Privacy Policy
Last updated: April 14, 2026
1. Introduction
Very Cool Tech LLC ("we," "us," or "our") operates ImmaWin (immawin.com), a sports bracket pool platform with AI-powered companion features. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Platform. We are committed to protecting your privacy in accordance with applicable laws, including the California Consumer Privacy Act (CCPA/CPRA), the European Union General Data Protection Regulation (GDPR), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable state and international privacy regulations.
2. Information We Collect
Account Information: When you register, we collect your email address, display name, and password (stored in hashed form). If you register via Google Sign-In, we receive your name and email address from Google. Profile Information: You may optionally upload a profile avatar image. We store your display name, avatar, and account creation date. Pool Activity Data: We collect your bracket picks, pool participation records, scoring results, rankings, Stars earned, and achievement data. Chat Data: Messages you send in pool chat, including message content, timestamps, and emoji reactions. Purchase Data: If you purchase an All-Star pool upgrade, we record the transaction amount, date, and associated pool. Your payment card details are processed and stored exclusively by Stripe — we never see or store your card number. Technical Data: We automatically collect your IP address, browser type, and device information when you access the Platform.
3. How We Use Your Information
We use your information for the following purposes: To operate the Platform — creating and managing your account, processing bracket picks, calculating scores and Stars, and maintaining leaderboards. To process transactions — facilitating All-Star pool purchases through Stripe. To generate AI content — sending your bracket pick data (team selections, not personal information) to Anthropic's Claude AI service to generate persona-driven commentary and reactions. To communicate with you — sending account-related notifications, password reset emails, and important Platform updates. To improve the Platform — analyzing aggregated, anonymized usage data to enhance features and performance. To ensure safety — detecting and preventing fraud, abuse, and violations of our Terms of Service. We will never sell your personal information to third parties.
4. AI-Generated Content and Data Processing
ImmaWin uses Anthropic's Claude AI to generate persona commentary. When AI content is generated, we send the following data to Anthropic: pool name and tournament context, bracket pick selections (team names and matchup results — not your personal identity), current pool standings (display names and scores), and recent chat messages (for daily banter context). Anthropic processes this data solely to generate the requested content and does not use it to train their models. AI-generated commentary is stored in our database and displayed to all pool members.
5. Third-Party Services and Data Sharing
We share data with the following third-party service providers: Stripe, Inc. — processes All-Star pool payments. Stripe receives your payment card details, email, and billing information directly. See Stripe's privacy policy at stripe.com/privacy. Google — if you use Google Sign-In, Google provides us with your name and email. See Google's privacy policy at policies.google.com/privacy. Anthropic — receives pool and bracket data (as described above) to generate AI commentary. See Anthropic's privacy policy at anthropic.com/privacy. Vercel — hosts our frontend application and may process your IP address and request data. NHL and sports data providers — we receive publicly available sports data to populate tournaments and brackets. We may also disclose your information if required by law, court order, or government request, or if necessary to protect the rights, property, or safety of Very Cool Tech LLC, our users, or the public.
6. Data Shared Within the Platform
The following information is visible to other ImmaWin users: your display name and avatar (visible to pool members and on the public leaderboard), your bracket picks (visible to pool members after picks lock), your pool rankings, scores, Stars earned, and achievements, your chat messages within pools you've joined, and your total Stars and career stats on the global leaderboard and your public profile page. Your email address is never displayed to other users.
7. Browser Storage
We use browser storage technologies to operate the Platform: localStorage stores your authentication token (to keep you signed in between visits) and chat read-position data (to track unread messages per pool). sessionStorage stores temporary pool creation wizard state (cleared when you complete or abandon pool creation). These storage mechanisms are essential for the Platform to function. If you clear your browser storage, you will be signed out and will need to log in again. We do not use advertising or third-party tracking cookies. For more information, see our Cookie Policy.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including: encryption of passwords using industry-standard hashing (bcrypt), HTTPS encryption for all data in transit, secure authentication via JSON Web Tokens (JWT), rate limiting on sensitive endpoints to prevent brute-force attacks, security headers (X-Frame-Options, Content-Type-Options, Referrer-Policy) to protect against common web vulnerabilities, and role-based access controls for administrative functions. While we strive to protect your information, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Platform's services. Pool data (picks, scores, Stars, chat messages) is retained indefinitely as part of the historical record of completed tournaments. Purchase records are retained for accounting and legal compliance purposes. If you request account deletion, we will delete your personal account data within 30 days. Certain data may be retained in anonymized form for analytics purposes or as required by law.
10. International Data Transfers
Very Cool Tech LLC is based in Florida, United States. Your data may be transferred to and processed in countries or jurisdictions other than your own, including through our hosting providers (Vercel) and third-party service providers (Stripe, Anthropic, Google) which may operate servers in various locations. These transfers are necessary to provide the Platform's services. Where your data is transferred outside of the European Economic Area or other jurisdictions with data transfer restrictions, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.
11. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information: Right of Access — request a copy of the personal information we hold about you. Right of Correction — request correction of inaccurate or incomplete information. Right of Deletion — request deletion of your personal information, subject to legal retention requirements. Right to Restrict Processing — request that we limit how we use your data. Right to Data Portability — request your data in a structured, machine-readable format. Right to Withdraw Consent — where processing is based on consent, withdraw it at any time. California Residents (CCPA/CPRA): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise any of these rights, contact us at privacy@immawin.com. We will respond to all requests within 30 days.
12. Children's Privacy
ImmaWin is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@immawin.com.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. If we make material changes, we will notify you via email or a prominent notice on the Platform. Your continued use of ImmaWin after changes are posted constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Very Cool Tech LLC — Privacy Officer — Email: privacy@immawin.com — Website: immawin.com. We take your privacy seriously and will work to address any concerns promptly.