Privacy Policy

1. Information We Collect

Personal Information You Provide

We collect information that you voluntarily provide when you register for an account, enter a giveaway, make a purchase, subscribe to Pro Membership, contact us, or otherwise interact with the Service:

• Full legal name
• Email address
• Phone number
• Mailing address (for winner verification and prize fulfillment)
• Date of birth (for age and eligibility verification)
• Account credentials (username and password, stored in hashed form)
• Payment information (credit/debit card details, processed securely by our third-party payment processor Stripe; SweepsMarket does not store full card numbers)
• Government-issued identification (for winner verification only, when required)
• Social Security Number or Taxpayer Identification Number (for winners only, for tax reporting purposes as required by the Sponsor)
• Profile photo (optional)
• Communication preferences

Information Collected Automatically

When you access or use the Service, we automatically collect certain technical and usage information:

• IP address and approximate geolocation (city/region level)
• Browser type, version, and language
• Device type, operating system, and screen resolution
• Unique device identifiers and device fingerprint data
• Pages visited, time spent on pages, and navigation paths
• Referring URLs and exit pages
• Click patterns and interaction data
• Giveaway entry history, including entry methods used
• Product viewing and purchase history
• Search queries within the platform
• Date and time of access

Cookies and Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with the Service. For detailed information, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Operations

• Operate, maintain, and improve the SweepsMarket platform
• Process giveaway entries and maintain entry records
• Facilitate winner verification by the Sponsor and their licensed third-party sweepstakes administrator
• Process payments for Pro Membership subscriptions
• Facilitate product purchases between Users and Sponsors
• Provide customer support and respond to inquiries

Lead Generation

• Share your contact information with Sponsors whose giveaways you enter (this is a core function of the platform; see Section 4 for details)
• Facilitate marketing communications between Sponsors and Users

Communications

• Send transactional emails (entry confirmations, winner notifications, account updates, purchase receipts)
• Send marketing communications from SweepsMarket (with your consent; you may opt out at any time)
• Send platform announcements, policy updates, and security alerts

Security and Fraud Prevention

• Detect, prevent, and investigate fraud, abuse, and unauthorized access
• Enforce our Terms of Service and Acceptable Use Policy
• Monitor for multiple accounts, bot activity, and coordinated manipulation
• Verify user identity and eligibility

Analytics and Improvement

• Analyze usage patterns and trends to improve the Service
• Conduct A/B testing and measure feature effectiveness
• Generate aggregated, de-identified analytics and reports
• Comply with legal obligations, regulatory requirements, and lawful government requests

3. Information Sharing

We may share your information in the following circumstances:

With Business Sponsors (Lead Generation)

When you enter a giveaway, your contact information is shared with the Sponsor of that giveaway. This is described in detail in Section 4 below.

With Third-Party Sweepstakes Administrators

Your entry data and personal information may be shared with the licensed third-party sweepstakes administration company retained by the Sponsor to conduct the random drawing, verify winner eligibility, and administer the sweepstakes in compliance with applicable law.

With Service Providers

We share data with trusted third-party service providers who help us operate the Service, including but not limited to: hosting providers, payment processors, email delivery services, analytics providers, customer support tools, and fraud prevention services. These providers are contractually obligated to use your data only for the purposes of providing services to SweepsMarket and to maintain appropriate security measures.

For Legal Compliance

We may disclose your information if required to do so by law, regulation, legal process, subpoena, court order, or government request, or if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law or legal obligations; (b) protect the rights, property, or safety of SweepsMarket, our Users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our Terms of Service.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, your information may be transferred as part of the transaction. We will notify you of any such transfer and any choices you may have regarding your information.

4. Data Shared with Business Sponsors

SweepsMarket operates as a lead generation platform. When you enter a giveaway on the SweepsMarket platform, the following personal information is shared with the Sponsor (the business that created the giveaway):

• Full name
• Email address
• Phone number

This information is shared for the Sponsor's marketing and promotional purposes. This data sharing is how SweepsMarket operates: Sponsors pay SweepsMarket $2.00 per qualified lead (verified giveaway entry), and in exchange they receive your contact information for their marketing activities.

