Privacy Policy

1. What we collect

Account data: your Discord ID, Whop subscriber ID, email (for receipts + account recovery), age verification status.

Betting data: picks you place via /bet, your stake sizes, results (auto-settled), and aggregated ROI + CLV over time.

Usage data: which commands you run, which channels you view, session timestamps. Standard analytics for product improvement.

Payment data: handled entirely by Whop and NOWPayments. We never see your card number, wallet seed, or raw payment credentials.

2. What we do NOT collect

Your real sportsbook accounts. Your bank details. Your location data beyond IP-level state verification required by age laws.

We do not build advertising profiles on you. We do not sell data to third parties. We do not target ads based on your betting behavior.

3. How we use it

Run your account: authenticate you, post picks to your Discord DMs, settle bets, send receipts.

Improve the product: aggregate CLV/ROI to refine models, track command usage to fix bugs, measure conversion on pages.

Safety: detect scam accounts, enforce self-exclusion, flag suspicious behavior patterns.

4. Who we share it with

Whop (payments + subscription management). NOWPayments (crypto payments). Discord (account identity). Neon (hosted PostgreSQL). Railway (bot hosting). Vercel (web hosting). The Odds API (live odds data).

These providers only receive the minimum data needed for their role. None get your full betting history or CLV.

5. Your rights

Export: email hello@nuropicks.com to request a full data export. We deliver within 30 days.

Delete: delete your account from your profile settings or by emailing hello@nuropicks.com. Data removal is permanent after 30 days (we keep minimal records longer only where legally required).

Correct: any stat or field we have wrong, email us and we fix it.

6. Cookies + tracking

We use essential cookies for login and session management. We use privacy-respecting analytics (no cross-site tracking, no third-party ad cookies). Toggle optional analytics off in your profile settings.

7. Children

NuroPicks is 21+ only. We do not knowingly collect data from anyone under 21. If we discover an underage user has registered, we delete the account and all associated data immediately.

8. BookSync Chrome extension

BookSync is our open-source Chrome extension that lets you sync your sportsbook bet history into your NuroPicks ledger. Source at github.com/davidolverson/nuropicks/tree/main/extensions/booksync.

What it stores locally: your NuroPicks API token (in chrome.storage.local). Only the BookSync extension can read it. Token is the routing key — anyone with it can write bets to your ledger, so revoke it at /account/booksync if your machine is compromised.

What it transmits: bet rows you explicitly choose to sync, POSTed to https://nuropicks.com/api/account/booksync/import with your token. The extension does not run automatically — every sync requires you clicking the icon on a sportsbook bet-history tab.

What it does NOT touch: your sportsbook password (extensions cannot read other tabs' login forms), your bank info, any tab other than the one you click Sync on. No telemetry, no analytics, no third-party trackers.

9. Changes + contact

We update this policy when practices change. We email you if the change is material. Contact: hello@nuropicks.com. Response within 24 hours on weekdays.

10. Controller of record

The data controller responsible for personal data processed through this site is NuroPicks LLC, a single-member limited liability company organized in the State of Wyoming, USA. Formation date: April 22, 2026.

Data subject requests (export, deletion, correction, GDPR Article 15-22, CCPA Section 1798.105) should be sent to hello@nuropicks.com with the subject line PRIVACY REQUEST. We respond within 30 days.