Privacy policy.

Information we collect

We collect account and profile details; usernames and photos; pool memberships and roles; picks, lines, point activity, results, and audit records; pool settings and commissioner actions; invitations, support requests, messages, and league chatter; waitlist emails you submit; notification choices and device tokens; and technical data such as IP address, browser, device, approximate location, timestamps, and security logs.

Optional uploads may include roster lists, standings exports, and screenshots. Payment handles and paid-status notes entered by users are pool-administration records only. Office Pool does not collect or process pool entry fees, prizes, bank accounts, or card details.

How we use information

We use information to authenticate accounts; run private pools; accept, lock, grade, and audit picks; calculate balances and standings; deliver invitations and requested notifications; support users; prevent abuse; maintain security; debug and improve the service; comply with law; and enforce our Terms. We limit collection and retention to information reasonably needed for these purposes.

Pool visibility

Your profile, username, avatar, record, point totals, and eligible pick history are visible to members of pools you join. Pending pick selections remain hidden from other players until the associated game starts, but the amount and count of pending picks may be visible under pool rules. Commissioners and authorized operations can access the records needed to administer, audit, and support the pool.

Invite, standings, receipt, and agent links may expose private pool information to anyone who possesses them. Do not post private links publicly. Commissioners can rotate or revoke supported access links.

When we disclose information

We disclose information to other members and commissioners as described above; to vendors that provide authentication, hosting, storage, email, notifications, sports data, security, analytics, customer support, and AI processing (the text of a pick message sent to a bot may be passed to an AI provider to interpret the pick; it is not used to train models); when you direct us to an integration; during a merger, financing, acquisition, or sale subject to appropriate protections; and when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or secure the service.

We do not sell personal information or use it for cross-context behavioral advertising. If that practice changes, we will update this policy and provide legally required choices before the change applies.

Advertising. Signed-in web pages may show ads served by Google AdSense. We request non-personalized ads, which are based on the page you are viewing and coarse location rather than a profile of you. Google may still set cookies to serve and measure those ads; see how Google uses information from sites that use its services and manage choices at Google Ads Settings or aboutads.info. Ads never appear in the iOS or Android apps.

Cookies, analytics, and communications

We use local storage, cookies, and similar technologies when needed to keep you signed in, remember preferences, protect forms, measure reliability, and understand feature use. You can limit cookies in your browser, but account and pool features may stop working.

Service emails may contain delivery, open, and link-event measurements so we can confirm invitations and notices work, diagnose failures, and suppress addresses that bounce or complain. Some mail software blocks or preloads these signals, so they are not a guarantee that a person read a message. We do not use these events for cross-context behavioral advertising.

Legal bases and international processing

Where a legal basis is required, we process information to perform our agreement with you, pursue legitimate interests such as service security and improvement, comply with law, protect vital interests, or act with consent where required. Our providers may process data in the United States and other countries whose laws differ from yours. We use legally recognized safeguards when required.

Retention and security

We retain information for as long as needed to provide the service, preserve pool integrity and audit history, resolve disputes, meet legal obligations, and protect users. Retention periods vary by data type. We use administrative, technical, and organizational safeguards, but no online service can guarantee absolute security.

If we determine that a security incident requires notice, we will notify affected users and authorities as required by applicable law. Keep private links and authentication credentials confidential and report suspected misuse promptly.

Your choices and rights

You can update your profile and notification choices in Account and permanently request account deletion there. Login details, profile information, photos, and pools you solely own are removed or scheduled for deletion. Historical results may remain under an anonymous “Deleted player” label so deletion cannot rewrite a private league’s standings or audit history.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to appeal a denied request. Submit a request through Help in your account. We may verify your identity and may retain information where law permits or requires it.

Children

Office Pool is intended only for adults age 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, report it through our Help page or email officepool@agentmail.to so we can investigate and delete it as appropriate.

Changes and contact

We may update this policy as the service or law changes. We will post the revised date and provide additional notice when required. Privacy and accessibility questions can be submitted through Help in your account, the public Help page, or by email to officepool@agentmail.to.