Privacy Policy

1. Who We Are

PO Solve (posolve.com) is a browser-based poker study and analysis tool. The data controller is the operator of the Service, contactable at contact@posolve.com.

2. Data We Collect

Account data

• Email address (registration, login, communication)
• Display name and avatar (if provided via OAuth)
• Authentication provider identifiers (Google OAuth ID)

Usage data

• Pages visited, features used, session duration
• Device type, browser, operating system, screen resolution
• IP address (anonymized after 30 days)

Solver data

• Game configurations and solver parameters you submit
• Saved rooms and session settings

We do not collect raw card data, hand histories from external platforms, financial information (card details are handled solely by Stripe), or data from minors.

3. How We Use Your Data

• Provide the Service — authenticate you, save your settings and rooms, run solver analyses.
• Improve the product — aggregate, anonymized usage analytics to understand feature adoption and performance.
• Communicate — send account-related emails (welcome, password reset, subscription changes). No marketing emails without explicit opt-in.
• Security & fraud prevention — detect abuse, enforce rate limits, protect the platform.

4. Legal Bases (GDPR)

• Contract — processing necessary to provide the Service you signed up for.
• Legitimate interest — analytics, security monitoring, product improvement.
• Consent — optional cookies (analytics), marketing emails.

5. Third-Party Services

We share data only with the following processors, each under appropriate data-processing agreements:

• Supabase — authentication, database hosting (EU region)
• Stripe — payment processing (PCI DSS compliant)
• Google Analytics — anonymized usage analytics (consent-gated)
• Vercel — application hosting and CDN

We do not sell, rent, or trade your personal data to any third party.

6. Cookies

We use the following categories of cookies:

• Essential — authentication tokens, session management. Always active.
• Analytics — Google Analytics cookies, activated only with your consent via the cookie banner.

You can withdraw cookie consent at any time by clearing your browser cookies or using the cookie settings link in the footer.

7. Data Retention

• Account data — retained while your account is active. Deleted within 30 days of account deletion request.
• Saved rooms & sessions — retained while your account is active.
• Usage logs — anonymized after 30 days, aggregated data retained up to 24 months.
• Payment records — retained as required by tax law (typically 5–7 years).

8. Your Rights (GDPR / EEA Users)

You have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Portability — receive your data in a machine-readable format.
• Restriction / Objection — restrict or object to certain processing.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any right, email contact@posolve.com. We respond within 30 days.

9. Data Security

We implement industry-standard security measures including encrypted connections (TLS), Row Level Security in Supabase, secure authentication flows, and regular access reviews. No system is 100% secure — we encourage you to use strong, unique passwords.

10. International Transfers

Your data may be processed in the EU and US (Vercel, Stripe). Transfers outside the EEA are protected by Standard Contractual Clauses or equivalent safeguards.

11. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors. If we learn we have, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice at least 14 days before taking effect.

13. Contact

Questions or concerns? Contact us at contact@posolve.com.