Privacy Policy

When you visit our site without signing in:

• A functional preference cookie storing your declared draft window. Not used for tracking or advertising.
• Standard server logs (IP address, request path, user agent) retained by our hosting provider Vercel for operational and security purposes.

When you create an account:

• If you sign in with Google: your name, email address, and profile picture as provided by Google. We do not receive or store your Google password.
• If you sign in with email and password: your email address and a securely hashed password managed by our auth provider (Supabase Auth). We never store your password in plain text.

When you join the waitlist:

• Name, email address, Sleeper username (optional), number of dynasty leagues, area of focus, creator flag, and your free-text submission.

When you use the analytics product:

• Your Sleeper username, which we send to Sleeper's public API to look up your leagues, rosters, and draft state.
• League data including other league members' rosters, owner names, and team activity, for the sole purpose of analyzing the league for you. We do not retain league data server-side beyond the duration of your request.
• Your declared strategy choices and chat messages with the coach. Free-tier chats are stored in your browser's localStorage only. Pro-tier chats are also stored server-side for cross-device continuity. Each chat turn is sent to our AI provider as described below.
• Pinned briefings (Pro tier) are stored server-side so they persist across devices.

When you subscribe (Pro tier):

• Payment is processed by Stripe. We receive your Stripe customer ID, subscription status, and plan details. We never see or store your full card number.

• Waitlist data is used solely to invite you to the beta and to understand who is interested in the product.
• League and chat data is used to generate the analysis we show you.
• We do not sell your data. We do not share it with advertisers.

We rely on the following service providers:

• AI provider — our AI engine processes your chat messages and league context to generate responses. The provider may also perform live web searches when answering your questions, which may transmit query content to third-party search providers.
• Sleeper is the source of your league data; reading your data via their public API is governed by your agreement with Sleeper.
• Supabase hosts our database and manages authentication (including Google OAuth and email/password sign-in).
• Stripe processes payments for Pro subscriptions. Subject to Stripe's Privacy Policy.
• Google provides OAuth sign-in. Subject to Google's Privacy Policy.
• Vercel hosts the application and serves static logs.
• Upstash stores rate-limit and spend counters (no PII).

• Waitlist entries: retained until 12 months after public launch, then deleted.
• League data: not retained server-side.
• Chat history (free tier): stored in your browser's localStorage until you clear it.
• Chat history and pinned briefings (Pro tier): stored server-side until you delete them via Account settings or use the "Wipe my data" feature.
• Server logs: retained per Vercel's defaults (typically 30 days).

You can export all data we hold about you or wipe your server-side product data (chat history, pinned briefings) at any time from your Account page. No need to contact us.

To delete your account entirely, email us at the address below.

If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to processing.
• Withdraw consent.

Email isaiah@nextupleader.com to exercise any of these rights. We will respond within 30 days.

You may also clear browser-stored data (chat history, declared windows) at any time without contacting us, by clearing site data in your browser.

We set one cookie: `dw_<leagueId>`, a 180-day functional preference cookie storing your declared draft window. We do not set advertising, analytics, or tracking cookies. We do not use third-party trackers.

Dynasty Copilot is not directed to children under 13 and we do not knowingly collect data from anyone under 13. Users must be at least 13 years old (or the minimum age required in your jurisdiction).

We may update this policy. Material changes will be announced on the site or by email to waitlist members.

Questions: isaiah@nextupleader.com

Dynasty Copilot is operated by an independent founder.