Privacy Policy
Last updated 25 April 2026 · Effective 25 April 2026
This Privacy Policy explains how Odds Uni ("Odds Uni", "we", "our", or "us") collects, uses, shares, and protects information when you visit oddsuni.com, odduni.com, or any related site, mobile experience, or product surface (collectively, the "Service"). It covers both visitors who browse without an account and registered subscribers.
Odds Uni is a pregame sports betting intelligence and analytics platform. We surface odds from licensed sportsbooks, generate model-driven picks and analysis, and let users build informational accumulator slips. We do notaccept wagers, hold customer funds, or operate a sportsbook. Any actual bet you choose to place happens with a third-party sportsbook of your choosing, under that operator's terms and privacy policy.
1. Who this policy applies to
This policy applies to the Service. It does not apply to third-party sites we link to (sportsbooks, ESPN, news outlets, etc.) — those operate under their own privacy terms. The Service is intended for users who are at least 18 years old(21+ in jurisdictions where that is the legal age for sports wagering). We do not knowingly collect personal information from people under those ages.
2. Information we collect
2.1 Information you provide directly
- Account information. If you create an account (via our auth provider, Clerk), we receive your email address, a hashed password (or your OAuth identifier for Google/Apple sign-in), an optional username and display name, and any profile details you choose to add (avatar, short bio).
- Subscription & payment information. If you subscribe to a paid tier, payment is processed by Stripe. Stripe receives your card details and billing address directly — we never see or store full card numbers. We retain a Stripe customer ID, the plan you're on, your subscription status, and billing-event metadata (renewals, refunds, chargebacks).
- Content you submit. Saved slips you bookmark, accumulators you post to the community feed, comments, reactions, and your watchlist of teams. You choose whether each saved slip or post is public, followers-only, or private.
- Communications. If you email us or use a contact form, we keep the message and our reply for as long as needed to handle the request.
2.2 Information collected automatically
- Server logs. Standard request metadata — IP address, user-agent string, request path, timestamp, response status, referrer. Used for abuse detection, performance monitoring, and security. Retained for up to 30 days unless required longer for an incident or legal obligation.
- Device & usage signals. Coarse browser/device class (mobile vs desktop), screen size category, and which pages you view. We do not fingerprint you and do not run third-party advertising trackers.
- Local storage.Your browser's local storage holds your working selection slip, your watchlist, your odds-format preference (decimal vs American), and UI state (drawer open/closed, theme). This data lives on your device and is never sent to our servers unless you explicitly take an action that requires it (e.g. saving a slip to your account, sharing a slip via URL).
- Cookies.We use a small number of strictly-necessary cookies for authentication and session management when you're signed in. We do not set advertising or cross-site tracking cookies.
2.3 Information from third parties
- Authentication providers. If you sign in with Google or Apple via Clerk, the provider sends us your email and (for Google) the public profile fields you authorise. We never receive your password.
- Sports data. Game schedules, scores, standings, box scores, and team metadata come from public ESPN endpoints. Odds come from The Odds API. These feeds describe games and lines — they are not information about you.
3. How we use information
- To operate, secure, and improve the Service.
- To generate the picks, analyses, accumulators, and risk warnings the Service provides.
- To personalise what you see (e.g. surfacing teams in your watchlist, showing slips you've saved, applying your odds-format preference).
- To process and bill subscriptions, send transactional emails (receipts, important account notices), and provide customer support.
- To detect, investigate, and prevent fraud, abuse, automated scraping, and security threats.
- To comply with legal and regulatory obligations.
What we do not do:we do not sell your personal information, we do not share it with advertisers, and we do not use your data to train third-party AI models. When we send a query to Anthropic's Claude API to synthesise pick analysis, the prompt contains only sports context (team names, form, odds, model confidence) — no account-identifying information.
4. Sharing & service providers
We share information only with vendors who help us run the Service, under contracts that limit how they may use it. Our current core vendors:
- Vercel — application hosting, edge network, log storage. Receives request metadata for the pages you load.
- Neon (Postgres) — primary database for accounts, saved slips, posts, and our prediction-lock history. Hosted in AWS us-east-1.
- Upstash (Redis) — short-lived caching for odds and rate-limit state. Does not store account-level data.
- Clerk — authentication and session management. Stores hashed credentials, device sessions, and password-reset tokens on our behalf.
