Privacy Policy

Who We Are

Picked (getpicked.co) is a marketplace that connects semi-professional basketball players with teams across Europe. When we say "we," "us," or "Picked," we mean the team behind getpicked.co.

What Data We Collect

We collect only what's needed to run the platform:

• Account info — email address and password (hashed, we never see it in plain text)
• Profile info — name, country, city, role (player or team)
• Player data — positions, stats (PPG, APG, RPG, etc.), height, weight, experience, highlights link, previous teams
• Team data — team name, league, tier, open positions, description, season record
• Messages — conversations between players and teams on the platform
• Usage data — basic analytics (page views, device type) via Vercel Analytics, no personal identifiers

How We Use Your Data

• Display your profile to teams or players searching on the platform
• Enable messaging between players and teams
• Send transactional emails (signup confirmation, password reset, tryout invitations)
• Improve the platform based on aggregate usage patterns

We do not sell your data. We do not show ads. Your profile data exists to connect you with basketball opportunities — that's it.

Data Storage

Your data is stored securely on Supabase (hosted on AWS infrastructure in the EU). Passwords are hashed using bcrypt. All connections use HTTPS/TLS encryption.

Cookies

We use essential cookies only — specifically, authentication session cookies that keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party cookie-based analytics.

Third-Party Services

We use a small number of trusted services to run Picked:

• Supabase — database, authentication, and real-time messaging
• Vercel — hosting and privacy-friendly analytics (no personal data collected)
• Resend — transactional emails (signup confirmations, password resets)

None of these services receive your data for advertising or profiling purposes.

Your Rights (GDPR)

If you're in the EU/EEA, you have the right to:

• Access — request a copy of all data we hold about you
• Rectify — correct any inaccurate data via your profile settings
• Delete — request permanent deletion of your account and all associated data
• Export — request a portable copy of your data
• Object — object to processing of your data

To exercise any of these rights, email us at privacy@getpicked.co. We'll respond within 30 days.

Data Retention

We keep your data for as long as your account is active. If you delete your account, we remove all your personal data within 30 days. Anonymized, aggregate analytics data may be retained indefinitely.

Children

Picked is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we'll remove it.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we'll notify you via email or a notice on the platform. The "last updated" date at the top always reflects the latest version.

Contact

Questions about your privacy? Reach out at privacy@getpicked.co.