, these are stored in your account so they're available on your other devices; when you're not, they stay in your browser.
Product news choice: whether you agreed to receive TrendsEngine news emails, when you agreed or withdrew, the wording you agreed to, and the technical details of that request (such as your IP address). The box is unticked unless you tick it. We keep this record for 3 years after your choice ends, to prove we followed the rules.

2. How We Use Information

Provide and maintain the Service; process billing; communicate service updates and billing notices; improve the Service through aggregated, anonymized analysis.

If you opt in, we email product news (new features, new sports and tips on using the app), about twice a month. Every news email names TrendsEngine, gives our mailing address and contact details, and has an unsubscribe link. You can also turn news off in Settings. We act on an unsubscribe within 10 business days, and usually right away. You can withdraw at any time and still use the app.

3. Third-Party Services

Stripe — payment processing
OddsPapi — sports data provider (does not receive personal user information)
Render — application hosting
Supabase — database and user authentication
An email delivery service: sends account emails and, if you opt in, news emails on our behalf. It receives only your email address, and your news choice where needed. It may store data outside Canada.

4. Data Retention

Account information retained while active, plus the minimum period required by applicable legal, tax, and accounting obligations after cancellation, then deletable upon request.

5. Your Rights

Under PIPEDA and applicable provincial legislation: access your personal information; request correction; request deletion (subject to legal retention requirements); withdraw consent for optional communications. Contact trendsenginesupport@gmail.com.

6. Data Security

Industry-standard security measures (encryption in transit, secure authentication, access controls). No system is completely secure; absolute security cannot be guaranteed.

7. Cookies

TrendsEngine does not use analytics or advertising cookies today, and no tracking or ad-tech scripts run on this site. Signing in relies on our authentication provider's own session mechanism to keep you logged in; it is not used for tracking or advertising. If we ever add analytics or advertising cookies, this section will be updated first and, where required by law, we will ask for your consent before they are set.

8. Children's Privacy

Not directed at individuals under 19; we do not knowingly collect information from anyone under this age.

9. Changes to This Policy

Updated periodically; material changes communicated to users.

10. Contact

trendsenginesupport@gmail.com