Privacy Policy

1. Information we collect

Account and identifier information. When you create an account, we collect information such as your name, email address, Supabase user or account identifier, authentication information, and related account records. If you choose to provide a mobile phone number and advance consent for future text alerts, we also collect that phone number and the associated consent record.

Producer profile information. If you create a producer profile, we may collect and display the business name, general location, biography, phone number, email address, website, social-media links, logo, and other information you choose to provide.

Content you create or upload. Producers may create jackpot and event listings, divisions, venue details, descriptions, flyers, photographs, videos, logos, and other business content. Event flyers and other uploaded materials may contain names, telephone numbers, email addresses, or other information included by the uploader.

Content concerning minors. Because the Services include youth rodeo and equine events, producer-submitted flyers, photographs, videos, results, or listing details may identify minors. Producers are instructed at the point of upload not to include unnecessary personal information about others and to obtain required parent or legal-guardian permission before publishing or processing information that identifies a minor. Producers must not upload a minor's private contact information, precise home address, school schedule, credentials, government identifier, medical information, or other unnecessary sensitive details.

Account-linked activity and preferences. We collect information about jackpots you save, producers you follow, RSVP or going selections, alert preferences, selected disciplines, distance preferences, filters, notification settings, and interactions with the Services. Saves, follows, and RSVP or going selections are stored with the user account so these features can function and are deleted with the account, subject to backups and legal-retention exceptions described below.

Anonymous aggregate interactions. We may maintain anonymous or aggregate records such as total listing views or advertisement impressions. Website view-count systems may use a one-way hashed network identifier for de-duplication without storing a user ID. The iOS app does not store your search history; the website may record anonymous, aggregate search-filter selections to understand demand, without an associated user ID or IP address. We do not use this information to identify individual users or for cross-site tracking.

Location information. When you use a near-me or map feature, the mobile application may request foreground location access at approximate or balanced accuracy while the app is in use. Live device location is used to calculate distance from event coordinates and is not retained as a location history. We do not collect background location. If you voluntarily save a home location, we store the label and coordinates with your account until you change or delete them.

Push-notification and device identifier information. When push notifications are enabled, we collect an Expo or Apple push token. The token is stored in our Supabase systems, associated with the authenticated user account, and used to deliver requested notifications. Push tokens are not used for advertising tracking.

Payment and purchase information. Stripe processes payments for subscriptions and purchases, including web checkout opened from within the iOS app. We do not receive or store full payment-card numbers. We may receive and retain plan selection, subscription status, billing dates, Stripe customer and subscription identifiers, transaction status, invoices, refunds, cancellations, purchase history, and related entitlement records.

Operational and security information. We and our service providers may process device type, operating system, browser type, app version, internet protocol address, timestamps, request information, security events, and limited operational, request, and error logs needed to operate, troubleshoot, and protect the Services. We do not currently use third-party analytics, crash-reporting, or performance-monitoring SDKs.

Advertising engagement information. Our first-party systems may record aggregate advertisement impressions, clicks, and click-through rates. We do not provide advertisers with individual user, device, or internet protocol address information.

2. How we use information

• Provide, operate, maintain, and improve the website and mobile application.
• Create and manage accounts, producer profiles, event listings, subscriptions, purchases, and account preferences.
• Show jackpots and producer content relevant to selected disciplines, preferences, and general area.
• Enable account-linked features such as saves, producer follows, RSVP or going selections, and personalized notification preferences.
• Deliver push notifications and, if activated in the future, text alerts that a user has expressly chosen to receive.
• Process subscriptions, payments, renewals, refunds, cancellations, receipts, and transaction communications.
• Analyze uploaded flyers and producer logos using automated tools to assist with listing creation and presentation.
• Serve and measure advertisements through our own internal advertising tools.
• Detect fraud, prevent abuse, protect accounts, troubleshoot problems, enforce our agreements, and maintain security.
• Respond to questions, requests, complaints, copyright notices, legal inquiries, and customer-service communications.
• Comply with legal, tax, accounting, recordkeeping, and regulatory obligations.

