BREADBASKET
Privacy Policy
1. Introduction
Breadbasket Sports ("Breadbasket," "we," "us," or "our") operates an AI-powered sports intelligence platform that researches NFL news, generates fantasy and betting insights, produces video content, and publishes to social platforms.
This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website at breadbasketsports.com, applications, APIs, and connected social platform integrations.
2. Information we collect
Information you provide: account registration, beta signup, support requests, and OAuth authorization when connecting TikTok, Instagram (Meta), or other platforms.
Information collected automatically: usage logs, device and browser metadata, cookies on our website, and aggregate analytics to improve the Service.
Information from third parties: social platform APIs (TikTok, Meta/Instagram) when you authorize publishing; AI providers (OpenRouter, OpenAI) for content generation; public NFL/news sources for research.
3. How we use information
We use information to operate and improve the platform, generate content, publish to platforms you authorize, maintain security, send service updates, comply with legal obligations, and analyze aggregate performance. We do not sell personal information.
4. Sharing and disclosure
We may share information with service providers that help us operate the Service:
- Supabase — database and file storage
- OpenRouter / OpenAI — AI content generation (prompt metadata only; no unnecessary personal data)
- Cloudflare — website hosting, CDN, and security
- TikTok — publishing you authorize via OAuth
- Meta (Instagram / Facebook) — publishing you authorize via OAuth
- Legal authorities — when required by law
5. OAuth and social integrations
When you connect TikTok or Meta (Instagram), we store OAuth access and refresh tokens server-side only. Tokens are used solely to publish content within scopes you grant. You may revoke access through the platform or by contacting us.
6. Cookies and analytics
Our static website may use essential cookies for basic functionality. We may use privacy-respecting analytics to understand aggregate traffic. No third-party advertising trackers are used on breadbasketsports.com.
7. Data retention
Account data is retained while your account is active. OAuth tokens are retained until disconnect or expiry. Logs are typically retained 30–90 days unless longer retention is required for security.
8. Security
We use encryption in transit (TLS/HTTPS), access controls, and server-side secret management. Our website is served via Cloudflare Pages with security headers configured.
9. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data. See our Data Deletion page or contact us to exercise these rights.
10. Children's privacy
Our service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect data from children.
11. Changes
We may update this policy. Material changes will be posted on this page with an updated effective date.
12. Contact
Breadbasket Sports
Email: [email protected]
General inquiries: [email protected]