1. Introduction
AIghtBet Sports LLC ("AIghtBet Sports," "we," "us," or "our"), a Florida limited liability company, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our sports analytics platform and services ("Service").
Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide when you register for an account, subscribe to a paid tier, contact customer support, or participate in surveys or promotions. This information may include:
•
Contact Information: name and email address
•
Account Information: username and encrypted password
•
Payment Information: billing details processed securely through Stripe (we do not store complete credit card numbers)
•
Communication Data: any information you provide when contacting us
2.2 Automatically Collected Information
•
Device Information: IP address, device type, operating system, app version
•
Usage Data: screens viewed, time spent in app, features used
•
Location Data: general geographic location based on IP address (city/state level)
•
Vendor identifier (IDFV): a per-vendor device id surfaced by iOS, used for first-party product analytics within AIghtBet Sports only
We do not collect the Apple Advertising Identifier (IDFA) and we do not track you across other apps or websites owned by other companies.
2.3 Information from Third Parties
•
Authentication providers (Google, social login services)
•
Payment processors (for billing and subscription management)
3. How We Use Your Information
We use the information we collect to:
•
Provide, operate, and maintain the Service
•
Process subscription payments and manage your account
•
Personalize your experience and deliver relevant analytics
•
Communicate with you about your account, updates, and promotional offers
•
Improve our AI models, predictions, and platform functionality
•
Detect, prevent, and address technical issues, fraud, or abuse
•
Comply with legal obligations and enforce our Terms of Service
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our web surface, and equivalent identifiers in the mobile app, to track activity on our Service and remember certain information.
We use the following categories:
•
Essential: required for the Service to function (session, authentication)
•
Analytics: help us understand how users interact with the Service
•
Preference: remember your settings and preferences
We do not track you across other apps or websites owned by other companies. The iOS app does not display the App Tracking Transparency prompt and does not collect the Apple Advertising Identifier (IDFA). Browser cookies can be controlled through your browser settings.
5. How We Share Your Information
We do not sell your personal information. We may share information with:
•
Service Providers: payment processors, hosting providers, analytics services
•
Legal Authorities: when required by law, court order, or to protect our rights
•
Business Transfers: in the event of a merger, acquisition, or sale of assets
•
With Your Consent: when you explicitly authorize disclosure
A complete list of the sub-processors we use is in Section 6 below. Each sub-processor is contractually obligated to protect your information and use it only for the purposes we specify.
6. Sub-processors
The following third-party services ("sub-processors") help us operate the platform. Each one processes a defined slice of personal information on our behalf under a data-processing agreement.
Stripe — payment processing & subscription billing
•
Data processed: name, email, billing address, payment card details (handled directly by Stripe; we do not store complete card numbers)
•
Privacy policy: https://stripe.com/privacy
Supabase — authentication, database, edge functions, storage
•
Data processed: account credentials, profile, predictions, tracked picks, audit logs
•
Privacy policy: https://supabase.com/privacy
Render — backend API hosting
•
Data processed: request metadata, IP address, server logs
•
Privacy policy: https://render.com/privacy
Vercel — web frontend hosting & edge delivery (universal links)
•
Data processed: request metadata, IP address, edge logs
•
Privacy policy: https://vercel.com/legal/privacy-policy
PostHog — product analytics & feature flags
•
Data processed: pseudonymous user ID, screen views, click events, device metadata
•
Privacy policy: https://posthog.com/privacy
Sentry — error tracking & session replay
•
Data processed: error stack traces, breadcrumbs, request metadata, optional session replay
•
Privacy policy: https://sentry.io/privacy/
Anthropic — AI prediction generation (Claude Haiku)
•
Data processed: game stats and prompts only (no user PII sent to Anthropic)
•
Privacy policy: https://www.anthropic.com/legal/privacy
RevenueCat — iOS subscription receipt validation
•
Data processed: Apple transaction ID, anonymous app user ID, subscription entitlement state
•
Privacy policy: https://www.revenuecat.com/privacy
We update this list when sub-processors are added, removed, or replaced.
7. Data Security
We implement industry-standard security measures, including encrypted password storage, HTTPS-only transport, and access controls. However, no method of transmission over the internet is 100% secure.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention timelines:
•
Account data: retained while your account is active and for 90 days after account deletion, for legal compliance and abuse prevention
•
Prediction interaction history: retained for 2 years for product quality improvement and closing-line-value (CLV) reconciliation
•
Anonymized analytics data: retained for up to 24 months
•
Verified deletion requests under CCPA / CPRA / GDPR are processed within 30 days of identity verification
When information is no longer needed for these purposes, we securely delete or anonymize it, except where retention is required by law (e.g., tax records, fraud-investigation holds).
9. Your Privacy Rights
9.1 General Rights
Depending on your jurisdiction, you may have the right to:
•
Access the personal information we hold about you
•
Request correction of inaccurate information
•
Request deletion of your information
•
Object to or restrict certain processing
•
Data portability (a copy of your data in a structured format)
•
Opt out of marketing communications
9.2 California Residents (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
•
Right to Know: request disclosure of categories and specific pieces of personal information we collect
•
Right to Delete: request deletion of your personal information
•
Right to Opt-Out: opt out of the "sale" or "sharing" of personal information (we do not sell personal information)
•
Right to Correct: request correction of inaccurate personal information
•
Right to Limit: limit use and disclosure of sensitive personal information
•
Right to Non-Discrimination: not receive discriminatory treatment for exercising your privacy rights
Categories of personal information we collect under the CCPA: identifiers (name, email, IP address), commercial information (subscription history, purchase records), internet activity (browsing history, interactions with our Service), geolocation data (general location from IP address), and inferences (preferences, behavior patterns for personalization). We do not sell your personal information to third parties.
9.3 Other State Privacy Rights
Residents of Virginia, Colorado, Connecticut, and Utah have similar privacy rights under their respective state laws. Please contact us to exercise these rights.
9.4 How to Exercise Your Rights
To exercise any of these rights, email us at
[email protected]. We will verify your identity before processing your request and respond within the timeframes required by applicable law (typically 30–45 days).
10. Children's Privacy
The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.
11. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers.
12. Third-Party Services
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. Please review their privacy policies separately.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date.
14. Do Not Track Signals
Some browsers support a "Do Not Track" (DNT) feature. There is currently no industry standard for responding to DNT signals, and our Service does not respond to them at this time. We will update this policy if we adopt a DNT standard in the future.
15. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at
[email protected].