3. How we disclose information

We do not sell personal information for money. We disclose information only as described below.

Public producer information and listings. Producer profiles and event listings are intended to be public. Information a producer chooses to publish, including business contact details, logos, flyers, venue information, and event details, may be visible to anyone using the Services or accessing a public event page.

Service providers. We disclose information to vendors that perform services for us, subject to their agreements and applicable law. These providers include:

• Supabase, for database services, authentication, account identifiers, file storage, push-token storage, and related infrastructure.
• Stripe, for payment processing, subscription administration, purchase records, and fraud screening through Stripe Radar.
• Resend, for account, authentication, subscription, and transactional email delivery.
• Apple Push Notification service and Expo, for delivery of push notifications.
• Vercel, for website hosting and runtime infrastructure.
• Google Maps and related Google services, for maps, venue search, address autocomplete, and location coordinates.
• Anthropic, through its commercial API, for automated extraction of event details from flyers and limited analysis of producer logos.

Legal and safety disclosures. We may disclose information when we reasonably believe disclosure is required by law, subpoena, court order, governmental request, or legal process, or when necessary to protect the rights, safety, security, and property of The Jackpot Guide, our users, or the public.

Business transactions. If The Jackpot Guide is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be disclosed as part of the transaction subject to appropriate protections and applicable law.

With your direction or consent. We may disclose information when you direct us to do so or provide consent for a specific disclosure.

4. Anthropic and automated flyer processing

When a producer uses the Flyer Tool, the uploaded flyer is sent to Anthropic's commercial application programming interface to extract event details. A producer logo may also be sent to Anthropic for automated analysis. Uploaded materials can include third-party personal information such as a contact name, telephone number, or email address. Producers should upload only information they are authorized to provide and should avoid including unnecessary sensitive information.

Anthropic does not use commercial API inputs or outputs to train its models by default. Under Anthropic's standard commercial retention practices, API data may be retained for up to approximately thirty (30) days for trust, safety, and service purposes before deletion. The Jackpot Guide does not currently have a separate zero-data-retention arrangement with Anthropic.

The original flyer, photograph, video, or logo may remain stored in The Jackpot Guide's Supabase storage for use in the producer profile or public event listing until the uploader removes the content, the applicable retention period ends, or the account is deleted, subject to legal retention needs.

5. Stripe payments and fraud prevention

Stripe processes all subscription and purchase payments. Stripe Radar performs automated fraud screening on initial transactions and recurring subscription renewals. Stripe may process transaction details, device information, network information, browser or session signals, payment history, and other information used to detect and prevent fraud.

We do not receive or store full payment-card numbers. Stripe's own privacy notice and terms govern information it collects directly as an independent payment provider.

6. Location and maps

The mobile application may request approximate foreground location while the app is in use. We do not store a history of live device GPS locations or collect location in the background.

If you choose to save a home location, the label and coordinates are stored with your account to support nearby-event features without requiring repeated device-location access. You may change or remove the saved location in your preferences. Google Maps may receive technical information when its map tiles, software development kit, place search, or address tools are used, subject to Google's own terms and privacy practices.

7. Text messages and future SMS alerts

The Jackpot Guide may allow users to provide a mobile number and give advance, optional consent to receive future SMS text alerts. The SMS alert service is not currently active, and providing a number or opting in does not mean messages will begin immediately. We may activate the service in the future after selecting and integrating an SMS provider.

If the SMS service is activated, we may send alerts about new events near a selected location, updates to saved events, or other account-related notifications described in our SMS Terms and Conditions. Consent is optional and is not required to create an account or use the Services. We will not sell or disclose a mobile number to another company for that company's own marketing.

