Effective Date: July 16, 2025
Last updated: July 16, 2025
Welcome to Lock & Cash Sports, LLC ("Lock & Cash," "we," "our," or "us"). We value your privacy and are committed to safeguarding your Personal Information. This Policy explains how we collect, use, disclose, store, and protect information when you:
This Policy is designed to meet or exceed the requirements of the California Consumer Privacy Act, as amended by the CPRA (collectively, "CCPA"), other similar U.S. state privacy laws (Colorado CPA, Virginia VCDPA, Connecticut CTDPA, Utah UCPA, etc.), and the EU/UK GDPR.
Age Restriction: Our Services are intended for natural persons 21 years of age or older. We do not knowingly collect data from anyone under 21.
| Category | Examples | Source | Sensitive? |
|---|---|---|---|
| Identifiers | Name, username, postal address, email, phone number, IP address, device ID | Provided by you; collected automatically | No |
| Commercial data | Subscription tier, transaction dates, Stripe payment ID (tokenized) | Stripe | No |
| Internet / app activity | Log files, pages viewed, referral URLs, session duration, in‑app clicks | Automatically via cookies, pixels, Supabase, Vercel analytics | No |
| Approx. geolocation | City/State derived from IP or SMS area code | Automatically | No |
| Communications | SMS messages, support emails, Telegram chats | Provided by you | Potentially sensitive |
| Inferences / profile data | Betting‑sport preferences, content engagement metrics | Derived internally | No |
| Biometric identifiers | None (we do not intentionally collect) | N/A | N/A |
We do not intentionally collect "sensitive personal information" as defined under the CPRA or biometric identifiers. If such data is provided (e.g., a voiceprint in a voicemail) we handle it using the strictest applicable standard.
| Purpose | Lawful Basis (GDPR) |
|---|---|
| Provide, maintain & secure the Services | Contract; Legitimate Interest |
| Deliver picks & content via SMS, email, Telegram, or web dashboard | Contract |
| Process payments & manage billing records | Contract; Legal Obligation |
| Send service announcements & transactional messages | Contract |
| Send marketing/promotional offers (with opt‑out) | Consent (SMS/email); Legitimate Interest (existing customers, subject to opt‑out) |
| Analyze usage, improve UX, develop new features | Legitimate Interest |
| Enforce our Terms, comply with laws, respond to legal requests | Legal Obligation |
We never sell Personal Information for money. We may "share" (as that term is defined under certain state laws) limited identifiers for cross‑context behavioural advertising; you can opt out (see § 8).
| Recipient | Reason |
|---|---|
| Service Providers (Stripe, Supabase, Vercel, Google, Twilio, Telegram) | Hosting, payments, analytics, messaging |
| Professional Advisors | Accounting, legal, compliance |
| Law Enforcement / Regulators | When required to comply with law or protect rights |
| Business Transferees | In connection with a merger, acquisition, or asset sale (with notice to you) |
All vendors are bound by written contracts restricting use of Personal Information to specified purposes and requiring appropriate security.
We use first‑ and third‑party cookies/pixels for:
You can manage cookies via your browser settings or by clicking Cookie Settings in our footer.
By providing your mobile number or email, you consent to receive automated and/or manual marketing and transactional messages. Message and data rates may apply. You may withdraw consent at any time by:
Opt‑out will not affect non‑marketing communications essential to your subscription (e.g., password resets, payment receipts).
Depending on where you live, you may have rights to:
Email support@lockandcash.com or log in to your account dashboard. We will verify your identity (and authority if acting as an agent) before fulfilling the request. We will not discriminate against you for exercising privacy rights.
Our Site honours the Global Privacy Control (GPC) signal as a valid request to opt out of data "sales" and targeted advertising under applicable U.S. state laws.
If you are in the EEA/UK, your data may be transferred to the United States and other countries not deemed to provide "adequate" protection by the European Commission. We rely on:
We implement reasonable and appropriate technical and organisational safeguards—encryption in transit and at rest, least‑privilege IAM, continuous monitoring, annual penetration tests, and incident‑response playbooks. No method of transmission is 100% secure, but we follow industry best practices (ISO 27001/2; NIST 800‑171 guidance).
We retain Personal Information only as long as necessary to:
Typical retention periods:
We do not knowingly collect data from anyone under 21. If we learn we have inadvertently received such data, we will delete it promptly. Parents or guardians may contact us at support@lockandcash.com.
We may revise this Policy periodically. Material changes will be announced via Site banner, in‑app notice, or email/SMS. The "Last updated" date at the top indicates when changes take effect; continuing to use the Services after that date constitutes acceptance.
End of Policy