Effective May 15, 2026 · Last updated May 21, 2026

Privacy Policy

X Generation Enterprise Inc ("JackpotIQ," "we," "us," or "our") operates the JackpotIQ website at https://jackpotiq.appand any related mobile applications (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to visitors, registered users, and paying subscribers worldwide and is designed to satisfy applicable US laws (CCPA/CPRA), GDPR for any EU visitors who reach us, and Apple App Store and Google Play requirements.

One-sentence summary: we collect your name, email, US mobile number, date of birth, marketing source, and the lottery statistics you generate; we use it to run the Service, prevent abuse, and (with your separate opt-in) send you alerts and marketing about JackpotIQ. We do not sell your personal information.

1. Who is the data controller

X Generation Enterprise Inc, registered in New Hampshire, United States. Postal address: 14 Meindl Way, Nottingham, NH 03290, United States. For any privacy question, write to privacy@jackpotiq.app.

2. Information we collect

2.1 Information you give us

• Account & identity — full name, email address, US mobile phone number (E.164), date of birth (we use this to confirm you are at least 18 years old).
• Authentication— Clerk Inc. provides our login system. Clerk stores your email and (optional) phone number, plus security tokens. See Clerk's privacy policy at clerk.com/legal/privacy.
• Billing— when you subscribe to JackpotIQ Pro, you submit your payment card to Stripe Inc. We never see or store your card number, CVV, or full account information. We do store your Stripe customer ID, subscription status, and the city/state you provided for sales-tax calculation. See Stripe's privacy policy at stripe.com/privacy.
• Communications — when you email us, opt in to SMS alerts, or respond to surveys, we keep the content of those messages.
• Lottery preferences — your favorite game, lucky numbers, and the combos you generate or save.

2.2 Information we collect automatically

• Device & technical — IP address, browser user-agent, device type, operating system, language preference, and approximate location (derived from the IP). We use this to prevent abuse, debug errors, and apply state-specific sales tax.
• Usage — pages viewed, features used, generation history, time of access, referring URL, and link clicks within the Service.
• Marketing attribution — the UTM parameters in the URL when you first reach us (utm_source, utm_medium, utm_campaign, utm_content, utm_term). This tells us which ad campaign brought you in. We never sell these values.
• Cookies and similar technologies — see our Cookie Policy for details.

2.3 Information from third parties

• Lottery results — we ingest public Powerball and Mega Millions winning numbers from the New York State Open Data program (data.ny.gov). This is government-published, non-personal data.
• Ad networks — Meta (Facebook/Instagram), TikTok, and Google may share aggregated reporting on the ad you clicked. We do not receive their internal profile information about you.

3. How we use your information

• Provide the Service — create your account, authenticate you, generate combos, store your Lucky Vault, charge your subscription.
• Comply with the law — verify you are 18+, charge and remit sales tax, respond to lawful requests, retain billing records for 7 years as required by US tax authorities.
• Prevent abuse and fraud — rate-limit requests, detect anomalous logins, block bots, investigate suspicious billing activity.
• Improve the Service — aggregate usage data to fix bugs, design new features, and prioritize the roadmap.
• Customer support — answer your questions, send transactional emails (receipts, password changes, security alerts).
• Marketing (only with your opt-in) — send email or SMS about new features, jackpot alerts, and promotions. You can opt out at any time (see Section 7).
• Personalize ads on third-party platforms— we may upload a hashed (SHA-256) version of your email and phone number to Meta, TikTok, and Google so they can show you JackpotIQ ads on their networks ("Custom Audiences"). You can opt out of this by emailing privacy@jackpotiq.app.

4. Legal bases (EU/UK visitors)

If you visit from the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing your data under the GDPR are: (a) contract performance — we need your data to provide the Service you signed up for; (b) legal obligation — tax, anti-fraud, and consumer-protection laws; (c) legitimate interests — running, improving and securing the Service; and (d) consent — for marketing email, SMS, and non-essential cookies. You can withdraw consent at any time.

5. Who we share your information with

We share data with a small set of service providers strictly to deliver the Service. Each is bound by a written agreement restricting their use of your data.

• Clerk Inc. — authentication and identity management.
• Stripe, Inc. — payment processing, fraud detection, sales-tax calculation.
• Neon, Inc. — managed Postgres database that stores your account record and generation history. Data is encrypted at rest.
• Vercel, Inc. — hosting, CDN, and edge functions.
• Meta Platforms, TikTok, Google — only the hashed identifiers described in Section 3, and only if you have not opted out.

We will also disclose information when required by valid legal process (subpoena, court order, lawful government request) or to protect the safety of users, the public, or the Service. We will push back on overbroad requests where lawful.

We do not sell your personal information as defined by the California Consumer Privacy Act, and we have not sold personal information in the past 12 months.

6. International transfers

We operate the Service from the United States. If you access it from outside the US, your data will be transferred to and processed in the US. By using the Service you consent to this transfer. Where required, we rely on Standard Contractual Clauses with our sub-processors.

7. Your rights and choices

Subject to applicable law and verification of your identity, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and personal data. We retain billing records for 7 years to comply with US tax law and may retain audit logs of suspicious activity for the same period.
• Export your data in a machine-readable format.
• Opt out of marketing— click "unsubscribe" in any email or reply STOP to any SMS. You may also email privacy@jackpotiq.app.
• Opt out of Custom Audience uploads to Meta, TikTok, and Google by emailing the address above.
• File a complaint with your data protection authority. EU residents can find their authority at edpb.europa.eu.

To exercise any right, email privacy@jackpotiq.app. We will respond within 45 days (CCPA) or 30 days (GDPR). California residents may use an authorized agent and we will not discriminate against you for exercising your rights.

8. Children

The Service is for users aged 18 and over only. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected information from a child, we will delete it as soon as possible. If you believe a child has provided us their data, email privacy@jackpotiq.app.

9. Data retention

We keep account data for as long as your account is active and for up to 90 days afterwards in case you reactivate. Billing records, invoices, and tax-related data are retained for 7 years as required by US tax authorities. Audit logs are retained for 7 years for fraud prevention and regulatory compliance. Aggregated, de-identified analytics may be kept indefinitely.

10. Security

We use industry-standard safeguards including encryption in transit (TLS 1.2+), encryption at rest (AES-256 via our database provider), HTTP Strict Transport Security, signed and idempotent webhooks, audit logs, and rate-limited APIs. No method of transmission is 100% secure; we cannot guarantee absolute security but we do work continuously to reduce risk. Report security issues responsibly to support@jackpotiq.app.

11. Third-party links

The Service may link to websites we do not control (lottery state sites, support articles, social media). We are not responsible for their privacy practices and recommend you review their policies.

12. Changes to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced by email or an in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date of an update constitutes acceptance.

13. Contact

Privacy questions, data requests, complaints: privacy@jackpotiq.app.

Postal: X Generation Enterprise Inc, 14 Meindl Way, Nottingham, NH 03290, United States.