Privacy Policy

1. Introduction

This Privacy Policy describes how Sportsedge ("we," "us," "our") collects, uses, and protects information when you use Sportsedge (the "Service").

2. Information We Collect

Information you provide:

• Email address (for authentication via magic link)
• Subscription tier and payment status (via Whop)
• Notification preferences
• Communications you send to us

Information collected automatically:

• IP address, browser type, device type, operating system
• Pages visited, time spent, navigation patterns
• Referrer URLs and Meta Pixel events (PageView, Lead, etc.)
• Authentication cookies and session tokens

We do not collect:

• Payment card numbers (handled exclusively by Whop and Stripe)
• Bank account information
• Government identification numbers

3. How We Use Information

• Authenticate your account and manage your subscription
• Provide the Service and personalize content
• Send transactional emails (magic links, billing notices)
• Send notification emails if you opt in
• Diagnose and fix technical issues
• Improve the Service and develop new features
• Measure ad performance via Meta Pixel and Conversions API
• Comply with legal obligations

4. How We Share Information

We share information only with:

• Whop - subscription processing and access management
• Supabase - authentication and database hosting
• Vercel - application hosting
• Resend - email delivery
• Meta (Facebook) - aggregated ad performance data via Pixel and Conversions API
• Sentry / PostHog - error logging and product analytics (when applicable)
• Government authorities, when required by law

We do not sell your personal information to third parties.

5. Cookies and Tracking

We use essential cookies for authentication (required to keep you logged in) and analytics cookies for product and ad measurement. You can control cookies via your browser settings, though disabling essential cookies will prevent login.

We use the Meta Pixel for advertising measurement. Meta receives aggregated event data (page views, lead events, subscription events) but not your detailed activity within the Service. You can manage Meta ad preferences at facebook.com/ads/preferences.

6. Data Retention

We retain account data for as long as your account is active and for up to 24 months after closure for legal, billing, and operational purposes. Authentication logs are retained for 90 days. You can request earlier deletion at any time (see Section 8).

7. Security

We use industry-standard security: encrypted connections (HTTPS), encrypted database connections, hashed authentication tokens, role-based access controls, and regular security reviews. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Opt out of marketing emails (via the unsubscribe link in any email)
• Export your data in a portable format
• Object to certain types of processing

Contact support@sh-tech.io to exercise any of these rights. We will respond within 30 days.

9. International Users

Sportsedge uses cloud infrastructure operated primarily from the United States. By using the Service, you consent to your information being processed in the United States and other jurisdictions where our service providers operate.

10. Children

The Service is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided data to us, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or in-app notification at least 14 days in advance. Continued use after changes take effect constitutes acceptance.

12. Contact

For privacy questions or to exercise your rights, contact: support@sh-tech.io