1. Introduction

GiveawayPicker ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our website and services at giveawaypicker.com ("Service").

2. Information We Collect

2a. Information You Provide

• Account information: Email address and password when you sign up
• Payment information: Processed securely by Stripe. We do not store your credit card number, CVC, or full card details on our servers
• Giveaway inputs: Instagram post URLs, giveaway settings (number of winners, follow requirements, tag requirements)

2b. Information We Process from Instagram

When you run a giveaway, we temporarily process publicly available Instagram data to determine winners:

• Comment data: Usernames, comment text, and user IDs from public Instagram posts
• Follow status: Whether a commenter follows specified accounts (public information)
• Like status: Whether a commenter liked the post (public information)
• Profile pictures: Publicly available profile picture URLs for winner cards

This data is processed solely to run your giveaway and generate results. We access only publicly available data — we never access private accounts, direct messages, or non-public information.

2c. Information Collected Automatically

• Session cookies: To keep you logged in and maintain your session
• Basic analytics: Page views, browser type, and device type to improve the Service

3. How We Use Your Information

• To provide the Service: Processing giveaways, selecting winners, generating winner cards and CSV reports
• To manage your account: Authentication, billing, and subscription management
• To process payments: Sending payment details securely to Stripe
• To communicate with you: Account notifications, service updates, and support responses
• To improve the Service: Understanding usage patterns and fixing issues

4. What We Do NOT Do

• We do not sell your personal information to third parties
• We do not share Instagram user data with anyone other than you (the giveaway host)
• We do not use giveaway data for advertising or marketing purposes
• We do not build profiles of Instagram users across giveaways
• We do not contact giveaway participants

5. Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request
• Giveaway results: Stored so you can access your giveaway history. You may request deletion at any time
• Payment records: Retained as required by law for tax and accounting purposes (typically 7 years)
• Raw comment data: Processed temporarily during giveaway execution and not stored beyond what's needed for results

6. Third-Party Services

We use the following third-party services that may process your data:

Service	Purpose	Data Shared
Stripe	Payment processing	Email, payment details
Supabase	Database hosting	Account data, giveaway results
HikerAPI	Instagram data access	Instagram post URLs

Each of these services has their own privacy policies governing their use of your data.

7. Cookies

We use only essential cookies required for the Service to function:

• Session cookie: Keeps you logged in during your visit
• Stripe cookies: Required for secure payment processing

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can manage cookies through your browser settings.

8. Data Security

We take reasonable measures to protect your information, including:

• Passwords are hashed and never stored in plain text
• All data is transmitted over HTTPS (encrypted connections)
• Payment information is handled entirely by Stripe (PCI DSS compliant)
• Database access is restricted and authenticated

However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

All Users

• Access: Request a copy of the data we hold about you
• Correction: Update or correct your account information
• Deletion: Request deletion of your account and associated data
• Export: Download your giveaway data in CSV format

European Economic Area (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation:

• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with your local data protection authority

Our legal basis for processing your data is: (a) performance of a contract (providing the Service you signed up for), (b) legitimate interest (improving the Service), and (c) your consent (where applicable).

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information — we do not sell your data
• Non-discrimination for exercising your privacy rights

10. Children's Privacy

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. International Data Transfers

Your data may be processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your information to the United States.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. The "Last updated" date at the top of this page indicates when it was last revised.

13. Contact

For privacy-related questions or to exercise your rights, contact us at hello@giveawaypicker.com.