Overview
Divvypool (“we”, “us”, “our”) operates the website divvypool.com. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it. By using Divvypool, you agree to the practices described here.
Information we collect
We collect the following categories of information:
- Account information — your name and email address, collected when you sign up via Clerk (our authentication provider).
- Financial information — your bank account details are collected and stored directly by Stripe. We never see or store your bank account or routing numbers.
- Tax information — if required by law (earnings over $600/year), Stripe collects your tax identification information during payout setup. We do not store your SSN or EIN.
- Usage data — which offer pools you join, your join position, payout history, and bonus multipliers.
- Referral data — if you were referred by another user, we store a reference to that user to calculate referral bonuses.
How we use your information
- To create and manage your account
- To calculate and distribute monthly survey pool payouts
- To process payments via Stripe Connect
- To award bonuses, badges, and multipliers based on your activity
- To calculate referral commissions
- To send you notifications about pool openings and payouts
- To comply with tax reporting requirements (1099s are issued by Stripe)
- To improve the platform and prevent abuse
Third-party services
We use the following third-party services that may process your data:
- Clerk — handles authentication (sign-up, sign-in, session management). Clerk Privacy Policy
- Stripe — handles all payment processing, bank connections, and tax compliance. Stripe Privacy Policy
- Supabase — hosts our database (user profiles, pool entries, payout history). Data is stored in the United States.
- CPX Research — our survey partner that provides offer content and pays per completion. Survey responses are governed by CPX Research's privacy policy.
- Vercel — hosts our web application. Standard server logs (IP addresses, request metadata) may be retained.
Data sharing
We do not sell your personal information. We do not share your data with advertisers. We only share data with the third-party services listed above as necessary to operate the platform, and with legal authorities if required by law.
Data retention
We retain your account data for as long as your account is active. Payout and tax records are retained for a minimum of 7 years as required by US tax law. You may request deletion of your account at any time (see “Your rights” below), though tax records may be retained regardless.
Cookies
We use cookies and browser storage solely for authentication (managed by Clerk) and to remember your referral source if you arrived via an invite link. We do not use advertising or tracking cookies.
Your rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate data
- Deletion — request that we delete your account and associated data (subject to legal retention requirements)
- Portability — request your data in a machine-readable format
To exercise any of these rights, email us at support@divvypool.com.
Children
Divvypool is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will remove it promptly.
Security
We use industry-standard security practices including encrypted connections (HTTPS), secure authentication via Clerk, and row-level security on our database. Financial data is handled entirely by Stripe and never passes through our servers.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of Divvypool after changes constitutes acceptance of the updated policy.