Privacy Policy

1. Who We Are

BrackHub is operated by Harlikin Group Pty Ltd ABN [YOUR ABN], trading as BrackHub ("we", "us", or "our"), based in New South Wales, Australia. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Questions about this policy can be directed to [YOUR CONTACT EMAIL].

2. Information We Collect

We collect the following types of personal information:

• Account information — your name and email address when you register for an account.
• Profile information — your display name and optional avatar URL if you choose to provide them.
• Usage data — your bracket picks, league participation, and scores generated through use of the Service.
• Payment information — billing details when you subscribe to Pro. We do not store card numbers directly; payments are handled by Stripe. We receive limited billing data from Stripe (e.g. subscription status, last 4 digits of card, billing country).
• Technical data — IP address, browser type, and device information collected automatically when you use the Service.
• Communications — messages you send us via email or support channels.

3. How We Use Your Information

We use your personal information to:

• Create and manage your account.
• Operate the Service, including recording picks, calculating scores, and displaying leaderboards.
• Process subscription payments and manage billing.
• Send transactional notifications (e.g. password resets, result updates, draw changes).
• Respond to support requests.
• Detect and prevent fraud or abuse.
• Improve and develop the Service.

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

4. Third-Party Services

We use the following third-party services to operate BrackHub:

• Supabase — database and authentication hosting. Your account data and picks are stored on Supabase infrastructure hosted in AWS regions. See Supabase's Privacy Policy.
• Stripe — payment processing. Your payment card details are handled directly by Stripe and never stored on our servers. See Stripe's Privacy Policy.
• Vercel — web hosting and infrastructure. See Vercel's Privacy Policy.

5. Leaderboards and Public Information

Your display name and scores are visible to other members of leagues you participate in. If you have not set a display name, your email address will be shown to other league members in its place.

Your picks are visible to league administrators and to other members after the pick deadline has passed.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it by law (e.g. financial records).

7. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security on our database, hashed passwords, and access controls. However, no system is completely secure, and we cannot guarantee the absolute security of your information.

If you believe your account has been compromised, please contact us immediately at [YOUR CONTACT EMAIL].

8. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information (subject to legal obligations).
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information.

To exercise any of these rights, please contact us at [YOUR CONTACT EMAIL].

9. Cookies

We use essential cookies to maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but this will prevent you from logging in to the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via an in-app notification before the changes take effect. Continued use of the Service after that date constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, please contact our Privacy Officer at: