Privacy policy

Effective 2026-09-27

Draft for legal review. This text was prepared as a starting point and is not legal advice. Have a qualified lawyer review it for your company and the countries you operate in before relying on it.

Crosstab is operated by Vibe Intelligence ("we"). This policy explains what we collect when you use crosstab.vote and our emails, notifications and messages.

What we collect

Account: your email address, and your name if you sign in with Google.
Alert settings: frequency, topics, states, watched races, and the channels you choose.
WhatsApp (optional): your phone number and the date you agreed to WhatsApp alerts.
Push notifications (optional): a technical address for your device provided by your browser.
Subscription: plan and status. Payment details are collected and stored by Paddle, not by us.
On your device: your theme, watchlist and which notifications you've seen are stored in your browser.
Usage: privacy-friendly, cookie-free page statistics (Cloudflare Web Analytics), if enabled.

How we use it

To provide the app, send the alerts you ask for, run Pro subscriptions, keep the service secure, and understand overall usage. We don't sell your personal information and don't use it for advertising.

Service providers

Supabase (accounts and database), Cloudflare (hosting), Resend (email), Paddle (payments, as merchant of record), Meta (WhatsApp messages, if you opt in), and your browser's push service. They process data on our behalf under their own security and privacy commitments.

Your choices and rights

Change or pause alerts in the app; unsubscribe from any email in one click; reply STOP to WhatsApp messages; turn off notifications in your device settings. You can ask us to access, correct, export or delete your data at [contact email]. Depending on where you live (for example the EU/UK under the GDPR, California under the CCPA/CPRA, or Kenya under the Data Protection Act, 2019) you may have additional rights, including to complain to a data protection authority.

Retention

We keep account data while your account is active and delete it within 30 days of a deletion request, except records we must keep for legal or tax reasons.

Children

Crosstab isn't directed to children under 16, and we don't knowingly collect their data.

International transfers and security

Our providers may process data in the United States and other countries, with appropriate safeguards. Data is encrypted in transit and access is restricted by account.

Changes and contact

We'll post updates here and notify account holders of material changes. Questions: [contact email].