Privacy Policy

1. Introduction

Partner Client, LLC ("we," "us," or "our") operates Fantasy Spotlight. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service. We take your privacy seriously and are committed to handling your data responsibly.

2. Information We Collect

Account Information

When you sign in with Google, we receive your name and email address from Google. When you sign in via magic link, we collect your email address. We do not collect passwords.

ESPN Credentials

To access your private ESPN fantasy league, you provide your ESPN authentication cookies (S2 and SWID). These credentials are encrypted using AES-256-GCM before being stored and are used solely to retrieve your league data from ESPN's API on your behalf. We never share these credentials with any third party.

Fantasy League Data

Once connected, we retrieve and store the following data from your ESPN fantasy league:

• League name, settings, and season history
• Team names and manager names
• Weekly matchups and scores
• Player rosters and performance statistics
• Draft picks and draft history
• Standings and records

Usage Data

We may collect basic technical data such as your browser type and IP address through our hosting infrastructure (Vercel). We do not use third-party analytics trackers.

3. How We Use Your Information

• To authenticate you and maintain your account
• To sync your ESPN fantasy league data on your behalf
• To generate AI-powered articles and content about your league
• To send transactional emails (magic link sign-ins, notifications)
• To improve the reliability and performance of the Service

We do not sell your personal data. We do not use your data for advertising purposes.

4. AI Content Generation

We use OpenAI's API to generate articles and stories based on your fantasy league data. League data (team names, scores, matchups, etc.) is sent to OpenAI to produce this content. OpenAI's use of this data is governed by their Privacy Policy. We do not send your ESPN credentials or personal email to OpenAI.

5. Third-Party Services

We use the following third-party services to operate Fantasy Spotlight:

• Neon — PostgreSQL database hosting (your data is stored here)
• Upstash — Redis, used for background job queuing
• Vercel — Application hosting
• Railway — Background worker hosting
• Google OAuth — Sign-in authentication
• Resend — Transactional email delivery
• OpenAI — AI content generation

Each of these providers has their own privacy practices. We select providers that maintain reasonable security standards.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal information and fantasy league data within 30 days, except where retention is required by law. Encrypted ESPN credentials are deleted immediately upon account deletion.

7. Security

We implement appropriate technical and organizational measures to protect your data, including:

• AES-256-GCM encryption for stored ESPN credentials
• TLS encryption for all data in transit
• Access controls limiting who can access production systems

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect your ESPN integration at any time

To exercise any of these rights, contact us at Jonny@hey.com.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about this Privacy Policy? Contact us at Jonny@hey.com.

Partner Client, LLC