Privacy Policy

1. Introduction

Welcome to GoatDraft's Privacy Policy. This policy describes how GoatDraft ("we," "us," "our") collects, uses, shares, and protects personal information when you use our website, mobile applications, and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using the Service, including:

• Account Registration: Name, email address, date of birth, phone number, username, and password
• Identity Verification: Government-issued ID, Social Security number (last 4 digits), address, and selfie photo for verification purposes
• Financial Information: Payment method details (credit/debit card information, bank account details), billing address, and transaction history
• Profile Information: Profile photo, bio, favorite teams, and other optional profile details
• Communications: Messages sent through customer support, feedback forms, or other communication channels
• Contest Data: Player selections, lineup decisions, and contest participation history

2.2 Information Automatically Collected

When you use the Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
• Location Data: IP address and precise geolocation data (required to verify eligibility for paid contests)
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies (see our Cookie Policy for details)
• Log Data: Server logs including access times, error logs, and referrer URLs

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Identity Verification Providers: Information to verify your identity and prevent fraud
• Payment Processors: Payment transaction details and verification status
• Sports Data Providers: Official statistics used for contest scoring
• Analytics Providers: Aggregated usage statistics and demographic information
• Social Media Platforms: If you choose to connect your social media accounts, profile information from those platforms

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing the Service

• Create and manage your account
• Process contest entries and calculate results
• Distribute prizes and process withdrawals
• Verify your age, identity, and location
• Provide customer support and respond to inquiries
• Send transactional notifications (contest results, account activity, etc.)

3.2 Improving and Personalizing the Service

• Analyze usage patterns to improve features and functionality
• Personalize your experience based on your preferences and behavior
• Develop new products and services
• Conduct research and analytics
• Generate AI-powered recommendations and Smart Picks

3.3 Safety and Security

• Detect and prevent fraud, abuse, and illegal activities
• Enforce our Terms of Service and other policies
• Protect the security and integrity of the Service
• Comply with legal obligations and respond to legal requests
• Monitor for suspicious account activity

3.4 Marketing and Communications

• Send promotional emails about new features, contests, and special offers (with your consent)
• Display targeted advertisements based on your interests
• Conduct surveys and solicit feedback
• Create and share aggregated, de-identified data for marketing purposes

3.5 Legal and Regulatory Compliance

• Verify compliance with age and geographic restrictions
• Generate tax documentation (Form 1099-MISC) as required by law
• Maintain records for regulatory audits
• Respond to subpoenas, court orders, and other legal processes

4. How We Share Your Information

We may share your information with third parties in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment processors (Stripe, PayPal, etc.)
• Identity verification services
• Cloud hosting providers (AWS, Google Cloud, etc.)
• Customer support platforms
• Email and SMS communication services
• Analytics and data analysis providers
• Marketing and advertising partners

4.2 Business Transfers

If GoatDraft is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Subpoenas, court orders, or other legal processes
• Requests from government agencies or law enforcement
• Investigations of illegal activity or policy violations
• Protection of our rights, property, or safety, or that of others

4.4 With Your Consent

We may share your information with third parties when you explicitly consent, such as when you choose to connect your social media accounts or participate in co-branded promotions.

4.5 Aggregated Data

We may share aggregated, de-identified data that does not personally identify you with partners, advertisers, and other third parties for research, marketing, and analytics purposes.

5. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction, including:

• Encryption: SSL/TLS encryption for data in transit and AES-256 encryption for sensitive data at rest
• Access Controls: Role-based access limitations and multi-factor authentication for internal systems
• Security Audits: Regular penetration testing and vulnerability assessments
• Compliance: Adherence to PCI DSS standards for payment card data
• Monitoring: Continuous monitoring for suspicious activity and security threats

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Account Information: Retained until you delete your account, plus 7 years for regulatory compliance
• Financial Records: Retained for 7 years to comply with tax and financial reporting requirements
• Identity Verification Data: Retained for 5 years after account closure for anti-fraud purposes
• Usage Data: Retained for 2 years for analytics and service improvement
• Marketing Communications: Retained until you unsubscribe or delete your account

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to your personal information and receive a copy in a portable format.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions (e.g., financial records we're required to retain).

7.4 Opt-Out

You have the right to opt out of:

• Marketing communications (via unsubscribe link or account settings)
• Sale or sharing of personal information for targeted advertising
• Certain automated decision-making processes

7.5 Restriction

You have the right to request restriction of processing in certain circumstances.

7.6 Objection

You have the right to object to processing of your personal information for certain purposes.

To exercise these rights, please contact us at privacy@goatdraft.com. We will respond to your request within 30 days. You will not be discriminated against for exercising your privacy rights.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information.

If you believe we have collected information from a child under 18, please contact us immediately at privacy@goatdraft.com.

9. International Data Transfers

The Service is operated from the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

By using the Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, please contact us at privacy@goatdraft.com or call 1-800-GOAT-WIN. You may also designate an authorized agent to make requests on your behalf.

Notice: We do not sell personal information to third parties for monetary consideration. However, we may share information with advertising partners, which may be considered a "sale" under CCPA. You can opt out by visiting our Cookie Settings or contacting us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Effective Date" at the top of this document. We may also send you an email notification for significant changes.

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at: