Draft, pending legal review. This text is not final and may change before launch.

Privacy

Last updated: [date]. [LEGAL ENTITY NAME] ("Linesmith", "we") runs Linesmith. This policy explains what we collect, why, who handles it, and your choices.

1. What we collect

You give us:

• Account: your email address and sign-in details (a password is handled by our sign-in provider; we never see it) or the Google/Apple account you choose to sign in with.
• Subscription: that you subscribe, the plan, trial and billing dates, and your payment status. Your card number is entered on our payment processor's page and is not seen or stored by us. We receive a customer reference, the card brand/last digits [confirm] and a card fingerprint (a code that identifies a card without revealing it), used only to prevent repeat free trials.
• What you save: bets you record (book, stake, price, legs, notes), your slip, pins, tracked lines, settings (favourite sportsbooks, unit size, theme), and alert preferences.
• Bet slips you upload: a screenshot or pasted text, sent to an automated reading service to produce a draft bet (see Section 3). We do not keep the image after the read.
• Messages you send us (support requests, feature requests, bug reports) and anything in them.

We collect automatically:

• Technical data: IP address, device and browser type, pages requested and when, errors. Used to run the service, keep it secure, limit abuse (for example rate limits and bot checks) and fix faults.
• Cookies and similar storage: a sign-in session, and your theme choice (`lb-theme`, `lb-dark-style`) and similar preferences kept in your browser. [LAWYER: cookie notice/consent rules for the target states.]
• Notification data: if you turn on push alerts, a push address for your browser (an endpoint and keys) so we can send you alerts you asked for.
• Product analytics: [we use Cloudflare Web Analytics, which does not use cookies / and a privacy-focused product-analytics tool for key events] [OPERATOR: confirm what is actually switched on at launch; the plan lists both but the code has none today].

We do not: take wagers or money for bets, sell your personal data, or share it with advertisers.

2. Why we use it

To create and run your account; provide Free and Premium; take payments and prevent repeat trials; send the emails and alerts you ask for and service messages (receipts, trial and billing notices, security); keep Linesmith secure and prevent abuse; fix errors and improve the service; and meet legal obligations. [LAWYER: legal bases if GDPR/UK GDPR applies; "business purposes" under state laws.]

3. Who handles it for us ("service providers")

We use providers who process data only to serve us:

• Database and sign-in: Supabase [United States region].
• Hosting, delivery, bot protection and access control: Cloudflare.
• Payments: Stripe.
• Email: Resend.
• Error reporting: Sentry.
• Bet-slip reading: an AI model provider (Anthropic) receives the slip image or text you upload, for that read only. [Confirm their retention and training terms; the lawyer decides whether to name them.]
• Our own servers [hosted by OVHcloud] hold the application and its database for the service. [LAWYER: whether to list each by name or by category; sub-processor change notice; data-processing agreements.] We may also disclose information if the law requires it, to protect rights and safety, or in a sale or merger of the business.

4. How long we keep it

Account and saved items: while your account is open. After you delete your account we delete or de-identify them within [30] days, except what we must keep (for example payment records for [7] years, and a card fingerprint / email hash kept to stop repeat trials [for X]). Backups roll off within [N] days. Error reports and technical logs: [N] days. [OPERATOR/LAWYER: set these; the server keeps daily backups.]

5. Your choices and rights

You can see and change most of your information in your account, turn push and email alerts off, cancel your subscription, export your records (a CSV of your bets is available), and ask us to delete your account at [CONTACT EMAIL]. Depending on where you live you may have the right to know, access, correct, delete, or port your data, to opt out of "sales/sharing" (we do neither), and not to be treated differently for using these rights. We will answer within [45 days]. [LAWYER: state privacy-law notices (California and others), GDPR/UK rights if we serve those users, how to verify a request.]

6. Security

We use encryption in transit, access controls and separate credentials for each part of the system. No system is perfectly secure. Tell us at [CONTACT EMAIL] if you find a problem. [LAWYER: breach-notification promises.]

7. Children

Linesmith is for adults [18/21+] and is not directed to children. We do not knowingly collect data from anyone under [18].

8. Where data goes

Our providers may process data in the United States and elsewhere. [LAWYER: international transfer mechanism if we serve non-US users.]

9. Changes and contact

We will post changes here and tell you of material ones by email or in the app. Questions: [CONTACT EMAIL], [ADDRESS].

Questions: write to the Linesmith contact address, to be added with the final text. Back To Linesmith