Before sending SMS messages, we may disclose mobile numbers and necessary messaging information to the selected SMS service provider solely to operate the program. Users will be able to opt out as described in the SMS Terms and Conditions and applicable message instructions. We may retain consent, opt-out, and related messaging records for the period reasonably necessary to demonstrate compliance with applicable law, prevent abuse, and resolve disputes.

8. Push notifications

If you enable push notifications, we use an Expo or Apple push token through Apple Push Notification service and Expo to deliver alerts. The token is stored in Supabase and linked to your account so requested notifications can be delivered. You may change notification preferences in the app or device settings. Push tokens may be removed or disabled when notifications are turned off, an account is deleted, the token is reported invalid, or the token is no longer needed.

9. Cookies and similar technologies

The website uses cookies, local storage, and similar technologies that are necessary to authenticate users, maintain sessions, remember preferences, protect checkout and account functions, and operate the Services. Stripe, Supabase, Google, and other service providers may also use their own necessary security or service technologies when their features are used.

We do not currently use Google Analytics, Meta Pixel, third-party behavioral advertising cookies, or similar cross-site tracking tools. Blocking necessary cookies may prevent sign-in, checkout, or other features from working correctly.

10. Advertising and aggregate information

We sell and manage advertising placements directly through our own systems. We may choose advertisements based on activity within The Jackpot Guide, such as the discipline, event category, or general area being viewed. We do not currently disclose personal information to outside advertising networks for advertising based on activity across unrelated websites or applications.

Advertisers may receive aggregate campaign reports, such as total impressions, total clicks, and click-through rate. We may also create, publish, or license aggregate or de-identified insights about audience activity. We maintain such information in de-identified or aggregate form, do not attempt to re-identify it, and do not disclose it in a manner reasonably designed to identify an individual.

Content moderation records. We may process reports, screenshots, listing and account identifiers, reviewer notes, restriction reasons, appeal records, and actions taken to investigate objectionable, misleading, infringing, unsafe, or unlawful content. We retain only information reasonably necessary to administer moderation, enforce our Terms, respond to appeals, protect users, and establish compliance.

11. Data retention

Active accounts. We generally retain account information, account identifiers, purchase and subscription records, push tokens, user preferences, account-linked product interactions, and user-selected content while an account remains active and as needed to provide the Services.

Subscription lapse. When a producer subscription ends, producer listings are hidden from public view and may be retained for up to twenty-four (24) months to permit reactivation. After that period, the information may be deleted or de-identified unless the producer renews, requests deletion sooner, or another legal basis requires retention.

Account deletion. When an account is deleted, the live account record and associated data are deleted through our account-deletion process, including producer listings, saved events, follows, RSVP or going selections, push tokens, logos, flyers, photographs, videos, and related content. Certain records may be retained when necessary for legal, tax, accounting, fraud-prevention, chargeback, security, copyright, or dispute-resolution purposes.

Payment records. We generally retain invoices, subscription records, purchase history, and related financial records for up to seven (7) years, or longer when reasonably necessary to satisfy legal, tax, accounting, fraud-prevention, or dispute-resolution obligations. Stripe may maintain its own records independently.

SMS consent records. SMS consent, consent-version, opt-out, and related messaging records may be retained for the period reasonably necessary to demonstrate compliance with applicable messaging laws, resolve disputes, and document a user's preferences, even after consent is withdrawn.

DMCA and legal records. Copyright notices, counter-notifications, correspondence, removal decisions, repeat-infringer enforcement records, privacy requests, appeals, and similar legal or compliance records may be retained for the period reasonably necessary to administer the request, comply with law, and protect legal rights.

Anthropic API data. Anthropic may retain commercial API inputs and outputs for up to approximately thirty (30) days under its standard retention practices.

Database backups. Supabase creates daily database backups that are generally retained for approximately seven (7) days. Information deleted from the live database may remain in a backup until that backup rolls off. Uploaded files stored as storage objects are not necessarily included in those database backups and are handled through separate storage deletion processes.

