Privacy Policy

We collect the minimum data needed to run OwlAnalytics. We never sell your data. We never share it with bookmakers, ad networks, or third-party trackers.

• Account data: email, name, and (optionally) plan tier. Passwords are hashed with bcrypt and are never visible to us.

• Authentication: short-lived JWT tokens stored in httpOnly cookies, plus a refresh token for session continuity.

• Usage data: which sports/teams you query, your generated analyses, and your analysis history (so we can show 'Recent analyses' in your Analysis page).

• Chat data: the messages you send to the AI Owl assistant or to our human support team, so we can answer follow-up questions and learn what we can improve.

• Support tickets: the contents of any ticket you submit through the 'Talk to a human' tab, plus the email you provide for reply.

• Billing data: when you upgrade to Standard or Premium, our payment processor (Stripe in production) collects card details directly. We never see or store full card numbers; we only receive a tokenized reference and the last four digits.

We do not run third-party ad trackers, fingerprinting scripts, or behavioral profiling pixels on our pages. We do not record session video or keystrokes. We do not buy or sell personal data.

• To operate the Service: authentication, generating analyses, displaying your history, responding to support tickets.

• To improve the Service: aggregated, de-identified usage patterns help us prioritize features.

• To keep the Service safe: detect abuse of free tiers, prevent fraud, and stop scraping.

• To communicate with you: transactional emails (account, billing, security) and, only with your consent, occasional product-update emails. You can opt out of product emails any time.

We use cookies for authentication (access_token, refresh_token) and to enforce the one-demo limit on the public demo (owl_demo_used). We do not use marketing or third-party cookies.

You may clear cookies at any time, but doing so will sign you out and reset your demo allowance.

Account data is retained as long as your account is active. If you delete your account, we erase your personally identifying data within 30 days. We may retain anonymized, aggregated usage logs longer for analytics and abuse prevention.

Chat messages and support tickets are retained for up to 24 months for quality and dispute resolution, after which they are anonymized or deleted.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email privacy@owlanalytics.app from the email address on your account. We respond within 30 days.

EU/UK residents: you may also lodge a complaint with your local data protection authority. We will name a Data Protection Officer prior to public EU launch.

Your data is processed by a small set of vetted sub-processors, including our hosting provider, our database provider, our payment processor (Stripe), and our LLM provider (Anthropic, used to generate analyses and chat replies). A live list of sub-processors and their roles will be published prior to public launch.

Where transfers cross borders, we rely on standard contractual clauses or equivalent safeguards.

All traffic is encrypted in transit with TLS 1.2+. Passwords are hashed with bcrypt. Authentication tokens are stored in httpOnly, Secure cookies. We follow the principle of least privilege internally and rotate credentials regularly.

No system is perfectly secure. If you believe your account has been compromised, contact security@owlanalytics.app immediately.

OwlAnalytics is not intended for and not directed to anyone under the legal betting age in their jurisdiction. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact privacy@owlanalytics.app and we will erase it promptly.

Questions, concerns, or requests? Email privacy@owlanalytics.app. We aim to respond within 5 business days.