Privacy Policy

Stakkit (“we”) provides B2B software for sports handicappers. This policy explains what data we collect, why we collect it, and your rights. Written in plain language.

You give us:

• Account info: name, email, hashed password, profile details, capper handle.
• Pick data: events, markets, selections, odds, units, timestamps.
• Subscriber data you import or sync (names, emails, subscription status). This is your business data — you’re the controller, we’re the processor.
• API credentials you connect: Stripe restricted keys, Discord/Telegram bot tokens.

Collected automatically:

• Usage data: pages visited, features used, device and browser info, IP address.
• Grading data: scores and odds from our sports data provider, linked to your picks.

We never collect: your subscribers’ payment card details (those go directly to your Stripe, never through us). We don’t store your billing card either — our payment processor handles that.

• Operate the service: grade picks, deliver via bots, run automations, display your public profile and leaderboard entries.
• Billing and account management.
• Improve the product using aggregated, anonymized analytics.
• Communicate: transactional emails (grade notifications, billing receipts) and product updates (opt out anytime).
• Legal compliance and fraud prevention.

Stripe restricted keys and bot tokens you provide are encrypted at rest, never written to logs, never displayed in full after entry, and used only for actions you authorized (e.g., reading charges for subscriber sync, sending messages via bots). Revoking them in your Stripe/Discord/Telegram settings immediately cuts our access.

• Processors: our payment processor ([Paddle/Stripe]) for our billing; cloud hosting ([provider]); sports data API for scores and odds; Discord/Telegram APIs for delivery. Each receives only what’s needed to perform its function.
• Public by your choice: pick records, ROI, and profile info you mark public appear on your verified profile and the leaderboard.
• Legal: when required by law or to prevent fraud and abuse.
• We never sell your data. We never share your subscriber lists with other cappers.

Essential cookies (login, security) are required. Optional analytics cookies can be blocked in your browser — the app still works.

• Active account data: kept while your account is active.
• After cancellation: 30-day export window, then deletion within 90 days — except records we’re legally required to retain (e.g., billing records).
• Published verified pick history: retained as published unless you request removal.

Access, correct, export, or delete your personal data anytime via settings or [support email]. For subscriber data you imported, you’re responsible for honoring your own subscribers’ requests — our export and deletion tools help you do that.

Encryption in transit (TLS) and at rest, hashed passwords, least-privilege API keys, access controls. No system is perfect — if we discover a breach affecting you, we’ll notify you promptly.

We operate from [location]; our infrastructure and processors may sit in other countries, including the US. By using the service you consent to cross-border processing with appropriate safeguards.

The service is for users 18 and older. We don’t knowingly collect data from children.

Material changes will be notified by email or in-app at least 14 days in advance.

Stakkit — [support email] — [address if required]