oakleaf ai

Privacy Policy

Last updated September 6, 2026

1. Overview

This Privacy Policy explains how Oakleaf AI, LLC ("Oakleaf AI," "we," "us," or "our") collects, uses, discloses, and protects information when you use our websites, applications, subscriptions, emails, and related services. It should be read together with our Terms of Service.

Oakleaf AI is a young product, and the Services may change quickly. When we materially change how we handle personal information, we will update this Policy and adjust the date above.

2. Information We Collect

We may collect the following categories of information:

  • Account information: email address, username and name if provided, authentication events, account settings, and subscription status.
  • Payment and billing information: plan selected, billing history, payment status, receipts, customer identifiers, and limited payment metadata from payment processors. We do not store full payment card numbers.
  • Usage and device information: pages viewed, features used, log data, browser type, device information, approximate location derived from IP address, referral source, and timestamps.
  • Communications: messages you send us, support requests, survey responses, and email preferences.
  • User content: files, prompts, saved preferences, watchlists, model inputs, or other content you submit if those features are available.
  • NBA 2K collection and badge data: cards you mark in your collection, game edition and specific card identifiers, selected badge levels, the base badge configuration used for comparison, derived Meta Scores, model versions, configuration revisions, and save timestamps. Saved records are linked to your Oakleaf AI account identifier.
  • Public sports data: publicly available or third-party sports facts that we process to operate the Services, such as rosters, schedules, box scores, play-by-play, salaries, injuries, odds context, and game results. This is generally not personal information about our users.

3. How We Use Information

We use information to:

  • Provide, operate, secure, and improve the Services.
  • Create accounts, authenticate users, and manage access controls.
  • Save and restore your collections and badge configurations, and calculate personalized badge-adjusted scores.
  • Process subscriptions, payments, renewals, refunds, and receipts.
  • Send transactional, security, billing, and product emails.
  • Generate, test, monitor, and improve models and Oakleaf AI Outputs.
  • Understand usage, diagnose issues, prevent abuse, and protect the platform.
  • Respond to support requests and communicate about the Services.
  • Comply with legal obligations and enforce our Terms.

3A. NBA 2K Collections and Badge Configurations

When you save a collection selection or badge configuration while signed in, we store it on our servers so it is available when you return to your account. Badge configurations are tied to the specific card variant, not every card for the same player. Account access controls restrict viewing and changing saved configurations to the signed-in account that saved them; this feature does not publish them to other users. The service-provider, support, legal, and other uses and disclosures described in this Policy still apply.

Badge previews made while signed out are not saved to an account. Unsaved editor changes stay in the current page and may be lost when you leave or reload it. This does not prevent the ordinary technical logs or consent-based analytics described in this Policy.

These tools do not ask for your 2K, console, or gaming-platform password, connect to your game account, or send your saved badge configurations to Take-Two Interactive Software, Inc. or 2K. Collection selections are information you provide, not a verified record obtained from your in-game inventory.

4. Cookies and Similar Technologies

Essential cookies, local storage, and similar technologies keep the Services working, authenticate users, manage sessions, protect the platform, and remember preferences and cookie choices. These functions do not depend on consent to optional analytics. Ordinary server logs also help us operate the Services and diagnose issues.

Optional Google Analytics is loaded only after you accept our cookie notice. It uses cookies and related information, such as browser and device details, pages viewed, referral source, timestamps, and approximate location, to help us understand traffic and product usage. We do not use these tools to knowingly share personal information for cross-context behavioral advertising. Account authentication and saving your collection or badge configurations do not require that analytics consent.

Our cookie notice stores your acceptance choice in local storage so we do not show the notice every time you visit. You can leave optional analytics off by not selecting Accept. To clear a previous choice, delete this site's cookies and local storage in your browser and reload any open Oakleaf AI pages; this may also sign you out. Blocking essential storage may affect sign-in or site preferences.

5. Payments and Stripe

We may use Stripe or another payment processor for checkout, subscription management, fraud prevention, taxes, invoices, receipts, and payment-related analytics. Payment processors may collect payment details, billing information, device information, and transaction information under their own terms and privacy policies. We receive limited information needed to manage your subscription and records.

6. Hosting, Email, and Service Providers

We may share information with vendors that help us run the Services, including cloud hosting, databases, storage, logging, monitoring, analytics, email delivery, authentication, customer support, and payment processing providers. For example, we may use Amazon Web Services and Amazon Simple Email Service for infrastructure and transactional email.

These providers may process information only as needed to provide services to us, comply with law, or protect their systems.

7. Sharing and Disclosure

If you provide a username, we may display it publicly in the "Welcome new users" list. Choose a username you are comfortable making public. This list shows usernames, not your email address, collection selections or counts, saved badge configurations, or personalized scores.

We may disclose information:

  • To service providers and processors described above.
  • To comply with law, legal process, or lawful government requests.
  • To enforce our Terms or protect rights, safety, security, and integrity.
  • In connection with a merger, financing, acquisition, reorganization, or sale of assets.
  • With your direction or consent.
  • In aggregated, de-identified, or non-personal form.

We do not sell personal information for money. We also do not knowingly share personal information for cross-context behavioral advertising.

8. Model Improvement and De-Identified Data

We may use usage data, feedback, support context, User Content, and derived or de-identified information to evaluate and improve models, projections, recommendations, product quality, abuse prevention, and platform reliability. Where practical, we use aggregated or de-identified information for product analysis and model improvement.

9. Data Retention

We retain information for as long as reasonably needed to provide the Services, maintain business records, comply with legal obligations, resolve disputes, enforce agreements, preserve security, and improve the platform. Retention periods vary depending on the type of data, account status, subscription records, and legal requirements.

Signing out or clearing browser storage does not delete collection records or badge configurations saved on our servers. Resetting badges in the editor changes the draft; you must save to replace the saved configuration. It is not an account-deletion request. Removing a card from your collection removes that selection, not its saved badge configuration. You may request deletion of saved records using the contact details below, subject to the retention reasons described here.

10. Security

We use reasonable technical and organizational measures designed to protect information. No method of transmission or storage is fully secure, and we cannot guarantee absolute security. You are responsible for keeping your account and email secure.

11. Your Choices and Rights

You may request access, correction, deletion, or export of personal information by contacting contact@oakleaf.ai. We may need to verify your request and may retain certain information where permitted or required by law.

These requests can include your saved NBA 2K collection selections, badge configurations, and associated personal scores. Where the controls are available, you can also update your collection or save a revised badge configuration directly in your account.

You can unsubscribe from marketing emails using the link in those emails or from your account page. You will still receive transactional messages needed for your account, subscription, security, or legal notices.

Depending on where you live, you may have additional privacy rights under state, national, or international law. We will honor applicable rights requests as required.

12. Children

The Services are not directed to children. You must be at least 18 to use the Services. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will take appropriate steps to delete it.

13. International Users

Oakleaf AI is based in the United States. If you access the Services from outside the United States, your information may be processed in the United States or other countries where our service providers operate.

14. Third-Party Links

The Services may link to third-party websites, platforms, or services. Their privacy practices are governed by their own policies, not this Privacy Policy.

Oakleaf AI's NBA 2K tools are independent of Take-Two Interactive Software, Inc. and 2K. This Policy describes Oakleaf AI's handling of information, not the publisher's game or account services. See our Terms of Service for third-party ownership and non-affiliation notices.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice through the Services, email, or another appropriate method.

16. Contact

Questions or requests about this Privacy Policy can be sent to contact@oakleaf.ai.