Privacy Policy

1. Who is responsible for your data

OddsRay is an independently developed platform run by a solo founder based in Portugal. The operator of this independent project is responsible for the personal-data processing described in this notice. For privacy questions and requests, contact contact@oddsray.com.

This policy covers the website, application, staging preview, and available import features. External sportsbooks and other websites have their own privacy arrangements for their separate services.

2. Information we process and its sources

• Account information: your name, email address, authentication information, and session records. At signup we also record your age confirmation, the Terms version you accept and its timestamp, and the Privacy Policy version shown to you and its timestamp.
• Betting records: events, selections, markets, sportsbooks, dates, stakes, odds, outcomes, notes, strategies, and calculations or classifications derived from your records.
• Import material: screenshots, supported documents, and source records submitted through available import features. Original bookmaker source information can be stored alongside processed records for verification and reprocessing.
• Support communications: messages, contact details, and information you provide when asking for help or exercising your rights.
• Technical information: session IP addresses and browser information, request and error metadata, and operational logs needed for authentication, security, and troubleshooting.
• Website usage information: the visit information described in the website analytics section.

We obtain information directly from you, through your use of OddsRay, and from source records you choose to enter or import through supported integrations. Available import methods depend on the current release.

Do not submit unnecessary information about other people. Remove passwords, access tokens, identification documents, and payment-card details from import material.

3. Purposes and legal bases

We process account details, betting records, and import material to provide the functions you request, manage your account, and answer service-related requests. Where processing is objectively necessary to provide the agreed service, our basis is performance of our contract with you or steps you request before entering that contract.

Necessary technical and security processing supports preventing abuse, investigating incidents, and keeping the service reliable. For those purposes, we rely on our legitimate interests in protecting OddsRay and its users, where those interests are not overridden by your rights. We also rely on legitimate interests where necessary to establish, exercise, or defend legal claims.

Where a specific legal obligation requires processing or retention, we rely on that obligation. Agreement to the Terms is not blanket consent to personal-data processing. Where we request consent for an optional purpose, you can refuse or withdraw it without losing unrelated service functions.

4. AI-assisted imports and matching

Available AI-assisted features use OpenAI to extract betting-record fields and reconcile inconsistent market names. Depending on the feature, submitted image contents, relevant extracted information, or record labels are sent to the provider. This material can contain personal information visible in your submission. Not every import requires AI processing.

We do not sell your betting records or use them to train our own AI models. External providers process submitted content under their applicable API terms and account settings; their processing and retention are separate from our self-hosted record storage. Contact us for information about the arrangements applicable to an import feature.

Automated extraction and matching can be inaccurate. Review the results before relying on them.

5. Service providers and other recipients

The core application and private database are self-hosted in Europe. Authorized project operators can access stored records where needed to provide the service, handle support, or maintain the systems.

• Backups: private backup copies are stored in Cloudflare R2.
• AI services: OpenAI receives the import content or labels needed for the features described above.
• Website measurement: Vercel Web Analytics processes visit information for the landing website.
• Email and support: providers handling communications process messages and contact details needed to deliver and answer them.

Information is shared for these functions rather than giving every provider access to all account content. Necessary information may also be disclosed to competent authorities where legally required, or to professional advisers where necessary to handle a legal claim.

6. Where information is processed

Our self-hosted application and database are located in Europe. External AI, backup, analytics, and communications providers may involve processing or support access in other countries under their respective arrangements.

You can request information about processing locations and applicable international-transfer safeguards by emailing contact@oddsray.com.

7. Retention and deletion

Account information and saved betting records are retained to maintain your account and history. Original source records can remain alongside processed records for verification and reprocessing; completing an import does not mean all source information has been deleted.

Operational logs are currently tied to the service containers, rather than a separate long-term logging archive. Their lifetime depends on the container lifecycle. Support messages are retained as needed to handle the request and related follow-up.

Private backups are separate from active database records. Removing a live record does not immediately remove every backup copy. AI-provider retention is governed by the provider arrangements described above.

Request account closure or deletion by contacting contact@oddsray.com. We assess the request, applicable rights, and any limited need to retain particular information for legal obligations or claims. Contact us for the current deletion and backup-handling arrangements.

8. Cookies and website analytics

The application uses necessary session cookies to keep you signed in and protect account access. Sessions normally last up to seven days, with a short-lived session cache of up to five minutes. Blocking necessary session storage may prevent account functions from working.

The landing website uses Vercel Web Analytics to understand visits and usage. Visit information can include page paths, referrers, visit times, browser and device details, and approximate location. This measurement is separate from the betting-performance analytics in your account.

Acceptance of the Terms is not consent to optional tracking or marketing. Where an optional purpose requires consent, it must be requested separately.

9. Security

Account access is authenticated, and access to user records is restricted through authorization checks. The application uses protected connections and private database and backup storage. These measures support protecting your records, but no online system is entirely risk-free.

Report a suspected security issue to contact@oddsray.com without including your password or access tokens.

10. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction of processing, and a portable copy of your personal data. You may object to processing based on legitimate interests on grounds relating to your situation. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Send requests to contact@oddsray.com. We may need proportionate information to verify your identity. We normally respond within one month; where the law permits an extension, we will tell you within that first month and explain why.

You may complain to the Portuguese Comissão Nacional de Proteção de Dados (CNPD), or another competent data-protection authority, including where you habitually live or work. See the CNPD complaints process.

11. Required and optional information

Required registration information is needed to create and operate your account. Importing a particular file is optional; without it, we cannot perform that import. Other features remain available where they do not depend on that information.

12. Children

OddsRay is intended for people aged 18 and over. Contact us if you believe a person under 18 has provided personal data so that we can investigate and take appropriate action.

13. Changes and contact

We will update this policy when our data-processing arrangements change and identify its version and update date. Where a material change requires advance notice, we will provide it. Where a new purpose requires consent, updating this page is not a substitute for obtaining it.

For privacy questions and requests, email contact@oddsray.com.