VAZA Privacy Policy

This Privacy Policy explains how VAZA ("VAZA," "we," "us," or "our") collects, uses, shares, and protects information when you access or use our platform, including our website, web app, mobile experiences, and related services (collectively, the "Platform"). By using VAZA, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect information you provide directly, information collected automatically through your use of the Platform, and information from trusted third parties such as payment providers.

1.1 Information You Provide

• Account Information: email address, username, password, country/region, and any other details you submit during registration.
• Profile Information: optional profile details, preferences, and settings you choose to add.
• Support & Communications: information you provide when contacting support, completing surveys, reporting issues, or communicating with us.
• Content You Post: matchups you create (titles, options and pictures), brands you create (names, logos and timer pictures) and chat messages.

1.2 Payment & Identity Information

Card deposits, withdrawals, and payouts are processed by Whop. VAZA does not store full payment card numbers.

Whop may collect and verify identity information to comply with legal and regulatory requirements, such as date of birth, address, government ID, banking details, and tax-related fields where required.

VAZA receives limited payment-related records (e.g., transaction status, amount, timestamps, currency, and Whop account identifiers) needed to operate your balance and withdrawals.

1.3 Information Collected Automatically

When you use VAZA, we automatically collect:

• Activity Data: polls you view or vote on (free or supported), support placed, results, rewards, referral activity, and other engagement signals.
• Device & Network Data: IP address, device type, browser type, operating system, whether you opened VAZA as an installed app, locale/language, and device identifiers.
• App and Notification Prompts: whether you were asked to install VAZA or turn on push notifications, and what you chose. This is recorded with your device type and browser only. It is linked to you or your browser only if you accept cookies.
• Log Data: access timestamps, pages and screens viewed, clicks, crashes, and diagnostic events.

1.4 Cookies & Similar Technologies

We use cookies, pixels, local storage, and similar technologies to:

• keep you signed in,
• remember preferences,
• measure performance,
• understand feature usage,
• improve safety and fraud prevention.

Cookies that keep you signed in, remember your settings and protect against fraud are always used. Analytics, screen recordings and partner link tracking are only used if you press Accept on the cookie banner. If you decline, or don't choose, we don't use them.

If you accept, we keep two tracking cookies: a random visitor id for up to one year, and, if you arrived through a partner's link, a record of that link for up to 30 days, so we can credit the partner if you create an account.

Two services run whatever you choose, because they protect accounts or answer support requests: Fingerprint recognizes your device while you are signed in, to stop multi-accounting and fraud, and the support chat on the Help Center (Crisp) sets its own cookies when that page opens.

You can change your cookie choice any time with the Cookie settings button under Your Rights and Choices, or through your browser settings. Disabling cookies may limit some features.

2. How We Use Your Information

We use collected information to:

• Provide and operate the Platform and its features.
• Create, authenticate, and manage your account.
• Process free votes, supported votes, balances, rewards, deposits, and withdrawals.
• Communicate with you about polls, results, product changes, and support requests.
• Monitor, detect, and prevent fraud, multi-accounting, manipulation, and security incidents.
• Check matchups, brands and chat messages against our rules before they are published, including whether a new matchup is too similar to a matchup, or copies a bracket, that is live or ran in the last 3 days.
• Record the screen while you deposit, withdraw, vote or create a matchup, to fix problems and spot fraud, if you accepted cookies.
• Improve product quality, user experience, and feature development.
• Conduct internal analytics and measurement. We may use aggregated, anonymized data to understand sentiment trends and Platform performance.
• Credit a partner whose link brought you to VAZA, if you accepted cookies and then created an account.
• Comply with applicable laws, lawful requests, and enforcement of our Terms of Service.

3. How We Share Your Information

We do not sell your personal information. We share information only as described below.

3.1 Service Providers

We share information with vendors that help us run VAZA, including:

• Whop (card payments, onboarding, identity verification, payouts).
• TypeSafe (checks the text of matchups, brand names and chat messages against our rules, and whether a new matchup is too similar to a recent matchup or copies a recent bracket).
• Amazon Web Services (hosting, storage and databases, and Amazon Rekognition, which checks pictures added to matchups and brands).
• Fingerprint (recognizes devices, to help prevent multi-accounting and fraud).
• Brevo (sends our emails).
• Apple, Google, Mozilla or Microsoft, depending on your device and browser (deliver push notifications, only on devices where you turn them on). We store the address they give your device and your browser type. The messages are encrypted for your device.
• PostHog (product analytics and screen recordings, only if you accept cookies).
• Crisp (the support chat on the Help Center, which receives your email address and username when you are signed in).
• Cloudflare Turnstile (checks you are a person when you sign up, reset a password, or sign in with a wallet or another account).

