Privacy Policy

This Privacy Policy explains how ClutchOdds ("we", "us") collects, uses, and shares information about you when you use the Service.

1. Information We Collect

• Account data: email, display name, password hash, OAuth identifiers (e.g. Google sub).
• Subscription data: plan, status, period dates, and a Stripe customer ID. We do not store full card numbers — all card data is handled by Stripe.
• Usage data: pages viewed, predictions saved, watchlist items, in-app actions, device/browser info, IP address.
• Communications: support requests and emails you send us.

2. How We Use Information

• To provide and personalize the Service.
• To process payments, taxes, and subscriptions.
• To send transactional emails (receipts, password resets, security alerts).
• To detect, prevent, and respond to fraud or abuse.
• To comply with legal obligations.

3. Sharing

We share data only with service providers strictly necessary to operate the Service:

• Stripe — payment processing and tax compliance.
• Supabase — authentication and database hosting.
• The Odds API / sports data providers — game and odds data.
• Law enforcement when legally required.

We do not sell your personal information.

4. Cookies

We use a small number of strictly necessary cookies and local storage entries to keep you signed in and remember your preferences. We do not use third-party advertising cookies.

5. Data Retention

We retain account data for as long as your account is active. When you delete your account, personal data is removed within 30 days, except where retention is required by law (e.g., tax records for 7 years).

6. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have rights to access, correct, delete, export, or restrict processing of your data. You can exercise these from Account Settings or by emailing privacy@clutchodds.app.

7. Security

We use encryption in transit (TLS), row-level security on our database, and industry-standard authentication. No system is 100% secure — please use a strong, unique password.

8. Children

The Service is not directed to children under 18 and we do not knowingly collect data from them.

9. International Transfers

Data may be processed in the United States and other countries where our providers operate. Where required, transfers rely on Standard Contractual Clauses.

10. Changes

We will notify you of material changes. The "Last updated" date above reflects the current version.