Privacy Policy

Effective [EFFECTIVE DATE]

TEMPLATE, not legal advice. Have a qualified attorney review and complete every bracketed item, and keep the subprocessor list current.

This Privacy Policy explains how [LEGAL ENTITY NAME] ("Sunday Radar", "we") collects, uses, and shares information when you use our website, apps, and services (the "Service").

1. Information we collect

Account data: your email address and basic Google profile (name, avatar) when you sign in.
Connected-league data: the fantasy platform usernames you connect and the read-only league, roster, matchup, and standings data we retrieve to power the Service.
Billing data: a customer identifier and billing address from our payment processor. We never see or store your full card number.
Usage and device data: logs, approximate location from IP, and similar technical data used to operate and secure the Service.

2. How we use it, and our legal bases

We use this information to provide and improve the Service (to perform our contract with you), to process payments (contract), to secure and debug the Service and prevent abuse (legitimate interests), and to comply with law. Where required, we rely on your consent, which you may withdraw.

3. AI processing

If you use our paid AI features, we send relevant connected-league data (such as team names, rosters, and standings) to our AI provider, Anthropic, to generate recaps and answers. That data is processed to return a result; under Anthropic's API terms it is not used to train their models by default. We send only what the feature needs.

4. Service providers (subprocessors)

We share data with the providers that run the Service:

Google Firebase: Authentication (Google sign-in) and database.
Stripe: Payment processing and subscription billing.
Vercel: Application hosting and delivery.
Upstash: Rate limiting and caching (when enabled).
Anthropic: AI-generated recaps and answers (paid features).

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

5. Retention

We keep account data while your account is active and delete it when you delete your account, except where we must retain limited records (for example, billing and tax records) to comply with law. [Confirm your exact retention periods.]

6. Your rights

Depending on where you live (for example under GDPR or CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict your data, to opt out of certain sharing, and to not be discriminated against for exercising these rights. You can delete your account and its data at any time from your account settings, or contact us at [privacy@sundayradar.com] to exercise any right. [Describe your verification and response process and any appeal right.]

7. International transfers

We are based in the United States and our providers may process data in the US and elsewhere. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

8. Cookies

We use strictly necessary cookies to keep you signed in and to secure the Service. [Describe any analytics or optional cookies and your consent mechanism if you add them.]

9. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us at [privacy@sundayradar.com] and we will delete it.

10. Changes and contact

We may update this Policy and will post the new effective date. For questions or requests, contact us at [privacy@sundayradar.com].