FantasyCaster (“FantasyCaster,” “we,” “us,” or “our”) operates a mobile, subscription-based fantasy-sports media service that turns your own fantasy-football league results into a personalized, narrated weekly audio documentary with shareable highlights (the “Service”). This Policy applies to our app and website, and to data we obtain when you connect a fantasy platform such as Yahoo Fantasy, Sleeper, or Fantrax. By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Who we are

FantasyCaster is responsible for your information (the “data controller”). You can reach us any time at developer@fantasycaster.ai.

2. Information we collect

• Account & authentication. Your name, email address, and an account identifier from Google or Microsoft single sign-on (SSO). We never receive your SSO password.
• Fantasy league data. With your authorization, the leagues, teams, rosters, players, weekly matchups and scores, standings, and transactions in the league(s) you connect, plus the team and manager display names in that league.
• Payment information. Subscription status and plan, and the card brand and last four digits. Full card details are handled by Stripe, not stored by us.
• Usage, device & log data. App and episode interactions, device and app version, IP address, and diagnostic logs.
• Communications. Messages and contact details when you reach out to support.

We do not intentionally collect special categories of sensitive personal data, and we ask that you not provide any. We do not use your information for cross-context behavioral advertising.

3. How we use your information

We use your information to: create, personalize, and deliver your weekly audio episodes and clips; authenticate you and manage your account and subscription; process payments and prevent fraud (via Stripe); provide support; operate, secure, monitor, debug, and improve the Service; send service-related notifications (for example, when a new episode is ready); and comply with legal obligations and enforce our terms.

Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (to provide the Service); your consent (to connect a fantasy platform and for optional communications, withdrawable at any time); our legitimate interests (to secure, debug, and improve the Service and prevent fraud); and compliance with our legal obligations. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

4. Yahoo Fantasy Sports data

We access Yahoo Fantasy Sports data only through Yahoo’s official Fantasy Sports API, under your own authorization, and we handle it as follows:

• You authorize access; it is read-only. You connect your own Yahoo league(s) through Yahoo’s OAuth 2.0 consent screen. We request read-only access (scope fspt-r) and never write to, modify, or manage your Yahoo account or leagues. Yahoo is never used to log in to FantasyCaster.
• What we read. Leagues, teams, players, weekly matchups and scores, standings, and transactions for the league(s) you connect.
• What we store. The derived statistics we compute (such as scores, standings, and historical “Record Book” statistics), together with the team and manager display names shown in your league, used only as labels to narrate your episodes. These display names are labels, not Yahoo Global Unique Identifiers (GUIDs) or Yahoo account records. We do not store Yahoo GUIDs or Yahoo account records: raw Yahoo API responses are used only transiently to compute the derived data and are deleted within 24 hours of retrieval. We never store your Yahoo password (we never receive it).
• Access tokens. Your Yahoo OAuth tokens are encrypted at rest using AES-256 and are used solely to perform the authorized read on your behalf.
• Record Book retention. We retain multi-season derived statistics to power the Record Book where permitted by the applicable platform; anything we are not permitted to retain is deleted within 24 hours and re-derived from each weekly update.
• Deletion. We delete your Yahoo-derived data when you disconnect Yahoo, close your account, or request deletion, and upon Yahoo’s request.
• Attribution. Where we display Yahoo-sourced information, we credit “Fantasy data provided by Yahoo Fantasy,” linking back to Yahoo Fantasy.

The same principles apply to other platforms you connect: Sleeper data is read via Sleeper’s public, read-only API, and Fantrax data comes from league export files you upload yourself.

5. How we share your information

We use vetted service providers (“subprocessors”) that process data on our behalf, under contract, only as needed to run the Service:

• Audio rendering provider. Synthesizes the narrated audio for your episode. It receives derived narrative text only, which may include the team/manager display names used in narration — never Yahoo GUIDs or account records.
• Stripe. Payment processing and subscription billing.
• Supabase. Database and file storage hosting (data encrypted where applicable).
• Cloud hosting & infrastructure providers. Application hosting, compute, and delivery.
• Google & Microsoft. Single sign-on authentication.

Our audio rendering step receives only our own derived narrative text. That text may include the team and manager display names needed to narrate your episode; these are included only under your authorization and are disclosed here. We never send Yahoo GUIDs or Yahoo account records to the rendering provider or to any other third party.

We may also disclose information if required by law or legal process; to protect the rights, safety, or property of FantasyCaster, our users, or the public; or in connection with a merger, acquisition, or sale of assets (in which case we will honor the commitments in this Policy). When you share a clip or episode, you choose where it goes.

6. We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA) and similar laws. We have not done so in the preceding 12 months. We also do not share Yahoo GUIDs or Yahoo account records with any third party.

7. Data retention

We keep personal information only as long as necessary for the purposes in this Policy, including to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Yahoo-derived data is retained and deleted as described in Section 4. When data is no longer needed, we delete or de-identify it.

8. Security

We use technical and organizational measures appropriate to the risk, including encryption of sensitive data at rest (for example, AES-256 encryption of fantasy-platform OAuth tokens), encryption in transit (HTTPS), access controls, and monitoring. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address issues.

9.Your rights & choices

Depending on where you live, you may have rights to: access the personal information we hold about you; correct inaccurate information; delete your information; receive a portable copy; restrict or object to certain processing; withdraw consent (including by disconnecting a fantasy platform); opt out of any sale or sharing of personal information (we do neither); and be free from discrimination for exercising your rights.

How to exercise your rights. Email developer@fantasycaster.ai. We will verify your request (and honor requests from an authorized agent) and respond within the timeframe required by applicable law — generally within 30 days under the GDPR/UK GDPR and within 45 days under the CCPA/CPRA, with extensions where permitted. You may also lodge a complaint with your local data protection authority.

10. Managing and deleting your data

• Disconnect a fantasy platform at any time in the Service. Disconnecting Yahoo stops further reads and deletes your Yahoo-derived data as described in Section 4.
• Delete your account in the Service or by contacting us; we will delete or de-identify your personal information, subject to limited legal retention requirements.

11. International data transfers

We may process and store information in countries other than where you live, including the United States. Where required, we use appropriate safeguards for international transfers (such as the European Commission’s Standard Contractual Clauses) to protect your information.

12. Children’s privacy

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

13. Cookies and similar technologies

Our website and app use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser or device settings; some features may not work without them. Because we do not track you across third-party sites for advertising, we do not respond differently to browser “Do Not Track” signals at this time.

14. Third-party services

The Service integrates with third-party services (such as Yahoo, Sleeper, Fantrax, Google, Microsoft, and Stripe). Their handling of your information is governed by their own privacy policies, which we encourage you to review.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, where required, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

16. Contact us

Questions, requests, or complaints about this Policy or your information: