Privacy Policy
Effective: April 27, 2026
1. Information We Collect
We collect information you provide directly, such as your name, email address, account credentials, support requests, and billing profile details. We also collect technical and usage data automatically, including lineup activity, feature interactions, IP address, device identifiers, browser/app metadata, and crash diagnostics. We may receive data from integrations you connect (for example, third-party fantasy providers) to enable account-linked features. dfsQuest is intended for users age 18 and older.
2. How We Use Your Information
We use your information to: • Operate, maintain, and improve dfsQuest services. • Personalise projections, recommendations, and AI-generated insights. • Process subscription payments and send billing receipts. • Send transactional emails (lineup alerts, late-swap notifications). • Analyse aggregate usage patterns to improve our simulation engine. • Detect, prevent, and respond to fraud or security incidents.
3. Data Sharing & Third Parties
We do not sell your personal information for money. We may share data with service providers that process data on our behalf, including • Google Cloud Platform (hosting, storage, security, AI inference) • Firebase Authentication / messaging providers • Stripe (payment processing) • Email and notification providers • Analytics and observability providers used to measure product performance and reliability
Where required by law, we provide opt-out controls for sharing related to cross-context behavioral advertising. All processors are subject to contractual confidentiality and data protection terms.
4. Data Retention
We retain your account data for as long as your account remains active. You may request deletion at any time by contacting support@dfsquest.com. Deleted accounts are purged within 30 days, except where retention is required by law (e.g., financial records retained for 7 years). Anonymised, aggregated model-training data may be retained indefinitely.
5. Your Rights
Depending on your jurisdiction, you may have rights to access, delete, correct, restrict, object to, or port your personal data. You may also have rights to opt out of certain sharing/targeted advertising, limit sensitive data processing, and appeal denied requests. You may designate an authorized agent to submit requests where permitted by law. To exercise rights, contact support@dfsquest.com. We verify identity before completing requests and respond within legally required timelines.
6. U.S. State Privacy Rights (Including California)
Residents of certain U.S. states (including California, Virginia, Colorado, Connecticut, Utah, and others) may have additional rights under applicable law, such as rights to know categories of personal data collected, request deletion/correction, opt out of sale or sharing, and appeal denials. California residents may use a "Do Not Sell or Share My Personal Information" request through our support channel at support@dfsquest.com. We do not knowingly sell or share personal information of minors under age 16.
7. Cookies & Tracking
dfsQuest uses essential cookies for authentication and session management. We also use analytics cookies (opt-out available in Settings → Notifications). Where applicable, you may opt out of non-essential tracking via consent preferences. We recognize legally required browser privacy signals such as Global Privacy Control where required. The mobile app may use platform identifiers and diagnostics for security, analytics, and crash reporting in accordance with platform settings and permissions.
8. Data Breach Notice
If we become aware of a personal data breach affecting your information, we will investigate promptly and provide notice to affected users and regulators when required by applicable law. Timing and content of notice may vary by jurisdiction and incident severity.
9. Security
All data in transit is encrypted with TLS 1.3. Data at rest is encrypted using AES-256 on Google Cloud Storage and Cloud SQL. Access to production systems is restricted by IAM roles and requires multi-factor authentication. We conduct periodic security audits and vulnerability assessments. Despite these measures, no system is completely secure; we cannot guarantee absolute security.
10. Children's Privacy
dfsQuest is intended for users 18 years of age or older. We do not knowingly collect personal data from minors. If we become aware that a user under 18 has registered, we will promptly delete their account and associated data. We do not knowingly collect personal information from children under 13 in a manner requiring parental consent under COPPA.
11. International Transfers
dfsQuest is operated from the United States. If you access the service from outside the US, your data may be transferred to, and processed in, the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses, adequacy mechanisms, or other lawful transfer tools.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app banner at least 14 days before the change takes effect. Continued use of the service after the effective date constitutes acceptance of the revised policy.
13. Contact Us
Questions or concerns about this Privacy Policy? Email: support@dfsquest.com Mailing address: dfsQuest, LLC · 964 High House Road, Unit #4542, Cary, NC 27513