Privacy Policy

Overview

WagerWard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Email Detox tool and other services at wagerward.com.

We designed WagerWard with privacy as a core principle. We access only the minimum data necessary to help you identify and remove gambling-related emails from your inbox.

Information We Access

Gmail Data Access

When you connect your Gmail account, we request the following permissions (OAuth scopes):

What We Do NOT Access

• Full email body content
• Email attachments
• Your contacts or address book
• Draft emails
• Emails unrelated to gambling operators

Information We Store

Account Information

• Your email address (for authentication)
• OAuth access and refresh tokens (encrypted, for Gmail API access)
• Account creation date

Scan Results (Gambling Emails Only)

• Sender information (email address and display name)
• Subject lines of detected gambling emails
• Snippet previews (~200 characters, provided by Gmail)
• Email timestamps
• Detection metadata (risk level, confidence score, matched keywords, category)
• Gmail message IDs (for cleanup operations)
• Cleanup actions taken

What We Do NOT Store

• Full email body content (only the ~200 character snippet)
• Email attachments
• Any data from non-gambling emails
• CC/BCC recipients or other headers

Data Retention

• Scan results: Retained for 60 days, then automatically deleted
• Account data: Retained until you delete your account
• OAuth tokens: Retained until you disconnect your Gmail or delete your account
• Payment records: Retained as required by law for tax and accounting purposes

How We Use Your Information

• To identify gambling-related emails in your inbox
• To execute cleanup actions you request
• To improve our gambling operator detection accuracy
• To provide customer support
• To process payments (if applicable)
• To comply with legal obligations

We do NOT use your data for advertising, marketing to third parties, or any purpose unrelated to the Email Detox service.

Legal Basis for Processing

• Performance of Contract: Processing necessary to provide the Email Detox service you requested
• Consent: Via OAuth authorization when connecting your Gmail account
• Legitimate Interests: Improving detection accuracy and preventing fraud

We do not use your data for automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Third-Party Services

We use the following third-party services:

Data Security

We implement industry-standard security measures:

• All data transmitted over HTTPS/TLS encryption
• OAuth tokens encrypted at rest
• Row-Level Security (RLS) ensuring users can only access their own data
• Regular security audits and updates
• No plain-text storage of sensitive credentials

International Data Transfers

Data is stored in US data centers operated by Supabase. For EU residents, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate data protection in compliance with GDPR.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours via email
• Notify relevant authorities as required by law
• Provide details about the breach and steps you can take to protect yourself

Your Rights

You have the right to:

• Access: Request a copy of your stored data
• Correction: Request correction of inaccurate data
• Deletion: Delete your account and all associated data
• Portability: Export your data in a machine-readable format
• Revocation: Disconnect your Gmail account at any time
• Objection: Object to data processing for certain purposes

To exercise these rights, contact us at privacy@wagerward.com or use the account deletion feature in the app.

Cookies and Tracking

We use essential cookies only for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

Children's Privacy

WagerWard is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

Regional Privacy Rights

European Union Residents (GDPR)

If you are located in the European Union, you have specific rights under the General Data Protection Regulation (GDPR), including:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

All Users

Regardless of your location, we extend these privacy rights to all WagerWard users. To exercise any of these rights, contact us at privacy@wagerward.com.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting a notice on our website or sending an email. Your continued use of WagerWard after changes constitutes acceptance of the updated policy.

Google API Services User Data Policy

WagerWard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: