Privacy Policy
Prophecy (“Service”) processes personal data to operate points markets, AI tools, and subscriptions. This is a first-pass notice — not a substitute for counsel, especially under GDPR/UK GDPR.
최종 개정: July 23, 2026
본 문서는 Prophecy 서비스 운영을 위한 1차 정책입니다. 관할·사업 형태에 따라 법무·개인정보 담당 검토를 받은 뒤 공개·개정하세요. 문의: security.txt
1. Data we process
- Account: email, display name, auth provider (Google, email, wallet address).
- Usage: predictions, market creation, point ledger, AI quota, AI consent timestamp, API meter.
- Billing (Pro): Stripe customer/subscription IDs. Card details stay with Stripe.
- Notifications: email preference flags; Resend delivery when configured.
- Channel links (optional): Discord/Telegram identifiers.
- Technical: IP/country headers (geo soft gates), device logs, error telemetry (e.g. Sentry when configured).
2. Purposes
- Authenticate users and run points markets
- Provide AI tools with quotas and consent checks
- Process Pro subscriptions via Stripe
- Send market closed/resolved emails when enabled
- Enforce soft jurisdiction and age policies
- Security, abuse prevention, and product quality
3. Retention
We retain data while your account is active and as needed for disputes, security, and legal obligations. Ledgers and audit logs may be kept longer for integrity.
4. Processors
- Supabase — auth & database
- Vercel — hosting
- Stripe — subscriptions
- Resend — transactional email (optional)
- OpenAI — AI completions (optional)
5. Your rights
Depending on your location, you may request access, correction, deletion, or restriction. Contact the address in security.txt / support email. EU/UK users may have additional GDPR rights.
6. Cookies & local storage
Supabase session cookies, age-gate cookie (`prophecy_age_ok`), onboarding flags in localStorage, and optional PWA caches may be used.
7. AI inputs
Do not submit government IDs, payment credentials, or others’ personal data into AI tools. Outputs are informational, not legal, investment, or gambling advice.