Privacy Policy

1. Information We Collect

We collect the following information when you use BreakAuctions:

• Account information: email address, username, and password (stored securely via Supabase Auth).
• Transaction data: auction entries, spot numbers, payment amounts, and payment method type (card or crypto).
• Payment processing data: handled directly by Stripe or NOWPayments — we do not store your card number or crypto wallet keys.
• Usage data: pages visited, time spent, and actions taken on the Platform.
• Communications: emails you send to us and emails we send to you.

2. How We Use Your Information

• To process your auction entries and payments.
• To notify you of draw results, whether your spot is called or not.
• To deliver prizes to winners.
• To send transactional emails (entry confirmation, winner notifications, account updates).
• To detect and prevent fraud, abuse, and unauthorized access.
• To improve the Platform and our services.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not serve advertising.

3. Third-Party Services

We use the following third-party services to operate the Platform:

• Supabase — database, authentication, and real-time infrastructure.
• Stripe — card payment processing. Stripe's privacy policy applies to card data.
• NOWPayments — cryptocurrency payment processing.
• Resend — transactional email delivery.
• Random.org — cryptographically verified random number generation for draws.
• Vercel — hosting and deployment.
• Cloudflare — DNS, DDoS protection, and security.

Each of these services has their own privacy policies. We encourage you to review them.

4. Data Retention

We retain your account data for as long as your account is active. Transaction records are retained for a minimum of 7 years for legal and accounting purposes. You may request deletion of your account and associated personal data at any time by contacting us, subject to our legal retention obligations.

5. Cookies

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but doing so may prevent you from logging in or using the Platform.

6. Security

We use industry-standard security measures including SSL/TLS encryption, row-level security on our database, and secure authentication via Supabase Auth. Passwords are never stored in plain text. However, no system is completely secure, and we cannot guarantee absolute security of your data.

7. Your Rights

Depending on your location, you may have the following rights:

• Right to access the personal data we hold about you.
• Right to correct inaccurate personal data.
• Right to request deletion of your personal data.
• Right to object to or restrict processing of your data.
• Right to data portability.

To exercise any of these rights, contact us at info@breakauctions.com.

8. Children's Privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on the Platform. Your continued use of the Platform after changes take effect constitutes your acceptance of the updated policy.

10. Contact