Privacy Policy

1. Who We Are

Oddlyx is an NBA odds intelligence platform operated as an unincorporated business. We provide real-time odds aggregation, consensus analysis, and EV signals through a web dashboard and API. References to "Oddlyx", "we", "us", or "our" in this policy refer to the operators of oddlyx.com.

2. What Data We Collect

2.1 Information you provide directly

• Name and email address (when you create an account)
• Payment information (processed and stored by Stripe — we never see or store your full card details)
• Onboarding survey responses (optional, used to personalize your experience)
• Support communications (emails sent to support@oddlyx.com)

2.2 Information collected automatically

• Usage data: pages visited, features used, session duration, clicks on dashboard elements
• API usage: endpoint calls, request volume, timestamps (used for rate limiting and billing)
• Device and browser information: browser type, operating system, screen resolution
• IP address: used for security, fraud prevention, and approximate location
• Cookies and local storage: used for authentication and session management

2.3 Information we do not collect

• We do not collect your betting history, wager amounts, or sportsbook account details
• We do not collect payment card numbers — all payment processing is handled by Stripe
• We do not purchase or import third-party data about you
• We do not use tracking pixels or third-party advertising trackers

3. How We Use Your Data

We use the data we collect to:

• Create and manage your account
• Deliver the services you have subscribed to
• Process payments and manage billing through Stripe
• Enforce API rate limits tied to your subscription plan
• Improve the platform — understanding which features are used helps us prioritize development
• Send transactional emails: account creation, billing receipts, password resets
• Respond to support requests
• Detect and prevent fraud, abuse, or violations of our Terms of Service

We do not use your data to serve advertising. We do not sell, rent, or trade your personal data to any third party for marketing purposes. Ever.

4. Cookies & Tracking

Oddlyx uses cookies and similar technologies for the following purposes:

• Authentication: to keep you logged in across sessions
• Session management: to maintain your preferences and dashboard state
• Analytics: we use privacy-focused analytics to understand aggregate usage patterns (no individual tracking)

You can disable cookies in your browser settings. Doing so may affect your ability to log in or use certain features of the platform.

5. Data Sharing & Third Parties

We share your data only in the following limited circumstances:

5.1 Service providers

We work with a small number of trusted third-party services that help us operate the platform:

• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• MongoDB Atlas — database hosting. Your account data is stored on encrypted servers.
• Vercel / hosting provider — web infrastructure. They process request data as part of delivering the service.

All service providers are contractually required to handle your data securely and only for the purposes we specify.

5.2 Legal requirements

We may disclose your data if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our legal rights or prevent harm.

5.3 Business transfers

If Oddlyx is acquired, merged, or its assets are transferred, your data may be transferred as part of that transaction. We will notify you via email before your data becomes subject to a different privacy policy.

5.4 We do not sell your data

Oddlyx does not sell, rent, license, or trade your personal data to any third party for any commercial purpose. This is not a disclaimer — it is a core operating principle.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data: retained for the duration of your account plus 90 days after deletion
• Billing records: retained for 7 years as required for financial record-keeping
• API usage logs: retained for 90 days for billing and security purposes
• Support emails: retained for 2 years

You may request deletion of your account and associated data at any time by emailing support@oddlyx.com. We will process deletion requests within 30 days, except where retention is required by law.

7. Security

We take reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption on all data transmitted to and from oddlyx.com
• Encrypted database storage
• API key hashing — we do not store your API keys in plaintext
• Access controls limiting which team members can access user data

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law and take immediate steps to mitigate harm.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate or incomplete data
• Deletion: request that we delete your personal data
• Portability: request your data in a machine-readable format
• Objection: object to certain types of processing, such as analytics
• Withdrawal of consent: withdraw consent where processing is based on consent

To exercise any of these rights, email support@oddlyx.com with the subject line "Privacy Request." We will respond within 30 days. We may need to verify your identity before processing your request.

9. Children's Privacy

Oddlyx is not intended for users under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us at support@oddlyx.com and we will delete it promptly.

10. International Users

Oddlyx is operated from servers that may be located in the United States or other jurisdictions. If you access Oddlyx from outside the United States, your data may be transferred to and processed in a country with different data protection laws than your own.

By using Oddlyx, you consent to this transfer. We will update this section with more specific details upon formal incorporation and once we have established our primary place of business.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of Oddlyx after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy, please contact us:

Email: support@oddlyx.com
Subject line: "Privacy Request" for data-related inquiries
Website: oddlyx.com

We will always respond to privacy-related inquiries within 30 days.