1. Who We Are

Pregame is operated by Polsia, Inc. ("we," "us," or "our"). Our service is available at pregame.io. Questions about this policy? Email us at hello@pregame.io.

2. Information We Collect

We collect information you provide directly and information generated by your use of the service:

• Account information: Email address, name, and company name when you sign up.
• Meeting data: Meeting titles, attendee names and emails, company names, meeting times, and notes you enter to generate briefs.
• CRM data: If you connect HubSpot or Salesforce, we access contact records, deal history, and meeting notes for the specific attendees in your meeting — solely to enrich your brief. We do not store bulk CRM exports.
• Calendar data: If you connect Google Calendar or Outlook, we read your upcoming meetings to enable auto-readiness. We do not access or store historical calendar data beyond what is needed to generate a brief.
• Payment information: When you purchase a plan, your payment is processed by Stripe. We do not store your card number or billing details — only your plan tier, purchase amount, and a Stripe session ID for confirmation purposes.
• Usage data: Pages visited, features used, brief generation events, and session identifiers. IP addresses are stored as one-way SHA-256 hashes — we cannot reverse them to identify you.

3. How We Use Your Information

• To generate meeting readiness briefs on your behalf.
• To sync debrief notes and follow-up actions back to your connected CRM (Salesforce or HubSpot), if you have CRM write permissions enabled.
• To send transactional emails: welcome messages, auto-readiness delivery, payment confirmations, and product onboarding sequences.
• To detect and prevent fraud, abuse, and unauthorized access.
• To analyze aggregate usage patterns and improve the product.

4. Payment Processing

All payments are processed by Stripe, Inc. Pregame does not store credit card numbers, CVV codes, or full card details. Stripe's privacy policy governs how your payment information is handled: stripe.com/privacy.

5. Cookies and Analytics

We use the following tracking technologies:

• Session cookies: Functional cookies that keep you logged in. These are required for the service to work.
• Analytics: We log page visits, signup events, and feature usage to our own database using hashed IP addresses. No third-party analytics scripts are used for internal reporting.
• Meta Pixel (ID: 924107127087246): We use the Meta Pixel on our landing page and app to measure ad campaign effectiveness (signups, purchases). Meta may receive your email as a hashed signal when you complete a purchase. You can opt out via Meta's privacy settings.

6. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe — payment processing (governed by Stripe's privacy policy)
• OpenAI — meeting context sent to generate your meeting intelligence brief (governed by OpenAI's privacy policy)
• Postmark — transactional email delivery (governed by Postmark's privacy policy)
• Your connected integrations — data is shared only with services you explicitly connect via OAuth (Google Calendar, Microsoft Outlook, HubSpot, Salesforce, Apollo, Instantly, Calendly, Slack, Pipedrive, Close CRM, Cal.com). We only request access to the data needed to deliver your meeting brief. You can disconnect any integration at any time.
• Law enforcement — if required by valid legal process

7. Data Retention

We retain your account data and generated briefs for as long as your account is active. If you delete your account, your personal information and meeting history are deleted within 30 days, except where retention is required by law or for fraud prevention.

Hashed analytics events (no direct identifiers) may be retained for up to 2 years for aggregate reporting.

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate data be corrected.
• Deletion: Request that your account and associated data be deleted.
• Portability: Request an export of your meeting briefs and account data.
• Objection: Opt out of marketing emails at any time using the unsubscribe link in any email we send.

To exercise any of these rights, email hello@pregame.io. We will respond within 30 days.

For EU/UK residents (GDPR): Pregame processes personal data under a legitimate interest basis for CRM enrichment and a contractual basis for account management. You have the right to lodge a complaint with your local data protection authority if you believe our processing violates GDPR.

For California residents (CCPA/CPRA): We do not sell your personal information. You have the right to know what data we collect, request deletion, and opt out of the sale of your information. Email hello@pregame.io to exercise these rights.

9. Data Security

We use HTTPS (TLS 1.2+) for all data in transit. OAuth tokens for connected integrations (Google Calendar, Microsoft Outlook, HubSpot, Salesforce, Slack, and all other supported integrations) are encrypted at rest using AES-256-GCM. Database access is restricted to application-layer queries with parameterized statements — no raw SQL injection surface.

Security vulnerabilities can be reported to security@pregame.io. We aim to acknowledge reports within 48 hours and resolve critical issues within 30 days.

10. Children's Privacy

Pregame is a B2B product intended for use by professionals. We do not knowingly collect data from anyone under 16 years of age. If you believe we have inadvertently collected such data, contact us immediately at hello@pregame.io.

11. Changes to This Policy

If we make material changes to this policy, we will notify active users by email at least 7 days before changes take effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy questions, data requests, or concerns: hello@pregame.io

13. Marketplace Compliance

Pregame is listed on the Salesforce AppExchange and HubSpot Marketplace. Both platforms require that apps disclose their privacy practices in detail. This policy is the authoritative document for those listings.

If you are a Salesforce or HubSpot customer evaluating Pregame through their marketplace:

• Pregame accesses your CRM data only when you explicitly connect your account via OAuth and only for the specific records associated with meetings you create in Pregame.
• Pregame does not store bulk exports of your CRM data.
• Pregame does not share your CRM data with any third party except the AI model (OpenAI) used to generate your meeting brief, and Postmark for email delivery.
• You retain full control over the connection and can revoke Pregame's access at any time from your Salesforce or HubSpot settings.

For Salesforce security review questions, contact security@pregame.io.