How current DeePicks features handle data.
This notice distinguishes services present in the application from services that are only planned. Operator identity, retention periods, request procedures, and jurisdiction-specific legal wording still require owner and legal review.
Accounts and authentication
Supabase provides account authentication. When you register or sign in, Supabase processes account details such as your email address, authentication credentials, verification and recovery activity, and session information. DeePicks uses authentication storage to keep you signed in and to protect account-only routes.
Private Bet Tracker
Signed-in users can save their own bets, stakes, odds, selections, results, settlement history, notes, and related records in Supabase. Uploaded bet-slip screenshots are stored in a private Supabase Storage bucket under the authenticated user's identifier. Database and storage access rules are scoped to that user.
Private does not mean anonymous: the records are linked to the user account so the service can retrieve the correct tracker data. The application can create short-lived signed links so the user can review an uploaded screenshot.
Optional OpenAI screenshot extraction
When screenshot extraction is configured and a user uploads or retries a supported bet-slip image, the application sends that image to OpenAI's Responses API to extract visible ticket fields. The API request sets store: false; provider-side handling remains subject to OpenAI's applicable terms and account controls. Users must review extracted values before saving a bet.
The extracted response is temporarily kept in that browser tab's session storage for the review flow. Confirmed tracker details are then saved to the user's Supabase records. If OpenAI configuration is absent, automatic extraction is unavailable; the application does not silently replace it with another provider.
Stripe sandbox billing
DeePicks currently integrates only with Stripe test mode. Test checkout and the test customer portal can process the account email supplied to checkout plus sandbox customer, subscription, price, and payment-status information. Signed test webhook events are used to update access records in Supabase. No live payment should be collected through the current configuration.
Public prediction data
The public landing page reads the validated football snapshot and publishes only a limited free-tip view. Full prediction data remains behind server-verified access checks. Account and Bet Tracker data are not included in the public free-tip response.
Advertising and analytics
The page contains reserved advertising placeholders only. AdSense, advertising tags, advertising cookies, analytics, and a consent management platform are not active. If advertising or analytics is introduced later, this notice and the cookie notice must be updated before activation, and required consent controls must be configured.
Retention, requests, and contact
Email info@deepicks.com for a privacy request, an account-deletion request, support, or to report a website issue. Do not include passwords, authentication or recovery links, payment-card details, identity documents, or bookmaker credentials in an initial email.
A final data-retention schedule, request-verification procedure, operator identity, and jurisdiction-specific rights and legal wording have not yet been published. Those details still require owner and legal review before this notice is final.