These providers may access information only to perform services for VAZA and must protect it under contractual obligations.

3.2 Legal, Safety, and Compliance

We may disclose information if we reasonably believe it is necessary to:

• comply with law or valid legal process,
• respond to government or regulatory requests,
• enforce our Terms or policies,
• protect VAZA, users, or the public from fraud, abuse, or security risks.

3.3 Business Transfers

If VAZA undergoes a merger, acquisition, restructuring, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

3.4 With Your Consent

We may share information if you explicitly ask us to or give consent.

4. Public Figures, Names & Likenesses

VAZA includes polls and discussions about athletes, artists, entertainers, and other public figures. Any names, likenesses, or images shown on the Platform are used solely for editorial, commentary, informational, or educational purposes.

VAZA is not affiliated with, endorsed by, sponsored by, or representing any individuals referenced or depicted. Rights holders may contact support@vazainc.com for review or removal requests.

5. Data Security

We use industry-standard safeguards to protect information, including:

• encryption in transit and at rest where applicable,
• access controls and least-privilege policies,
• monitoring for suspicious activity,
• secure payment processing through Whop.

No system is perfectly secure. You use the Platform at your own risk and should protect your credentials.

6. Data Retention

We retain information only as long as needed to:

• operate the Platform,
• comply with legal obligations,
• resolve disputes,
• enforce our agreements.

When no longer required, we delete or anonymize it. Whop retains payment/identity data per its own retention rules.

7. Automated Checks and Account Enforcement

Some decisions on VAZA are made automatically, without a person reviewing them first:

• matchups, brands and chat messages are checked against our rules, and may be refused or removed,
• a matchup too similar to a matchup, or copying a bracket, that is live or ran in the last 3 days is refused,
• accounts that appear to belong to the same person, for example accounts used on the same device, may be banned until you choose one to keep,
• accounts whose deposits and withdrawals match patterns of fraud may be banned and their withdrawals held, and
• repeated chat violations pause your chat and, on the fourth, ban your account.

We keep a record of each of these: which accounts were linked and why, the activity that triggered a fraud check, chat strikes and the messages behind them, and every action we or our team took. We keep it while it is needed to enforce our Terms and prevent repeat abuse, including after an account is closed.

You can ask for a person to review any automatic decision about your account by emailing support@vazainc.com.

8. Your Rights and Choices

Depending on where you live, you may have rights to:

• Access: request a copy of your personal information.
• Correction: request updates to inaccurate or incomplete data.
• Deletion: request deletion of your data, subject to legal/operational needs.
• Opt-Out of Marketing: unsubscribe from promotional messages at any time.
• Push Notifications: turn them off any time on your Profile page or in your device settings. Signing out turns them off on that device.
• Cookie Controls: change your cookie choice any time with the Cookie settings button below.
• Account Closure: close your account through settings or by contacting support.

To exercise rights, email support@vazainc.com. We may verify your identity before responding.

9. International Users & Cross-Border Transfers

VAZA is used globally. Your information may be processed in countries other than your own, including where our providers operate. We rely on appropriate safeguards such as contractual protections and standard transfer mechanisms where required by law.

10. Children's Privacy

VAZA is not intended for anyone under 18. We do not knowingly collect information from minors. If we learn we have collected a minor's data, we will delete it promptly.

11. Third-Party Links and Services

VAZA may link to third-party sites or services. Their privacy practices are governed by their own policies. We are not responsible for third-party content or privacy practices.

12. Region-Specific Notices

12.1 California (CCPA/CPRA)

California residents may have additional rights to know, delete, or correct personal information, and to opt out of "sale" or "sharing." VAZA does not sell personal information.

12.2 European Economic Area / United Kingdom (GDPR)

If you are in the EEA or UK, VAZA processes personal data based on:

• contract necessity (providing the Platform),
• legitimate interests (security and fraud prevention),
• legal obligations (compliance),
• consent (analytics, partner link tracking, and marketing where required).

You may also have the right to object, restrict processing, or request data portability.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the "Last Updated" date. Continued use of VAZA after changes means you accept the updated policy.

14. Contact Us

If you have questions or requests about privacy, contact: