Privacy Policy

This policy is published by Ai sports betting pro LLC, which operates AI Sports Betting Pro. We collect the minimum information needed to run the subscription and deliver picks. We don’t sell your data, we don’t share it with advertisers, and we don’t use behavioral profiling. Here’s the full picture.

1. What we collect

Information you give us

• Email address — for sign-in and pick delivery
• Payment information — Card details are typed into a secure form hosted by our payment gateway, KAJA. Your full card number and security code never reach our servers. We store the card brand, the last four digits, the address and security-code check results, and the gateway’s customer, transaction and renewal-schedule references for your membership.
• Soul Blueprint preview inputs — if you submit the preview endpoint, it processes your name, birth date, birth time, birth city, and birth country to return that response. These inputs are not written to your subscriber record or used to personalize picks today. Birth city and country are sent to OpenStreetMap Nominatim for geocoding.

Information collected automatically

• Session cookie — an opaque random token used to keep you signed in. It does not expose your email or billing details to client-side code.
• Authentication and checkout-handoff records — your password, stored only as a salted PBKDF2-SHA256 hash (never in readable form); hashed session, email-confirmation, password-reset and Checkout Session identifiers associated with your email; and their expiry or redemption timestamps.
• Request metadata — IP address, user-agent, and timestamps may be processed by Cloudflare and by our security and rate-limit controls.
• Plausible Analytics — the site includes Plausible’s cookieless page-view and event script. It does not use cross-site tracking cookies. Plausible’s data policy covers its processing and retention.

2. What we don’t collect

• No third-party advertising trackers (Google Ads, Meta Pixel, TikTok Pixel, etc.).
• No behavioral profiling for ad targeting.
• No session replay tools.
• No selling or sharing of personal data with data brokers.

3. How we use it

• To send you daily picks and account-related emails.
• To take your first payment and your monthly renewals through KAJA.
• To calculate and return a one-time Soul Blueprint preview if you submit those inputs. The preview is not saved to personalize picks today.
• To prevent abuse and protect the Service.
• To comply with legal obligations (tax records, fraud investigations, etc.).

4. Who we share it with

We only share data with the third-party services we use to operate:

• KAJA — payment processing and monthly renewals. The gateway stores card data to PCI DSS standards.
• Resend — email delivery. Receives recipient email addresses and message contents.
• Cloudflare — hosting, edge security, and the D1 database. Cloudflare’s data-processing terms apply.
• Plausible Analytics — cookieless page-view and event measurement. See its data policy for the data it processes.
• OpenStreetMap Nominatim — receives birth city and country only when the Soul Blueprint preview endpoint needs geocoding. It does not receive your email, payment details, birth date, birth time, or name from us.

Each is bound by their own privacy and security commitments. We don’t share data with anyone else.

5. How long we keep it

• Subscriber, consent, Stripe-reference, authentication, checkout-handoff, pick, grading, delivery, and transactional-email records are retained for service operations, accounting, and fraud prevention. No fixed automated purge schedule currently applies.
• Checkout consent records (time, policy version and IP address) and payment references are kept so we can answer billing questions and card disputes.
• Magic links stop working after 15 minutes and sessions stop working after 30 days. Expired records may remain until cleanup, but authentication checks reject them.
• Cloudflare and Plausible apply the retention periods in their own platform settings and policies.
• You can request deletion under Section 6. We may retain records that law, accounting, fraud prevention, or dispute handling requires us to keep.

6. Your rights

Regardless of your jurisdiction, you can ask us to:

• Show you everything we have about you
• Delete your account and personal data
• Export your data in a portable format
• Correct anything inaccurate

Reply to any email we send, or write to support@aisportsbettingpro.com. We’ll respond within 30 days.

7. Cookies

Our app sets one first-party cookie, asbp_session, which keeps a signed-in session for up to 30 days. It is httpOnly, Secure and SameSite=Lax. We don’t set advertising or analytics cookies. The card form is served by KAJA inside a frame on our checkout page and operates under KAJA’s own policies.

8. Children

The Service is intended for users 21 and older (or older where required by local sports-betting law). We don’t knowingly collect data from anyone under that age. If you believe a minor has registered, contact us and we’ll delete the account.

9. Security

Data in transit is HTTPS-encrypted. Passwords are stored only as salted PBKDF2-SHA256 hashes. Session and emailed link tokens are stored as SHA-256 hashes at rest, and card data is held only by the payment gateway. We use Cloudflare D1 with its default encryption. No system is impenetrable; if we discover a breach affecting your data, we’ll provide notice as required by applicable law.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email. Continued use after a change means you accept the revised policy.

11. Contact

Questions? Write to support@aisportsbettingpro.com or reply to any of our emails.