machine graded — privacy policy

v1.1 · effective Aug 1 2026 · approved by counsel · BALD ARTHUR LLC (Georgia)

BALD ARTHUR LLC, 250 Cricket Lane, Alpharetta, GA 30009 · kelly@machinegraded.com — operating as Machine Graded.

What we collect

Application data: what the application form asks — name/handle, email, Telegram handle (required; it is how alerts are delivered), venue/funding status, and your answers. Includes anti-bot signals (honeypot fields).

Billing data: processed by Whop and Stripe; we receive membership status and transaction metadata, never your full card details. Their privacy policies govern their processing.

Delivery and enforcement data: the watermark-to-seat mapping for alerts (see below), delivery confirmations, and support correspondence (kelly@machinegraded.com).

Site data: standard server logs (IP, user agent, timestamps). No advertising trackers.

What we use it for

Running the service: admitting applications, delivering alerts, billing, support, and enforcing the redistribution terms. Watermark-to-seat mappings exist solely to attribute leaked alerts and are used for nothing else. Acceptance records (terms version, timestamp, evidence) are kept to document the contract.

What we never do

We never sell your data. We never publish your results. We never disclose one member's information to another. We never use your data to train models unrelated to running the service.

Retention

Application and acceptance records for the life of the membership plus [N years — counsel]; server logs rotate on a short schedule; support mail retained as long as needed for the matter. You can ask what we hold about you and ask for deletion of anything we are not legally required to keep: kelly@machinegraded.com.

Where it lives

On infrastructure we control (currently DigitalOcean, US region) and with the processors named above. [Counsel: processor list/DPA posture, international-transfer language if any non-US members are admitted.]

Your rights

[Counsel: GDPR/UK-GDPR/CCPA applicability given a 20-seat US-first product; minimum rights language; whether a formal DSAR process is required at this scale.]

Changes

Material changes are notified to members before they take effect; the dated version in force governs.

[Counsel open items: retention periods · rights section · child-data statement (18+ product) · breach-notification language · whether Telegram handle + betting-adjacent membership constitutes sensitive data anywhere we admit members.]