Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password (hashed), date of birth (for 21+ verification), state of residence
• Payment Information: Billing details processed through Stripe. We do not store full card numbers or CVVs
• Communication Data: Information you provide when contacting support or responding to surveys
• AI Chat Data: Queries and interactions you submit to the AI assistant
• Linked Sportsbooks (if any): Sportsbook account identifiers you voluntarily link for performance tracking

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, predictions viewed, filters applied, time on Platform
• Device Information: Browser type, operating system, device class (mobile/desktop), screen resolution, language
• Log Data: IP address (truncated to /24 within 7 days), access times, referring URLs, pages viewed
• Cookies and Similar Technologies: See §5 for categories and your controls

1.3 Sensitive Personal Information (CCPA/CPRA)

The CPRA defines "Sensitive Personal Information" (SPI) more broadly than traditional PII. The following categories of SPI may be collected:

• Account log-in credentials (hashed, never stored in plaintext)
• Precise geolocation — never collected; we use state-level only and only when you tell us
• Contents of your AI chat queries — used to generate predictions; not sold
• Inferred betting interests / sport preferences — used to tailor your experience; not sold

You have the right to limit our use of SPI to what is reasonably necessary to provide the Service. To exercise this right see Do Not Sell or Share My Personal Information.

2. How We Use Your Information

We process your information for the following purposes, each with a stated lawful basis (GDPR Article 6) where you are in a jurisdiction where GDPR applies:

3. How We Share Your Information

We do not sell or share your personal information for cross-context behavioral advertising or any other commercial purpose as those terms are defined under the California Privacy Rights Act (CPRA §1798.140).

3.1 Service Providers

We share data with trusted third-party processors strictly to operate the Platform. Each is bound by a data-processing agreement that limits their use to our instructions: Stripe (payment), cloud hosting (currently Vercel + a US-region origin server), email delivery (transactional only), and similar service providers.

3.2 Required Disclosures

• Legal Compliance: When required by law, subpoena, court order, or government request
• Business Transfers: In a merger or asset sale — successor must honor this Policy
• Safety: To protect WagerAdvice, users, or others from imminent harm

4. Data Retention

5. Cookies and Tracking Technologies

Cookie categories and your controls:

Manage your choices in the cookie banner or via the "Cookie settings" link in the footer.

6. Data Security

We implement industry-standard safeguards: TLS in transit, encryption at rest for account credentials (bcrypt) and payment tokens, role-based access control, rate limiting on auth endpoints, and regular dependency security scans. No method is 100% secure; you are responsible for keeping your account credentials confidential.

7. Your Rights and Choices

Depending on your jurisdiction, you may exercise the following rights at no cost. We will respond within 30 days (45 days for CCPA, extendable once by 45 days with notice).

• Right to Know / Access: Request a copy of all personal information we hold about you (CCPA / GDPR Art. 15)
• Right to Delete: Request erasure of your personal information (CCPA / GDPR Art. 17)
• Right to Correct: Request correction of inaccurate data (CPRA / GDPR Art. 16)
• Right to Portability: Receive your data in a structured, machine-readable format (GDPR Art. 20)
• Right to Opt-Out of Sale / Sharing: See the Do Not Sell or Share page — even though we do not currently sell or share, this opt-out remains effective if we ever start
• Right to Limit Use of Sensitive PI: Restrict our use of SPI to what is necessary to provide the Service (CPRA)
• Right to Non-Discrimination: We will not deny service, charge a different price, or provide a different level of service because you exercise these rights
• Right to Object: Object to processing based on legitimate interest (GDPR Art. 21)
• Right to Lodge a Complaint: with your local data protection authority (GDPR Art. 77)

To exercise any right, email privacy@wageradvice.com or use the self-service controls at /data-rewards.

8. California Residents (CCPA / CPRA)

If you reside in California, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the rights listed in §7 above, plus the following specific to California:

• Right to Opt-Out of Sale or Sharing: use the Do Not Sell or Share My Personal Information link, present in the footer of every page
• Right to Limit Use of Sensitive Personal Information: use the same link above
• Authorized Agent: you may designate an authorized agent in writing; we will verify identity before honoring requests
• Annual Disclosure: we will publish each year a count of CCPA requests received, complied with, and denied

Categories of personal information sold or shared in the prior 12 months: None.

9. Children's Privacy

WagerAdvice is restricted to users aged 21 or older (19 in Canada). We do not knowingly collect personal information from anyone under that age. If we learn that we have collected data from a minor we will delete it promptly. Contact privacy@wageradvice.com if you believe a minor has provided us with personal information.

10. Third-Party Links

The Platform may link to third-party sites (sportsbooks, odds providers, affiliate partners). We are not responsible for their privacy practices. Review their policies before submitting information.

11. International Users

WagerAdvice is based in the United States. If you access the Platform from outside the United States, your data may be transferred to and processed in the United States. For users in the European Economic Area, United Kingdom, or Switzerland we rely on Standard Contractual Clauses (Module 2: Controller-to-Processor) for international transfers to processors. By using the Platform you consent to the transfer.

12. Changes to This Privacy Policy

We may update this Policy from time to time. Material changes (especially changes that would introduce data sale or sharing for the first time) will be notified to your registered email at least 30 days in advance, and you will be asked to re-affirm any opt-in consents before the new terms take effect. Non-material changes are posted with the "Last updated" date at the top of this page.

13. Contact Us

Questions or requests: