Privacy Policy

1. Information We Collect

We collect the following information when you use BreakAuctions:

• Account information: email address, username, and password (stored securely via Supabase Auth).
• Transaction data: prize competition entries, spot numbers, and payment amounts.
• Payment processing data: handled directly by Stripe — we do not store your card number.
• Usage data: pages visited, time spent, and actions taken on the Platform.
• Communications: emails you send to us and emails we send to you.

2. How We Use Your Information

• To process your prize competition entries and payments.
• To notify you of draw results, whether your spot is called or not.
• To deliver prizes to winners.
• To send transactional emails (entry confirmation, winner notifications, account updates).
• To detect and prevent fraud, abuse, and unauthorized access.
• To improve the Platform and our services.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not serve advertising.

3. Third-Party Services

We use the following third-party services to operate the Platform:

• Supabase — database, authentication, and real-time infrastructure.
• Stripe — card payment processing. Stripe's privacy policy applies to card data.
• Resend — transactional email delivery.
• Random.org — cryptographically verified random number generation for draws.
• Vercel — hosting and deployment.
• Cloudflare — DNS, DDoS protection, and security.

Each of these services has their own privacy policies. We encourage you to review them.

4. Data Retention

We retain your account data for as long as your account is active. Transaction records are retained for a minimum of 7 years for legal and accounting purposes. You may request deletion of your account and associated personal data at any time by contacting us, subject to our legal retention obligations.

5. Cookies

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but doing so may prevent you from logging in or using the Platform.

6. Security

We use industry-standard security measures including SSL/TLS encryption, row-level security on our database, and secure authentication via Supabase Auth. Passwords are never stored in plain text. However, no system is completely secure, and we cannot guarantee absolute security of your data.

7. Your Rights

Depending on your location, you may have the following rights:

• Right to access the personal data we hold about you.
• Right to correct inaccurate personal data.
• Right to request deletion of your personal data.
• Right to object to or restrict processing of your data.
• Right to data portability.

The personal information of Canadian users is collected, used, and disclosed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Where the EU General Data Protection Regulation (GDPR) applies, we also honour the corresponding rights it provides.

To exercise any of these rights, contact us at info@breakauctions.com.

8. Children's Privacy

The Platform is not directed to individuals under 19 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform. Your continued use of the Platform after changes take effect constitutes your acceptance of the updated policy.

10. Contact