Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Profile Data: State of residence, date of birth (for age verification), gender
• Payment Information: Processed securely via Stripe (we do NOT store credit card numbers)
• Communications: Support tickets, emails, feedback

1.2 Information We Collect Automatically

• Device Information: Device ID, browser type, operating system, screen resolution
• IP Address & Location: IP address, approximate geographic location (city/state level)
• Usage Data: Pages viewed, features used, time spent, click patterns
• Security Data: Login attempts, device fingerprints, VPN/proxy detection
• Analytics: Performance metrics, error logs, user journey data

1.3 Cookies and Tracking Technologies

• Essential Cookies: Required for authentication and security
• Analytics Cookies: Help us understand usage patterns (can be disabled)
• Preference Cookies: Remember your settings and preferences
• Third-Party: Stripe for payments, Plausible for privacy-focused analytics

2. How We Use Your Information

2.1 Service Provision

• Provide personalized lottery analytics and recommendations
• Process subscriptions and payments
• Send daily picks and notifications (with your consent)
• Verify age and jurisdiction for legal compliance

2.2 Security & Fraud Prevention

• Detect and prevent fraudulent accounts
• Monitor for suspicious activity patterns
• Enforce our Terms of Service
• Protect against unauthorized access

2.3 Analytics & Improvement

• Analyze usage patterns to improve our algorithms
• Generate aggregated insights for investors (anonymized)
• Optimize user experience and performance
• Conduct A/B testing for features

3. Data Security & Retention

3.1 Security Measures

• 256-bit SSL encryption for all data transmission
• Bcrypt hashing for password storage
• Two-factor authentication available
• Regular security audits and penetration testing
• PCI DSS compliant payment processing via Stripe
• Device fingerprinting and anomaly detection

3.2 Data Retention

• Account Data: Retained while account is active + 90 days
• Transaction Records: 7 years for tax/legal compliance
• IP Logs: 90 days for security purposes
• Analytics Data: Aggregated after 180 days
• Marketing Data: Until consent withdrawn

4. Data Sharing & Third Parties

4.1 We DO NOT Sell Your Data

We will NEVER sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers We Use

• Stripe: Payment processing (PCI DSS compliant)
• Vercel: Hosting and infrastructure
• Supabase: Database services (SOC 2 compliant)
• Resend: Transactional email delivery
• Plausible: Privacy-focused analytics (no cookies)

4.3 Legal Disclosures

We may disclose information if required by law, court order, or to:

• Comply with legal obligations
• Protect our rights and safety
• Prevent fraud or illegal activities
• Respond to government requests

5. Your Rights & Choices

5.1 Your Rights (GDPR/CCPA)

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Export your data in machine-readable format
• Restriction: Limit how we process your data
• Objection: Opt-out of certain data uses
• Non-Discrimination: No penalty for exercising rights

5.2 How to Exercise Rights

Email privacy@okapiodds.com with your request. We will respond within 30 days. For verification, we may require proof of identity.

5.3 Opt-Out Options

• Marketing Emails: Unsubscribe link in every email
• Analytics: Disable in account settings
• Cookies: Manage via browser settings
• Push Notifications: Disable in device settings

6. Legal Basis & Compliance

6.1 Legal Basis for Processing (GDPR)

• Contract: Necessary to provide our services
• Consent: For marketing and optional features
• Legitimate Interest: Security, fraud prevention, analytics
• Legal Obligation: Tax records, legal compliance

6.2 International Transfers

Your data may be transferred to and processed in the United States. We use Standard Contractual Clauses and ensure adequate protection for international transfers.

6.3 Children's Privacy

Our service is strictly for users 21 years or older. We do not knowingly collect data from anyone under 21. If we discover underage data, we will delete it immediately.

7. AI & Algorithm Transparency

7.1 How Our AI Works

• Analyzes publicly available lottery data
• Calculates expected value based on odds and prizes
• No "insider information" or manipulation
• Cannot predict random number drawings

7.2 Data Used for AI

• Public lottery game information
• Historical prize data (anonymized)
• Aggregated user preferences (opt-in)
• NO personal financial information

8. Contact Information

9. Changes to Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be notified via email or prominent notice on our website at least 30 days before the effective date. Continued use after changes constitutes acceptance.