Privacy Policy

Fantasy Butler ("we", "us", "our") is operated by Mike Yan. This policy explains what data we collect when you interact with fantasybutler.com, how we use it, and the rights you have over it.

If anything here is unclear, email us at hello@fantasybutler.com.

1. What We Collect

Information you give us directly:

• Waitlist signup: your email address and the sport(s) you select.
• Account information (when paid accounts launch): your email, payment information processed through Stripe, and the fantasy-platform credentials you grant through OAuth.
• Anything you send us: if you email us, we keep your message so we can respond.

Information collected automatically:

• Usage and behavior: PostHog records pages you visit, buttons you click, and form interactions. PostHog also records session replays, which are anonymized recordings that help us diagnose UX issues. Sensitive form fields are masked by default.
• Standard analytics: Google Analytics 4 records pageviews, referral source, and aggregate traffic patterns.
• Performance telemetry: Vercel Speed Insights records page-load metrics.
• Server logs: when you submit the waitlist form, we hash your IP address for rate limiting and discard the raw IP after the request.

2. How We Use This Information

• Run the service. Deliver the website, process waitlist signups, and deliver paid features at launch.
• Improve the product. Understand which content is useful, where the funnel drops off, and which features need work.
• Communicate with you. Confirm waitlist signups, send launch updates, and respond to inquiries.
• Detect abuse. Rate-limit bots and block automated form submissions.

We do not sell your personal information. We do not share it with advertisers. We do not train AI models on your personal data.

3. Legal Basis (GDPR)

If you are in the EU or UK, we process your data under GDPR Article 6 using the following lawful bases:

• Consent for marketing emails and non-essential analytics.
• Contract to deliver the service you signed up for.
• Legitimate interest for rate limiting, security, fraud detection, and product analytics.

You can withdraw consent at any time by emailing hello@fantasybutler.com.

4. Who We Share Data With

We do not sell data. We do not enable advertising tracking. Each service above operates under its own privacy policy.

5. Cookies

Fantasy Butler uses cookies and similar technologies to make the site work and to understand how it is used. See the Cookie Policy for details and opt-out instructions.

6. Data Retention

• Waitlist signups: retained until you unsubscribe or request deletion.
• Account data (post-launch): retained while your account is active, plus 90 days after deletion for fraud prevention and dispute resolution.
• Analytics: PostHog retains event data for 7 years on its default plan; we will tighten retention before paid accounts launch. GA4 retains data for 14 months.
• Server logs: raw IPs are discarded after each request; hashed IPs for rate limiting expire within 24 hours.

7. Your Rights

Depending on where you live, you have rights over your data.

Everyone:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data, subject to legal retention requirements.
• Export your data in a portable format.

EU / UK (GDPR): rights above plus the right to lodge a complaint with your local data protection authority.

California (CCPA):

• Right to know what we have collected.
• Right to delete (CCPA Section 1798.105).
• Right to opt out of "sale" of personal information. We do not sell, but you can confirm this in writing.
• Right to non-discrimination for exercising these rights.

To exercise any of these rights, email hello@fantasybutler.com. We respond within 30 days.

8. International Transfers

Our infrastructure is hosted in the United States. If you access Fantasy Butler from outside the US, your data is processed in the US. By using the service you understand and consent to this.

9. Children's Privacy

Fantasy Butler is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, email hello@fantasybutler.com and we will delete it.

10. Data Security

We follow industry-standard practices to protect your data: TLS encryption in transit, encryption at rest with our infrastructure provider, Vercel, and limited internal access. See our Security section for more.

We will notify affected users without undue delay if we discover a breach of personal data, consistent with applicable law.

11. Changes to This Policy

We may update this policy as the product evolves. Material changes will be announced through the email you provided. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Fantasy Butler
447 Sutter St, Ste 506-1269
San Francisco, CA 94108
hello@fantasybutler.com