By entering a giveaway, you expressly consent to this data sharing. If you do not wish to have your contact information shared with a Sponsor, do not enter that Sponsor's giveaway.

Once your information is shared with a Sponsor, the Sponsor's use, storage, and protection of your data is governed by the Sponsor's own privacy policy, not this SweepsMarket Privacy Policy. SweepsMarket is not responsible for how Sponsors use, store, or protect your personal information after it has been shared.

You may manage your communication preferences and opt out of future marketing communications from specific Sponsors through your SweepsMarket account settings, by contacting the Sponsor directly, or by using the unsubscribe mechanism provided in the Sponsor's communications.

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage, deliver targeted content, and prevent fraud. The types of tracking technologies we use include:

• Cookies — Small text files stored on your device
• Web Beacons — Transparent images used to track page views and email opens
• Pixel Tags — Code snippets used for analytics and advertising measurement
• Local Storage — Browser-based storage for functional preferences
• Device Fingerprinting — Technical data used for fraud prevention and security

For detailed information about the specific cookies we use, their purposes, durations, and how to manage your cookie preferences, please see our Cookie Policy.

6. Third-Party Services

SweepsMarket integrates with the following categories of third-party services:

• Supabase — Authentication, database, and backend services
• Vercel — Website hosting, deployment, and analytics
• Shopify — Product catalog and e-commerce integration for Sponsors
• Stripe — Payment processing for Pro Membership and product purchases
• Email Service Providers — Transactional and marketing email delivery
• Analytics Providers — Usage analytics, performance monitoring, and error tracking
• Fraud Prevention Services — Identity verification, device fingerprinting, and abuse detection
• Social Media Platforms — Social login integrations and sharing features (if applicable)

Each third-party service has its own privacy policy governing the use of your data. We encourage you to review their policies. SweepsMarket is not responsible for the privacy practices of third-party services. We select service providers that maintain appropriate data security and privacy standards.

7. Your Rights

Depending on your location, you may have some or all of the following rights regarding your personal data:

• Right to Access — Request a copy of the personal data we hold about you, including information about how it has been used and shared
• Right to Correction — Request correction of inaccurate or incomplete personal data
• Right to Deletion — Request deletion of your personal data, subject to certain legal exceptions (e.g., data we are required to retain for legal compliance)
• Right to Portability — Request your data in a structured, commonly used, machine-readable format
• Right to Opt-Out — Opt out of marketing communications at any time; opt out of the sale or sharing of your personal data (see CCPA section below)
• Right to Restrict Processing — Request that we limit how we use your data in certain circumstances
• Right to Object — Object to processing of your personal data based on legitimate interest
• Right to Non-Discrimination — You will not receive discriminatory treatment for exercising any of your privacy rights

To exercise any of these rights, contact us at privacy@sweepsmarket.com. We will respond to your request within thirty (30) days or as required by applicable law. We may need to verify your identity before processing your request.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know

You have the right to request that we disclose: (a) the categories of personal information we have collected about you; (b) the categories of sources from which personal information is collected; (c) the business or commercial purpose for collecting or selling personal information; (d) the categories of third parties with whom we share personal information; and (e) the specific pieces of personal information we have collected about you.

Right to Delete

You have the right to request that we delete your personal information, subject to certain exceptions allowed under the CCPA (e.g., information needed to complete a transaction, detect security incidents, or comply with legal obligations).

Right to Opt-Out of Sale/Sharing

SweepsMarket shares user contact information (name, email, phone number) with business Sponsors when users enter giveaways. Under the CCPA, this may constitute a "sale" or "sharing" of personal information. You have the right to opt out of this sale/sharing. To exercise this right:

• Email us at privacy@sweepsmarket.com with the subject line "Do Not Sell My Personal Information"
• Adjust your data sharing preferences in your SweepsMarket account settings

Please note that if you opt out of data sharing with Sponsors, you will not be able to enter giveaways on the platform, as the lead generation data sharing is integral to giveaway participation.