Technical logs. Supabase API and database logs are generally retained for approximately seven (7) days under the current plan. Vercel runtime and application logs are short-lived and are generally retained for approximately one (1) day. We do not currently use a log-drain service to send those logs to long-term external storage.

12. Data security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include account authentication, row-level access controls, encrypted connections, vendor security controls, and separation of company systems and credentials.

No method of storage, transmission, or security is completely effective. We cannot guarantee absolute security, and users are responsible for protecting account credentials and notifying us of suspected unauthorized access.

13. Your choices and controls

• Account and producer profile: You may edit account and producer-profile information through the Services.
• Location: You may control device-location permission through device settings and may remove a saved home location from account preferences.
• Push notifications: You may change push preferences in the app or device settings.
• Future SMS alerts: You may decline SMS consent or withdraw consent as provided in the SMS Terms and Conditions once messaging is activated.
• Account-linked activity: You may remove saved events, follows, and RSVP or going selections through the Services where those controls are available.
• Account deletion: You may delete your account through the account page in the app or website, or request assistance at info@thejackpotguide.com.
• Cookies: You may adjust browser settings, although blocking necessary technologies may prevent parts of the Services from functioning.

14. Privacy rights

Depending on your residence and whether an applicable privacy law applies to The Jackpot Guide, you may have rights to request access to personal information, obtain a portable copy, correct inaccurate information, request deletion, or opt out of certain processing such as sale, sharing, targeted advertising, or qualifying profiling.

The Jackpot Guide does not currently sell personal information for money and does not currently sell or share personal information for cross-context behavioral advertising as those terms are defined under California law. We also do not currently engage in targeted advertising based on activity across unrelated businesses.

To submit a privacy request, email info@thejackpotguide.com and use a subject line such as "Privacy Request - Access," "Privacy Request - Delete," "Privacy Request - Correct," or "Privacy Request - Appeal." Describe the request and the account or information involved. We may need to verify your identity and authority before responding. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and verification of the consumer.

We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right. If we deny a request and applicable law provides an appeal right, you may appeal by replying to the decision or emailing info@thejackpotguide.com with the subject line "Privacy Appeal."

Where legally required and applicable to our practices, we will recognize valid browser-based opt-out preference signals, such as Global Privacy Control. Because we do not currently sell or share personal information for cross-context behavioral advertising, such a signal does not presently change how we process information, but we will reassess this if our practices change.

15. Children's privacy

The Services are intended for a general audience age thirteen (13) and older and are not directed to children under thirteen. Children under thirteen may not create or control an account. A parent or legal guardian may use the adult's own account to locate events or manage family activities. Producer accounts, producer claims, paid producer subscriptions, paid add-ons, and SMS enrollment are limited to persons age eighteen (18), or the age of majority where they live.

We do not knowingly collect personal information directly from children under thirteen. If we receive credible information that a child under thirteen created or controls an account, our internal procedure calls for prompt restriction, investigation, full-cascade deletion where confirmed, and minimal compliance logging. Our operational target is to restrict the account within one business day and complete deletion within five business days, unless additional verification is reasonably necessary. Contact info@thejackpotguide.com to report a suspected under-thirteen account.

The Jackpot Guide does not provide child-directed marketing, youth-only accounts, child-specific contests or prizes, or in-app user-to-user messaging, comments, or chat. Producers may send one-way notifications to followers, and users may contact producers only through producer-supplied external contact links outside the Services.

16. Third-party services and links

The Services may contain links to producer websites, social-media pages, payment pages, maps, or other third-party services. Those parties have their own privacy practices. We are not responsible for the privacy, security, or content of services we do not control.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version and update the Last Updated date. If a change materially affects how we use personal information, we will provide additional notice through the Services, by email, or by another method required by law.

18. Contact us

The Jackpot Guide, LLC
210 N Mustang Mall Ter #1019
Mustang, OK 73064
Website: thejackpotguide.com
Email: info@thejackpotguide.com
Phone: (805) 749-3004