Privacy Policy

AutoPick Labs ("we", "us") provides a software platform for lottery research and personal tracking. This policy explains what personal data we collect, why we collect it, how it is stored and the rights you have under the UK GDPR and the Data Protection Act 2018.

AutoPick Labs is the data controller for the personal data described here. You can reach us through our contact form.

Data we collect

• Name — so we can address you correctly in the product and in email.
• Email address — used to create and secure your account, send service messages, and reply to enquiries.
• Date of birth — used to verify that you are 18 or over. We store the date of birth, the verification result and the time verification took place.
• Account information — password (stored only as a secure hash by our authentication provider), account status, plan, preferences and sign-in timestamps.
• Subscription information — plan, subscription status, start and renewal dates, cancellation date and the payment-provider customer reference. Card details are never seen or stored by AutoPick Labs; they are handled entirely by our payment processor.
• Usage data — the research lines you generate, tickets you record, saved selections, feature usage and basic technical logs such as device type and error events.
• AI assistant interactions — the questions you ask the assistant and the answers returned, so the conversation has context and so we can improve reliability.
• Enquiries and marketing consent — messages you send us, the consent choices you made and when you made them.

Why we collect it

• Account creation and security — to give you a private, protected account (lawful basis: performance of a contract).
• Age verification — to enforce our strict 18+ requirement (lawful basis: legal obligation and legitimate interests).
• Service delivery — to run the research tools, dashboards, tracking and AI assistant you are paying for or using free of charge (contract).
• Subscription management — to process payments, renewals, cancellations and access rights (contract).
• Product improvement — to fix faults, measure feature reliability and improve research quality (legitimate interests).
• Communication — service emails when required, and product or launch updates only where you have given consent (consent, withdrawable at any time).

We do not sell your personal data, and we do not share it with advertisers or data brokers.

Data storage and processors

Your data is stored in a managed, access-controlled PostgreSQL database with row-level security so that each account can only read its own records. We use a small number of processors to run the service: our cloud database and authentication provider, our transactional email provider, our payment processor for subscriptions, and an AI model provider that processes assistant messages. Each processes data only on our instructions. Where data is transferred outside the UK, it is protected by appropriate safeguards such as standard contractual clauses.

Security measures

• Encrypted connections (HTTPS/TLS) for all traffic.
• Passwords stored as salted hashes; we never see your password.
• Row-level security policies restricting every record to its owner.
• Administrative access limited to the AutoPick Labs operator.
• No card or bank data ever stored on our systems.

How long we keep data

Account and usage data is kept while your account is open. If you close your account or ask us to delete it, we remove your personal data within 30 days, except records we must keep for legal or accounting purposes (for example subscription receipts, normally retained for six years).

Your rights

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct anything inaccurate.
• Erasure — ask us to delete your account and personal data.
• Restriction and objection — ask us to limit or stop certain processing.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — unsubscribe from marketing at any time.

To exercise any right, use our contact form. We respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

We use strictly necessary cookies and local storage to keep you signed in, secure your session and process payments. These are required for the platform to work and do not need consent.

Optional product analytics — anonymous measurement of how the research tools are used — only run if you accept them in the cookie banner. You can change your choice at any time by clearing site data or using the Manage option in the banner. We do not use advertising or cross-site tracking cookies.

Children

AutoPick Labs is strictly for adults aged 18 or over. We do not knowingly collect data from anyone under 18, and any such account is deleted when identified.

Changes to this policy

We may update this policy as the platform develops. The version published on this page always applies, and material changes will be communicated by email where appropriate.