Privacy Policy

1. Information We Collect

We collect the following types of information:

• Phone number: Required for account registration and authentication. Your phone number is encrypted at rest and hashed for lookups.
• Email address: Optional for hosts and participants; required for spectator accounts. Used for magic link authentication and optional notifications.
• Display name: A name you choose to identify yourself in tournaments.
• Usage data: Information about how you interact with the Service, including bracket picks, banter posts, and tournament participation.
• Device information: IP address, user agent, and session data for security and authentication purposes.

2. How We Use Your Information

We use collected information to:

• Authenticate your identity and secure your account
• Provide and improve the Service
• Send transactional SMS messages (verification codes)
• Send promotional SMS messages if you have opted in (tournament reminders, updates)
• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service

3. SMS Communications

Transactional messages: When you register or log in, we send a one-time verification code via SMS. These messages are necessary for authentication and cannot be opted out of while maintaining an account.

Promotional messages: With your explicit consent, we may send tournament reminders and updates via SMS. You can opt out at any time by:

• Replying STOP to any promotional SMS message
• Updating your notification preferences in account settings

Message and data rates may apply. Message frequency varies based on tournament activity. We use Twilio for SMS delivery.

4. Data Security

We take data security seriously. Phone numbers and email addresses are encrypted at rest using AES-256 encryption. Password-less authentication via SMS OTP and magic links eliminates the risk of password breaches. Sessions are managed with HTTP-only secure cookies.

5. Data Sharing

We do not sell your personal information. We share data only with service providers necessary to operate the Service:

• Twilio: SMS delivery for verification codes and notifications
• Stripe: Payment processing for premium features
• OpenAI / Cohere: AI-powered banter and content analysis

These providers are contractually obligated to protect your data and only use it to provide services on our behalf.

6. Data Retention

We retain your account data for as long as your account is active. Session data is automatically expired. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Opt out of promotional SMS messages at any time
• Update your notification preferences

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or your data, contact us at: privacy@bracketbanter.com

Bracket Banter
135 Nevada Ave S
Golden Valley, MN 55426