Privacy Policy

Effective November 4, 2026

This policy explains how JBE Enterprises Inc. dba Game Winners (“Game Winners”, “we”) collects, uses and shares personal information in the Game Winners service. Our Terms of Service also apply to account holders.

Information we collect

Athletes on a roster. From school athletics websites, whether or not the athlete has an account: name, team, position, class, jersey number, height, weight, hometown, previous schools, major, roster bio links, public social media links and roster headshots. Schools and their staff may add to or correct this.

Athletes with an account. Email, the photos you upload, social handles, audience figures, interests and preferences, notes you write, and your decisions on pitches.

Connected social accounts. If an athlete connects Instagram, TikTok or YouTube, we collect the account’s handle and name, follower counts, engagement, recent posts and their metrics, and audience breakdowns by age, gender and location. Where Zernio is enabled it makes the connection and reads the account’s audience metrics on our behalf; where we connect to a platform directly, we keep the access tokens encrypted. We only ask for read-only access to the account’s profile and analytics, never to post, comment, send messages or read direct messages. TikTok requires every app to ask for its video permissions as well; we don’t use them.

Staff and advisors. Name, email, role, school, who invited you, and who you invite.

Businesses and pitch visitors. Business names, addresses and public website content, and how a pitch page is viewed, such as opens, time on page and sections viewed.

Usage and technical data. Pages and actions, device and browser details, IP address and error reports. When you accept our terms or approve a pitch, we keep the date, version, IP address and browser details as a record.

Payments. Stripe collects card details directly. We receive subscription and customer identifiers and billing status, not your full card number.

How we use it

• To run the Service: load rosters, match athletes with businesses, build pitches and manage approvals.
• To create AI-generated concepts, images and video, as described below.
• To send sign-in links and invitations, and to handle billing and support.
• To keep the Service secure, fix problems and understand how it is used.
• To meet legal obligations and keep a record of consents.

AI processing of photos and likeness

We create AI images or video of an athlete only after that athlete has their own account and has accepted our terms. Until then, no photos of them go to AI image or video providers, though AI can still draft written concepts using details from the roster. Once they have accepted, photos they upload, and photos a department uploads after confirming it holds the rights, are sent to an AI image provider with a text prompt to generate images of the athlete in a concept for a business. Those images can then be turned into short video clips and reviewed by AI. Prompts and AI drafting also use details such as first name, hometown, sport, position, audience figures and business research.

Headshots from public roster pages are shown on pitches. They are never used as AI inputs.

We don’t train AI models on anyone’s likeness. We won’t start without asking the athlete for separate consent first.

Only the athlete, signed in to their own account, can approve a pitch that features them. An approved pitch labels AI-generated visuals as such. Removing a source photo stops visuals made from it from being shown on pitches.

Who we share it with

Service providers process information for us:

• Supabase: database, sign-in and file storage
• Anthropic: AI writing, research, chat and review of generated images
• Replicate: AI image and video generation, including athlete photos
• Firecrawl: reading public business websites
• Google: business search, photos and maps, without athlete data. YouTube, if an athlete connects it
• Meta and TikTok: Instagram and TikTok, if an athlete connects them
• Zernio: connecting an athlete’s social accounts and reading their audience metrics on our behalf, where enabled
• Stripe: payments and subscriptions
• Resend: email delivery
• PostHog: product analytics and error reporting, which receives your name, email, role and school when you are signed in
• Our website hosting provider

Your school and advisors. Staff at an athlete’s school, and advisors the athlete invited, can see the athlete’s profile and pitches.

Social data. An athlete’s connected-account data is visible to them, to advisors they invited, to our admins and, while sharing is on, to their school’s staff. Sharing is on by default and can be turned off per account in Settings. Audience totals can also appear on the athlete’s pitches.

Businesses and link holders. After approval, anyone with a pitch’s private link can view its name, photos, AI visuals, hometown, audience figures and the sender’s email, until the link expires or is revoked. Links normally last 30 days and are not meant to be indexed by search engines. People can copy or forward what they see.

Legal and business reasons. We may disclose information to comply with law, protect rights and safety, or as part of a merger or sale of the business.

We do not sell personal information.

Cookies and analytics

We use cookies needed to keep you signed in, and browser storage for conveniences such as chat history. PostHog uses cookies or similar storage for analytics and may record sessions, including on public pitch pages. It doesn’t record sessions on athlete approval pages. Browser settings can block cookies, but signing in requires them.

Student information and schools

Schools decide what school data to use in the Service and confirm they have permission to do so. If you are an athlete with a question about information your school provided, you can contact your athletic department or us.

Keeping and deleting information

We keep information while an account or school relationship is active and as needed for the purposes above, legal obligations and disputes. Consent records are kept after an account closes. There is currently no fixed deletion schedule for all data.

Athletes can remove their photos in Settings. To delete an account or roster information, email us; we’ll verify your request and act on it unless we have to keep something by law. Copies already sent to a business aren’t within our control, and rosters on a school’s public site may be reloaded unless the school or you ask us to exclude them.

Your choices and rights

Athletes can disconnect a social account in Settings, which also removes it from Zernio. The history stays for them and is hidden from their school, unless they also choose to delete it. YouTube data is covered by the YouTube Terms of Service and Google Privacy Policy, and you can remove our access in your Google security settings.

You can update your name and social handles in Settings. Depending on where you live, you may have rights to access, correct, delete or get a copy of your personal information, to object to or limit some uses, to withdraw consent, and to appeal our decision. Email us to use them, and we won’t treat you differently for doing so. You can also complain to your local data protection authority.

Minors

The Service is for college athletics and isn’t directed at children under 13. An athlete under 18 needs a parent or guardian’s agreement. If you believe we hold a child’s information improperly, contact us.

Security and location

We use access controls, private storage and expiring links for most data, but no system is perfectly secure. Information is processed in the United States and wherever our providers operate.

Changes

If we materially change this policy, we’ll ask account holders to accept the new version and update the date above.

Contact

JBE Enterprises Inc. dba Game Winners, 3225 McLeod Dr, Suite 100, Las Vegas, NV 89121. Email: support@gamewinners.ai.