Privacy Policy

This policy explains what personal information BFT LLC ("we") collects on PodiumOracle (podiumoracle.com), why, and your choices. We collect as little as we can: you don't need an account to use the site, and we never sell your personal information.

What we collect

• Account details (if you create an account): name, username, email address and password. These are held by Clerk, our sign-in provider; your password is stored hashed by Clerk and never seen by us. Our own database keeps only your account ID, your favourites, your plan and how much of the monthly chat allowance you've used.
• Payments (if you buy Podium+): handled by Stripe, which receives your payment details and billing address. We receive only a customer and subscription reference and whether the subscription is active. We never see your card number.
• Chat questions and answers: sent to AI models through OpenRouter to produce the answer, and recorded with the model, cost and speed so we can check quality and costs. Please don't put personal information in chat questions.
• Usage and device information: pages viewed, clicks, approximate location (country and region from your IP address), browser and device type, referring site and page speed, collected by Google Analytics and PostHog. PostHog may also record anonymised session replays (what was clicked and scrolled, with anything typed hidden) to help us fix problems.
• Errors: when something breaks, the error and the page it happened on are sent to Sentry and PostHog.
• Feedback: bug reports and feature requests you send, and the email address if you choose to give one. The feature board is run by Featurebase; if you're signed in, we pass it your name, email and account ID so you post as yourself.
• Technical data: to stop abuse, we count requests per visitor using a one-way hash of the IP address; we don't store the address itself.

Cookies and local storage

• Necessary: Clerk's sign-in cookies keep you signed in; your browser's local storage keeps your favourites, theme, recent leagues, chat history and cookie choice on your device.
• Analytics: Google Analytics and PostHog cookies. Visitors in the European Economic Area, the UK and Switzerland are asked first, and nothing is stored until they agree; elsewhere these run unless you choose "No thanks". You can change your choice at any time with "Cookie choices" in the footer.

Why we use it

To run the site and your account (contract), to process payments (contract and legal obligations), to keep the site secure and working and to understand how it's used so we can improve it (our legitimate interests), and for analytics cookies where the law requires it, your consent.

Who helps us run the site

These service providers process data on our behalf, under their own security and privacy terms: Cloudflare (hosting and security), Clerk (accounts and sign-in), Stripe (payments and tax), Google Analytics and PostHog (analytics, session replay, error tracking), Sentry (error reports), OpenRouter and the AI model providers it routes to (chat answers), Featurebase (the feedback board), Slack (internal alerts about errors and feedback) and GitHub (feature request tracking). Most are based in the United States, so your data may be processed there. We share information otherwise only if the law requires it, to protect people or the site, or as part of a sale or merger of the business.

How long we keep it

• Account information, favourites and plan: until you delete your account. Deleting it (from your account page) removes your Clerk account and everything in our database straight away.
• Payment records: kept by Stripe as the law requires, even after you delete your account.
• Analytics, session replays, logs and error reports: kept for the provider's retention period (session replays for 30 days), then deleted.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California's CCPA/CPRA), you can ask to access, correct, delete or get a copy of your personal information, object to or restrict how it's used, and withdraw consent. You can delete your account yourself at any time. For anything else, email support@podiumoracle.com; we'll answer within 30 days. You can also complain to your local data protection authority. We don't sell or share personal information for cross-context behavioural advertising, and we don't run ads.

Children

PodiumOracle isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.

Security

We use encrypted connections everywhere, keep secrets out of our code, give each service only the access it needs, and let trusted providers handle passwords and payments. No system is perfectly secure, but we'll tell you and the authorities promptly if a breach affects your information.

Changes

We'll update this policy as the site changes; the date at the top shows the latest version, and we'll give notice of significant changes. Questions: support@podiumoracle.com.