🔒 PRIVACY POLICY

1. INFORMATION WE COLLECT

📝 Information You Provide Directly

• Account Information: Name, email address, password (encrypted)
• Payment Information: Processed by Stripe (we don't store credit card numbers)
• Communication Data: Messages sent to our support team
• Preferences: Analytics preferences, notification settings, sport interests
• Age Verification: Confirmation that you are 18+ (required by law)

🔍 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent on service
• Device Information: Browser type, operating system, IP address (anonymized)
• Log Data: Error logs, access logs for security and debugging
• Analytics Data: How you interact with our sports analytics tools

🍪 Cookies and Tracking Technologies

• Essential Cookies: Required for login, security, and basic functionality
• Analytics Cookies: Help us improve our service (Google Analytics)
• Preference Cookies: Remember your settings and choices
• Security Cookies: Protect against fraud and unauthorized access

Note: We DO NOT sell your personal data to third parties. We DO NOT use your data for gambling or betting purposes.

2. HOW WE USE YOUR INFORMATION

🛠️ Service Provision (Contract Performance)

• Account Management: Create and maintain your user account
• Service Delivery: Provide sports analytics, predictions, and dashboard access
• Payment Processing: Handle subscription billing through Stripe
• Customer Support: Respond to your questions and technical issues
• Security: Protect your account and prevent unauthorized access

📈 Business Operations (Legitimate Interests)

• Service Improvement: Analyze usage patterns to enhance features
• Bug Fixes: Identify and resolve technical issues
• Performance Monitoring: Ensure optimal service availability
• Fraud Prevention: Detect and prevent fraudulent activities
• Content Personalization: Customize your sports analytics experience

⚖️ Legal Compliance

• Age Verification: Ensure users are 18+ as required by law
• Tax Compliance: Maintain financial records for tax purposes
• Legal Requests: Respond to valid legal process when required
• Terms Enforcement: Investigate violations of our Terms of Service

📢 Communications (With Your Consent)

• Service Updates: Important notifications about your account
• Security Alerts: Notifications about account security
• Promotional Content: Sports insights and feature announcements (opt-out available)

We DO NOT: Use your data for gambling advice, sell data to third parties, or use data for purposes unrelated to our sports analytics service.

3. DATA SECURITY AND PROTECTION

🛡️ Technical Safeguards

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Secure Hosting: Data hosted on secure cloud infrastructure
• Access Controls: Limited employee access on need-to-know basis
• Authentication: Multi-factor authentication for administrative access
• Regular Updates: Security patches applied promptly
• Monitoring: 24/7 security monitoring and incident detection

🔐 Administrative Safeguards

• Background Checks: All employees undergo security screening
• Training: Regular privacy and security training for staff
• Incident Response: Defined procedures for security breaches
• Data Minimization: Collect and retain only necessary data
• Vendor Management: Third-party security assessments

⚠️ Security Limitations

• No internet transmission is 100% secure
• You are responsible for keeping your password secure
• Report suspected account breaches immediately
• We cannot guarantee absolute security but follow best practices

4. 🇪🇺 EUROPEAN UNION (GDPR) RIGHTS

🔑 Your GDPR Rights Include:

• Right of Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your personal data
• Right to Data Portability: Receive your data in machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications
• Right to Lodge Complaints: File complaints with your national data protection authority

⏱️ Response Times

• We will respond to GDPR requests within 30 days
• Complex requests may take up to 60 days with notification
• We may request identity verification before processing requests
• Some data may be retained for legal compliance despite deletion requests

🌍 Data Transfers

• Data may be transferred outside the EU for service provision
• All transfers protected by adequate safeguards (Standard Contractual Clauses)
• Third-party processors (like Stripe) maintain GDPR compliance
• Data processing agreements in place with all vendors

EU Residents Contact: For GDPR requests, email realelliotastern@gmail.com with "GDPR Request" in the subject line.

5. 🇺🇸 CALIFORNIA RESIDENTS (CCPA/CPRA) RIGHTS

📊 Categories of Personal Information We Collect

• Identifiers: Name, email address, account username
• Commercial Information: Subscription history, payment records
• Internet Activity: Website usage, feature interactions
• Geolocation Data: Approximate location based on IP address
• Inferences: Sports preferences, usage patterns

🔒 Your California Privacy Rights

• Right to Know: What personal information we collect, use, or sell
• Right to Delete: Request deletion of personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of sale/sharing of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices
• Right to Limit Sensitive Data: Limit use of sensitive personal information

📞 How to Exercise Your Rights

• Email us at realelliotastern@gmail.com
• Include "CCPA Request" in the subject line
• Provide sufficient information for us to verify your identity
• Specify which right you wish to exercise

⏱️ Response Timeline

• We will acknowledge receipt within 10 days
• We will respond within 45 days (extendable to 90 days if complex)
• Identity verification may be required before processing

6. 🍪 COMPREHENSIVE COOKIE POLICY

🔧 Essential Cookies (Always Active)

• Authentication Cookies: Keep you logged in securely
• Security Cookies: Protect against CSRF attacks
• Session Cookies: Maintain your session state
• Preference Cookies: Remember your dashboard settings

📊 Analytics Cookies (Can Be Disabled)

• Google Analytics: Understand how users interact with our service
• Usage Tracking: Measure feature popularity and performance
• Error Tracking: Identify and fix technical issues

🎯 Functional Cookies (Can Be Disabled)

• Sport Preferences: Remember your favorite sports
• Display Settings: Remember dashboard customizations
• Notification Settings: Remember your communication preferences

⚙️ Managing Cookies

• Browser Settings: Configure cookie preferences in your browser
• Opt-Out Links: Use Google Analytics opt-out browser add-on
• Account Settings: Manage functional cookies in your account preferences
• Impact: Disabling cookies may limit functionality

🌍 International Cookie Compliance

• EU ePrivacy: Cookie consent management for EU visitors
• UK GDPR: Cookie preferences for UK users
• Brazil LGPD: Cookie controls for Brazilian users

Cookie Consent: By using our service, you consent to our use of essential cookies. You can manage optional cookies through your browser or account settings.

