Who we are
Ash is a fantasy basketball assistant that runs as a Discord bot. For questions about this policy or about your data, write to assistteam2026@gmail.com.
What we collect
Only what the product needs to answer your questions. Specifically:
- Your Discord user ID. A number, not your email or password. It's how we know which league is yours and how many credits you have left.
- Your fantasy league data. When you connect a league, we read your roster, your league's scoring settings, the other teams, and your weekly matchup from your fantasy platform (Sleeper today; Yahoo when that integration is approved).
- The text of your questions. What you type into
/askand the answer Ash gives back. - Usage records. Which command you ran, when, how many tokens the answer used, and how many credits it cost. This is how billing and rate limits work.
We don't collect your Discord password, your payment card details, your messages in other channels, or anything you say outside of Ash's own commands.
Your email address is separate from all of the above, and it's the one thing here you give us deliberately. It has its own section below.
Why we collect it
To answer questions about your team. A general chatbot can tell you what punting is; it can't tell you whether to pick up a specific player, because it doesn't know what's already on your roster or what your league counts. Everything in the list above exists to close that gap.
Usage records also let's see whether the product is working, catch abuse, and know what to fix. They're not used to build a profile of you.
Aggregated and anonymised data
We want to be straight about this now rather than surprise you later.
We may analyze activity across all leagues in aggregate. For example: which players are being added and dropped most often, how waiver activity moves through a week, or which categories managers most often ask about. This kind of analysis is a plausible future feature and a plausible future product, so we're telling you before we build it, not after.
If we do this, it will be aggregated and anonymised: counts and trends across many leagues, never "this user added this player". We won't publish, sell or share anything that identifies you, your team name, your league, or the text of your questions.
If that changes, we will say so on this page and tell existing users before it takes effect.
Email addresses
Some pages on this site have a box where you can leave an email address — to be told when Ash opens, or to have a result sent to you. Nothing on this site requires it, and every tool works fully without it.
The tick box, and why it isn't ticked
Under the box there's a checkbox reading "Also send me occasional tips and updates from Ash. Unsubscribe anytime." It starts unticked, and it will never arrive already ticked. A box we ticked for you isn't your decision, and under EU law it isn't consent either.
You can submit your email without ticking it. That's a real option, not a discouraged one:
- You left it unticked. We use your address for the one thing you asked for — the result you requested, or the single email telling you Ash is open — and nothing else. No tips, no updates, no product news.
- You ticked it. On top of that, we may send occasional emails about what Ash can do and what's new. Not daily, not automated sequences, and never a list we sold to someone else.
Your answer is recorded alongside your address as a plain yes or no, so that later we can show which one you chose rather than guess.
Who receives it
The form posts to Formspree, which receives your address and delivers it to us by email. Formspree is in the table below with everyone else.
How long we keep it
If you didn't tick the box: until the thing you asked for has happened, plus 90 days. For the launch list, that means we delete your address 90 days after the email announcing that Ash is open.
If you ticked the box: until you unsubscribe, or after 24 months with no opens and no clicks — whichever comes first. An address nobody reads isn't a subscriber, and keeping it doesn't help either of us.
How to get out
Every marketing email has an unsubscribe link, and one click is enough — no login, no reason required, no survey.
You can also write to assistteam2026@gmail.com and say either "stop sending me things" or "delete my address entirely". The second one is the stronger of the two, and we will do it without asking why. We aim to act within 30 days and usually much sooner.
Withdrawing consent is as easy as giving it, and it costs you nothing else: unsubscribing has no effect on the bot, your credits, or anything you already asked for.
Where it's stored
On servers operated by Railway, in the EU or the United States depending on region. Data is stored in a database that only the Ash application can reach.
How long we keep it
For as long as your account is active, plus 90 days after you stop using Ash or ask us to close your account. After that it's deleted.
The 90 days exist so that an accidental deletion can be undone and so we can resolve any billing question that comes up after you leave. If you want your data gone sooner than that, ask and we will do it.
Who else sees it
Ash can't work without sending some data to other services. These are all of them:
| Service | What it receives | Why |
|---|---|---|
| Anthropic | Your question and the relevant part of your roster and stats | Generating the answer |
| Sleeper | Your Sleeper username or user ID | Finding your leagues and reading your roster |
| Yahoo | Your authorisation, once that integration is live | Reading your Yahoo league, if you connect one |
| NBA.com | Player names only — nothing about you | Player statistics |
| Railway | Everything, as our hosting provider | Running the bot and storing the database |
| Discord | Your messages to the bot, as the platform it runs on | Delivering commands and replies |
| Formspree | Your email address and your marketing answer, only if you submit the form on this website | Delivering the form to us |
| Vercel | A page view and a load time, with no cookie and no lasting ID — see the cookie page | Hosting this website |
We don't sell your data, and we don't share it with advertisers.
Your rights
If you're in the EU or UK, the GDPR gives you these rights. We extend them to everyone, wherever you are, because running two standards is a good way to get one of them wrong.
- Access — ask what we hold about you and we will tell you.
- Export — get a copy of your data in a machine-readable file.
- Deletion — have your account and data removed.
- Correction — have something wrong about you fixed.
- Objection — tell us to stop a particular use of your data.
- Withdrawal — take back consent you gave, such as the marketing tick box, at any time. It takes effect from then on and costs you nothing else.
- Complaint — raise it with your national data protection authority if we handle it badly.
Write to assistteam2026@gmail.com from an account we can tie to yours, or ask in Discord. We aim to respond within 30 days.
Children
Discord requires users to be at least 13, and older in some countries. Ash isn't intended for anyone below the minimum age for their country. If we learn we're holding data about a child below that age, we delete it.
Changes to this policy
If we change something material — new data, new third party, new purpose — we will update this page and announce it in the Discord before it takes effect. The date at the top always reflects the current version.