Right to Correct

You have the right to request correction of inaccurate personal information.

Right to Limit Use of Sensitive Personal Information

To the extent we collect sensitive personal information (such as Social Security Numbers for winner tax reporting), we use it only for purposes permitted under the CCPA. You may request that we limit the use of your sensitive personal information.

Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information as defined by the CCPA: identifiers (name, email, phone, IP address); personal information categories listed in Cal. Civ. Code 1798.80(e); commercial information (purchase history, giveaway entries); internet or electronic network activity information (browsing history, interaction data); geolocation data (approximate location from IP); and inferences drawn from the above.

Authorized Agent

You may designate an authorized agent to make requests on your behalf. To do so, you must provide the authorized agent with written permission and verify your identity directly with us.

9. European Privacy Rights (GDPR)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and applicable local law:

• Legal Basis for Processing. We process your personal data based on: (a) your consent (for marketing communications and non-essential cookies); (b) contractual necessity (to provide the Service and process giveaway entries); (c) legitimate interest (for fraud prevention, analytics, and platform improvement); and (d) legal obligation (for tax and regulatory compliance).
• Data Transfers. Your personal data may be transferred to and processed in the United States, where our servers and service providers are located. We implement appropriate safeguards for such transfers, including Standard Contractual Clauses approved by the European Commission.
• Withdrawal of Consent. Where we rely on your consent for processing, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint. You have the right to lodge a complaint with your local data protection supervisory authority.
• Data Protection Officer. For GDPR-related inquiries, contact us at privacy@sweepsmarket.com.

Note: The SweepsMarket platform currently serves legal residents of the United States. If you access the Service from outside the United States, you do so at your own risk and are responsible for compliance with local laws.

10. Data Retention

We retain your personal data in accordance with the following schedule:

• Account data — Retained for as long as your account is active, plus thirty (30) days after account deletion to process the deletion request
• Giveaway entry records — Retained for a minimum of three (3) years after the giveaway conclusion for compliance, audit, and dispute resolution purposes
• Transaction records — Retained for a minimum of seven (7) years for tax and financial compliance
• Winner records — Retained for a minimum of seven (7) years for tax reporting and legal compliance
• Marketing consent records — Retained for as long as you are subscribed, plus three (3) years
• Server logs — Retained for ninety (90) days
• Fraud investigation records — Retained indefinitely to prevent repeat offenders from creating new accounts

When you delete your account, we will remove or anonymize your personal data within thirty (30) days, except for data we are required to retain by law or as described above.

11. Security Measures

We implement industry-standard administrative, technical, and physical security measures to protect your personal data, including but not limited to:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Secure authentication with hashed and salted passwords
• Role-based access controls limiting employee access to personal data
• Regular security audits and vulnerability assessments
• Intrusion detection and monitoring systems
• Secure development practices and code review processes

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

In the event of a data breach that affects your personal information, we will notify you and applicable regulatory authorities as required by law, including details about the breach and steps you can take to protect yourself.

12. Children's Privacy

The SweepsMarket platform is not intended for, directed to, or designed to attract individuals under the age of eighteen (18). We do not knowingly collect, use, or disclose personal information from anyone under 18. If we become aware that we have inadvertently collected personal information from a person under 18, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe that your child under 18 has provided personal information to SweepsMarket, please contact us immediately at privacy@sweepsmarket.com.

13. International Users

The SweepsMarket platform is operated from and intended for use in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using the Service, you consent to the transfer, storage, and processing of your information in the United States. If you are not comfortable with these terms, please do not use the Service.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated via email to the address associated with your account and/or through a prominent notice on the Service at least thirty (30) days before taking effect. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the policy was most recently revised.