Privacy Policy

Last updated: June 26, 2026

Complete the [bracketed] fields and confirm the list of service providers matches your live stack before publishing. This policy is written to align with Canada's PIPEDA; a lawyer should review it for your specific setup.

This Privacy Policy explains how OddsShift, operated by [Operator legal name] ("we", "us", "our"), collects, uses, discloses, and protects your personal information when you use our website and services (the "Service"). We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Information we collect

We collect the following categories of information:

Account information — the email address and password you provide when you sign up. Passwords are stored in hashed form by our authentication provider; we never see them in plaintext.
Subscription and payment information — your subscription tier and status, and billing details processed by Stripe. We receive limited information from Stripe (such as your subscription status and the last four digits / card brand) but we do NOT store your full card number.
Bet-tracking data — picks, odds, stakes, dates, and results that you voluntarily log in your account to track your own betting.
Usage and device data — basic technical information such as your IP address, browser type, and pages viewed, collected automatically to operate and secure the Service.
Communications — information you provide when you contact us for support.

2. How we use your information

to create and manage your account and provide the Service;
to process subscriptions, payments, and renewals;
to display and store the bets you choose to track;
to operate, maintain, secure, and improve the Service;
to respond to your support requests and send service-related messages;
to comply with legal obligations and enforce our Terms.

We rely on your consent and on the performance of our contract with you (providing the Service you signed up for) as the basis for these uses. You may withdraw consent as described below, subject to legal or contractual limits.

3. Service providers we share data with

We do not sell your personal information. We share it only with service providers who help us run the Service, under agreements requiring them to protect it:

Supabase — database and authentication (stores your account and bet-tracking data).
Stripe — payment processing and subscription management.
Vercel — website hosting and delivery.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of our users or others.

4. International transfers

Some of our service providers store or process data on servers located outside Canada, including in the United States. As a result, your information may be subject to the laws of those jurisdictions, including lawful access requests by foreign courts or authorities. By using the Service, you acknowledge this transfer.

5. Data retention

We keep your personal information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. You can request deletion of your account as described below.

6. Your privacy rights

Subject to applicable law, you have the right to:

access the personal information we hold about you;
request correction of inaccurate information;
request deletion of your account and associated data;
withdraw your consent to certain processing (which may limit your ability to use the Service);
ask questions or make a complaint about how we handle your information.

To exercise any of these rights, email us at [support email]. We will respond within the time required by law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

7. Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that poses a real risk of significant harm, we will notify affected users and authorities as required by law.

8. Cookies

We use cookies and similar technologies to keep you logged in and to operate the Service. For details, see our Cookie Policy.

9. Children

The Service is intended only for adults of legal gambling age. We do not knowingly collect personal information from anyone under that age. If you believe a minor has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date and, where appropriate, notify you.

11. Contact

For privacy questions or requests, contact our privacy contact at [support email] (mailing address: [business address, if applicable]).

More policies