Privacy Policy
Last updated: April 1, 2026
1. Information We Collect
Account information: When you create an account, we collect your name, email address, and (optionally) a profile image. If you sign in with Google, we receive basic profile information from your Google account.
Usage data: We collect information about how you interact with the Service, including rooms created, votes cast, and session duration.
Technical data: We automatically collect your IP address, browser type, operating system, and device information for security, analytics, and service improvement.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To process payments and manage your subscription.
- To send transactional emails (password resets, magic links, subscription updates).
- To detect and prevent fraud, abuse, and security incidents.
- To analyze usage patterns and improve the user experience.
3. Cookies and Tracking
We use cookies and similar technologies for authentication, session management, and analytics. Specifically:
- Essential cookies: Required for authentication and session management. These cannot be disabled.
- Analytics cookies: We use PostHog for product analytics to understand how the Service is used. You can opt out via the cookie consent banner.
- Error tracking: We use Sentry to detect and diagnose errors. Error reports may include technical data about your browser and session.
4. Third-Party Services
We share information with the following third-party service providers, each under their own privacy policies:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing. Stripe receives your payment details directly; we do not store credit card numbers. |
| Resend | Transactional email delivery (password resets, magic links). |
| PostHog | Product analytics and usage tracking. |
| Sentry | Error monitoring and reporting. |
| OAuth sign-in (only if you choose to sign in with Google). | |
| Vercel | Web application hosting. |
| Railway | API and database hosting. |
5. Data Retention
We retain your account data for as long as your account is active. Room and voting data is retained according to your plan's history retention limit (30 days for Free, unlimited for Pro). When you delete your account, we remove your personal data within 30 days, except where retention is required by law.
6. Data Security
We implement industry-standard security measures including encrypted connections (TLS), secure password hashing, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate personal data.
- Request deletion of your personal data ("right to be forgotten").
- Object to or restrict the processing of your data.
- Export your data in a portable format ("data portability").
To exercise any of these rights, contact us at support-scrumpoker@othecos.com. We will respond within 30 days.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.
9. International Transfers
Your data may be processed in countries other than your own, including the United States and Brazil. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent revision.
11. Contact
For questions or concerns about this Privacy Policy or our data practices, contact us at support-scrumpoker@othecos.com.