Privacy Policy

1. What We Collect

Account information you provide directly: name, email address, and optionally your PokerNow display name, home game label, and how you found PXF.

Authentication data: if you sign in with Google, we receive your verified email and Google account ID via Google OAuth. We don't receive your Google password or access to other Google services.

Payment data: for paid tiers, processed by Stripe. We never see or store your credit card details.

Usage data: basic activity logs (which features you used, when) for diagnostics and product improvement. No third-party advertising trackers.

2. Hand History Data

Current storage (as of May 2026): Uploaded hand histories are stored in our Supabase/PostgreSQL database, scoped to your account via row-level security. Only you and authorized PXF operators acting on your behalf (e.g., responding to a support request) can access them. Storage is durable, encrypted at rest by the provider, and not shared with third parties beyond the operational uses below.

Future storage models: We plan to introduce tier-differentiated storage — for example, a Free tier that keeps hand histories only in your browser via OPFS (Origin Private File System) so we never see them, while paid tiers continue to offer cloud sync. Other future variants may include team accounts, home-game shared databases, or selectable storage regions. Your account settings and this section will reflect the actual storage location for your data at any given time.

How we use it: To provide the features you use — replay, analytics, AI commentary, session reports, recap emails you trigger, hand sharing, leak detection, opponent profiling, and similar. To diagnose issues you report. To generate aggregate, non-identifying product metrics. To develop and ship new features. We may add or change features over time; material changes to data use will be reflected here.

What we don't do: Sell. Use for advertising. Provide to other PXF users without an explicit action by you (such as generating a public share link or sending a recap). Use to train third-party AI models — Anthropic's Claude API (which powers Oracle analysis) operates under contractual restrictions that prohibit training on inputs.

Other players' names: Hand history exports include the display names of other players at your table. We treat those names as belonging to your private analysis context — we do not link them to other accounts or sell them. By uploading, you confirm you have the right to share that data with PXF for personal analysis purposes consistent with the source platform's terms of service.

Operational access: Independent of features, we may access account-scoped data when strictly necessary to operate the Service — diagnosing reported bugs, investigating abuse or violations of our Terms of Service, responding to legal process (with notice to you where lawful), preventing fraud, or migrating data during infrastructure changes.

3. AI Analysis

PXF Oracle and related AI features send hand history data to Anthropic's Claude API for analysis. This data is used solely to generate your analysis result and is not used to train AI models per Anthropic's API terms. Analysis results are cached with your account so we don't re-bill against the same hand twice.

4. Cookies & Analytics

We use essential cookies for authentication and session management. We use Cloudflare Analytics to understand site usage — this does not use client-side tracking cookies and does not collect personal information. See our Cookie Policy for details.

5. How We Use Your Data

• ✓ Provide and improve the Service
• ✓ Process subscriptions and payments
• ✓ Send account-related notifications
• ✓ Diagnose and fix bugs (we may read account-scoped logs to investigate issues you report)
• ✗ We do NOT sell your data to third parties
• ✗ We do NOT use your hand histories for advertising
• ✗ We do NOT use your data to train AI models

6. Email Communications

Transactional email (welcome, magic-link sign-in, support replies, recap emails you trigger): part of the Service — you'll receive these as long as you have an account.

Product announcements (occasional updates about new features, content drops): you can opt out by replying to any such email or contacting support. We don't send marketing email more than a few times per month.

7. Your Rights

Regardless of where you live, you have the following rights with respect to your data:

• → Access: request a copy of the personal data we hold about you.
• → Correction: ask us to correct inaccurate data.
• → Deletion: request deletion of your account and associated data. Cloud-stored hand histories are removed within 30 days; legal-evidence records (such as terms acceptance logs) may be retained.
• → Portability: request your hand history data as a downloadable JSON export.
• → Marketing opt-out: stop receiving product announcement emails (transactional email continues).

To exercise any of these rights, email support@pokerxfactor.com. If you're in a jurisdiction with specific privacy laws (such as GDPR in Europe or CCPA in California), additional rights may apply — those laws control where applicable.

8. Data Retention

We keep your account data as long as your account is active. After account deletion, cloud-stored data is permanently removed within 30 days. Free tier data (browser-local) is controlled entirely by you — clearing your browser data removes it.

For legal protection, we retain a separate audit log of when you accepted these Terms and which version you accepted. This record is not used for any other purpose.

9. Third-Party Services

PXF relies on the following service providers, each governed by their own privacy policies:

• • Supabase — database, authentication, edge functions
• • Cloudflare — hosting, CDN, DNS, basic analytics
• • Stripe — payment processing (paid tiers only)
• • Anthropic — AI analysis via Claude API (Oracle features)
• • Resend — transactional email delivery
• • Google — OAuth sign-in (if you choose Google sign-in)

10. Children Under 18

PXF is intended for users 18 years of age or older and we do not knowingly collect data from anyone younger. If you believe we have collected data from someone under 18, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. Each version is identified by the date in the "Last updated" line at the top of this page.

12. Contact

Questions about privacy or to exercise any of the rights above, email support@pokerxfactor.com. PXF is operated by Mindwise Media, LLC.