- Stripe — payment processing. Stripe is the controller for full card data; we receive only tokens and high-level subscription status.
- Anthropic — Claude API for narrative synthesis. Receives game context only, never your account info or behaviour history.
- The Odds API and ESPN — outbound only; we send a sport key and (for ESPN) a public team or event ID. Neither receives any information about you.
We may also disclose information when required by valid legal process, to protect the rights, property, or safety of our users or the public, or in connection with a merger, acquisition, financing, or sale of assets — in which case we'll notify you in advance and your rights under this policy will continue.
5. Where data is processed
Our infrastructure is located in the United States. If you are in the EU, UK, or another region with cross-border transfer rules, by using the Service you consent to your information being processed in the United States and other jurisdictions where our service providers operate. We rely on standard contractual clauses or equivalent safeguards where required.
6. Data retention
- Account data: retained while your account is active. If you delete your account, we remove personal identifiers within 30 days. Anonymised aggregates (e.g. that some user saved a slip) may persist.
- Payment records: retained for the period required by tax, accounting, and consumer-protection law (typically 7 years) — managed by Stripe.
- Saved slips and posts: until you delete them or close your account.
- Server logs: up to 30 days, except where retained for an active security investigation.
- Locked daily slates and graded outcomes: retained indefinitely as part of our public transparency record. These records are about games, not about you, and contain no user-identifying information.
7. Your rights and choices
You can, at any time:
- Access the personal information associated with your account by opening account settings or by emailing us.
- Correct inaccurate information through your profile settings or by contacting us.
- Delete your account and associated personal information by using the delete-account control in settings or by emailing us.
- Export a copy of your account data in a machine-readable format on request.
- Opt out of non-essential email by using the unsubscribe link in any non-transactional message.
- Clear local storageat any time using your browser's tools.
7.1 EU/UK residents (GDPR / UK GDPR)
Our legal bases for processing your information are: (a) performance of a contract when you use account features or a paid subscription; (b) legitimate interests in operating, securing, and improving the Service; and (c) consent for any optional processing we explicitly request. You have the right to access, correct, delete, restrict, or port your information, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with your local supervisory authority.
7.2 California residents (CCPA / CPRA)
California residents have the right to know what categories of personal information we've collected, the sources, the business purposes, and the categories of third parties we share with — all of which are listed in this policy. You also have the right to request deletion of your personal information and the right not to be discriminated against for exercising any of these rights. We do not sell personal information and do not knowingly "share" it for cross-context behavioural advertising as defined under the CPRA.
7.3 How to exercise these rights
Email privacy@oddsuni.comfrom the address associated with your account, or use the controls in account settings. We'll respond within the timeframes required by applicable law (typically 30–45 days). We may need to verify your identity before fulfilling certain requests.
8. Security
We take reasonable technical and organisational measures to protect your information — TLS in transit, encryption at rest for our database, scoped access controls, password hashing through Clerk, and tokenised payment handling through Stripe. No method of transmission or storage is 100% secure. If we discover a security breach affecting your data, we will notify affected users and authorities as required by law.
9. Children's privacy
The Service is intended for users 18 years of age or older (or the local minimum legal age for accessing sports betting content where higher). We do not knowingly collect personal information from anyone below that age. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.
10. Responsible gambling
Sports betting carries financial risk. Odds Uni provides information and analysis, not betting advice or guarantees of outcome. If you or someone you know is struggling with gambling: in the US, call or text the National Council on Problem Gambling helpline at 1-800-GAMBLER. In the UK, contact GamCare at 0808 8020 133. We support self-exclusion and gambling-help signals and do not target users we have reason to believe are at risk.
11. Not a sportsbook
Odds Uni does not accept wagers, hold deposits, or settle bets. We compare and analyse the prices that licensed sportsbooks have published. Any actual transaction you make happens with the sportsbook of your choosing, under their own terms, privacy policy, and regulatory framework. We are not responsible for that relationship.
12. Changes to this policy
We may revise this policy from time to time. The "Last updated" date at the top tells you when. Material changes will be announced through the Service or by email to account holders. Your continued use of the Service after changes take effect means you accept the revised policy.
13. Contact
Questions or requests about this policy or your information: email privacy@oddsuni.com. For general support: support@oddsuni.com.