7. 🌎 INTERNATIONAL USERS AND DATA TRANSFERS

🏛️ Legal Frameworks We Follow

• 🇪🇺 GDPR (European Union): General Data Protection Regulation
• 🇺🇸 CCPA/CPRA (California): California Consumer Privacy Act
• 🇨🇦 PIPEDA (Canada): Personal Information Protection and Electronic Documents Act
• 🇧🇷 LGPD (Brazil): Lei Geral de Proteção de Dados
• 🇯🇵 APPI (Japan): Act on Personal Information Protection
• 🇦🇺 Privacy Act (Australia): Australian Privacy Principles
• 🇬🇧 UK GDPR (United Kingdom): UK General Data Protection Regulation

🔒 International Data Transfer Safeguards

• Standard Contractual Clauses (SCCs): EU-approved data transfer mechanisms
• Adequacy Decisions: Transfer to countries with adequate protection
• Binding Corporate Rules: Internal data transfer policies
• Vendor Agreements: Data processing agreements with all third parties

📍 Age Restrictions by Country

• 🇺🇸 United States: Must be 18+ (COPPA compliance)
• 🇪🇺 European Union: Must be 16+ or have parental consent
• 🇨🇦 Canada: Must be 18+ or age of majority in province
• 🇦🇺 Australia: Must be 18+ or have parental consent
• 🇧🇷 Brazil: Must be 18+ under LGPD requirements

🚫 Geographic Restrictions

• Our service may not be available in all countries
• Some countries restrict access to sports analytics platforms
• We comply with local laws regarding online services
• Users are responsible for compliance with local laws

International Contacts: For privacy matters in your jurisdiction, email realelliotastern@gmail.com and specify your country/region.

8. 🤝 DATA SHARING AND THIRD-PARTY DISCLOSURES

✅ Approved Data Sharing (Limited Purposes Only)

• 💳 Stripe (Payment Processing): Payment information for subscription billing
• 📧 Email Service Providers: Email addresses for service communications
• 📊 Google Analytics: Anonymized usage data for service improvement
• ☁️ Cloud Infrastructure: Hosting providers with strict data protection agreements
• 🛠️ Customer Support Tools: Support ticket systems for customer service

⚖️ Legal Disclosures (Only When Required)

• Court Orders: Valid legal process and subpoenas
• Law Enforcement: When required by applicable law
• National Security: Valid government requests (with legal review)
• Terms Violations: Investigation of suspected fraud or abuse

🚫 What We NEVER Do

• ❌ Sell Personal Data: We never sell your information to third parties
• ❌ Marketing Partners: We don't share data for marketing purposes
• ❌ Data Brokers: We don't work with data brokers
• ❌ Gambling Companies: No data sharing with betting or gambling sites
• ❌ Social Media: No automatic posting to your social accounts

🔒 Third-Party Security Requirements

• All vendors must sign data processing agreements
• Regular security assessments of third-party providers
• Contractual requirements for data protection
• Limited data access on need-to-know basis only

9. 📅 DATA RETENTION AND DELETION

👤 Account Data Retention

• Active Accounts: Data retained while account is active
• Inactive Accounts: Data deleted after 3 years of inactivity
• Closed Accounts: Personal data deleted within 30 days
• Anonymized Data: Usage analytics may be retained indefinitely

💳 Financial Data Retention

• Payment Records: Retained for 7 years for tax compliance
• Subscription History: Retained for 7 years for financial records
• Refund Records: Retained for 7 years per financial regulations
• Credit Card Info: Never stored (handled by Stripe)

🔒 Security and Legal Data

• Security Logs: Retained for 2 years for security monitoring
• Legal Disputes: Data retained until resolution + 3 years
• Fraud Prevention: Suspicious activity records kept 5 years
• Compliance Records: Retained as required by applicable law

🗑️ Data Deletion Process

• Automated Deletion: Old data automatically purged per schedule
• Manual Requests: User-requested deletions processed within 30 days
• Backup Retention: Data may persist in backups for 90 days
• Legal Holds: Some data cannot be deleted during legal proceedings

📧 How to Request Data Deletion

• Email realelliotastern@gmail.com with deletion request
• Include your account email and reason for deletion
• We will confirm identity before processing
• Some data may be retained for legal compliance

10. 📱 CHILDREN'S PRIVACY

• Age Requirement: Users must be 18+ to create accounts
• No Knowing Collection: We don't knowingly collect data from minors
• Parental Notification: Parents should contact us if children have accessed our service
• Immediate Deletion: We will delete any data from users under 18
• COPPA Compliance: We follow Children's Online Privacy Protection Act
• International Standards: Comply with child privacy laws globally

If you believe a child under 18 has provided information to us, please contact realelliotastern@gmail.com immediately.

11. 🔄 PRIVACY POLICY CHANGES

• Change Notifications: We will notify users of material privacy policy changes
• Email Alerts: Important changes will be emailed to account holders
• Website Notice: Changes will be posted prominently on our website
• Effective Date: Changes become effective 30 days after notification
• Continued Use: Using our service after changes indicates acceptance
• Opt-Out Rights: You can close your account if you disagree with changes