Privacy Policy

Introduction

Da Vinci Bets LLC ("Company," "we," "us," or "our") operates the DaVinciBets.io website, our iOS and Android mobile applications, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile applications, or otherwise use our Service. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when you:

• Register for an account
• Subscribe to our premium analytics services
• Sign up for our newsletter or email updates
• Contact us for support
• Participate in promotions or surveys
• Track bets or build parlays within the Service
• Complete an optional cancellation survey

This information may include your name, email address, billing information, and any other information you choose to provide. Bets and parlays you choose to track are stored with your account so we can display your performance history. If you complete a cancellation survey, we store your selected reason and any comment you provide with your account profile. If you sign up for email updates, we store your email address together with the time you gave consent and the source, campaign, and referring page of the sign-up form.

Sign-In with Google or Apple

If you sign in using Google or Apple, we receive your email address and basic profile information from that provider. We never receive or store your Google or Apple password, and we do not access any other data in those accounts.

Purchases and Subscriptions

When you purchase a subscription through our iOS or Android apps, we receive purchase information from our in-app purchase provider, RevenueCat, including the product purchased, the app store used, purchase and expiration dates, and trial status. We never receive your full payment card details — payment is handled directly by Apple, Google, or Stripe.

Automatically Collected Information

When you access our Service, we automatically collect certain information, including:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage data (features used, interactions with our Service, last sign-in activity)
• Attribution data — a first-party cookie named "dvb_attrib" (30-day lifetime) that records the campaign parameters, referrer, and landing page of your first visit; if you create an account, this attribution data is copied once to your profile
• Developer API logs — if you use our developer API, we log the endpoint requested, response status, response time, and your IP address for security, abuse prevention, and quota enforcement
• Push notification tokens — if you enable notifications, we store the subscription token needed to deliver them
• Referral attributions — if you sign up with a referral code, we record which code was used
• Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, operate, and maintain our sports analytics Service
• Process your subscription and payment transactions
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve our Service and user experience
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and enforce our terms
• Communicate with you about products, services, and promotions (with your consent)

How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: Third-party vendors who perform services on our behalf (payment processing, hosting, analytics)
• Legal Requirements: When required by law, subpoena, or other legal process
• Protection of Rights: To protect the rights, property, or safety of our Company, users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission to share

We share personal information only with service providers who process it on our behalf: Stripe, Inc. (web payment processing and billing portal); RevenueCat, Inc., Apple Inc., and Google LLC (in-app purchase processing and subscription management on iOS and Android); Supabase, Inc. (authentication and database hosting); Vercel, Inc. (website hosting, performance monitoring, and privacy-friendly site analytics); Google LLC — Google Analytics 4 (usage analytics, configured with IP anonymization and with advertising features disabled); and Resend, Inc. (email delivery). Each provider is limited to processing data as needed to provide its service.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify affected users by email without undue delay and within the timeframes required by applicable law (including Florida's Information Protection Act), describing what happened, what information was involved, and the steps we are taking.

Data Retention and Deletion

We retain your account information for as long as your account is active. You can delete your account at any time from Settings → Delete Account in the Service, or by emailing us at support@davincibets.io. Deleting your account cancels any active web subscription, removes your profile, saved data, API keys, and push notification subscriptions, and is completed within 30 days.

• Payment records: Retained as required for tax and accounting purposes
• Consent and unsubscribe records: Retained so we can continue to honor your preferences
• API and security logs: Retained for up to 12 months
• Aggregated, de-identified analytics: May be retained indefinitely

If you subscribed through the Apple App Store or Google Play, you must also cancel your subscription directly with Apple or Google — we cannot cancel app-store subscriptions on your behalf.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-Out: Opt out of marketing communications at any time
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the information provided below.

California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you specific rights. The categories of personal information we collect are: identifiers (such as name, email address, and IP address); commercial information (such as subscription and purchase history); internet or other electronic network activity (such as usage and analytics data); and general geolocation inferred from IP address.

You have the right to know and access the personal information we collect, to correct inaccurate information, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell personal information and we do not share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising any of these rights. You may designate an authorized agent to submit requests on your behalf; we verify requests via the email address associated with your account. To exercise your rights, contact us at support@davincibets.io.

Nevada Residents

Nevada residents may submit a request to opt-out of the sale of certain personal information we have collected. We do not currently sell personal information as defined under Nevada law.

Cookies and Tracking Technologies

We use a small set of first-party cookies and similar technologies:

• Essential cookies: Supabase authentication cookies that keep you signed in — required for the Service to function
• Google Analytics 4: Usage analytics configured with IP anonymization and with all advertising storage and ad personalization disabled. A server-side purchase confirmation event carries only a transaction identifier, amount, and plan name — never your email, name, or user ID
• Vercel Analytics and Speed Insights: Anonymous, privacy-friendly performance and page-view measurement
• Attribution cookie: A first-party cookie named "dvb_attrib" (30-day lifetime) that records the campaign, referrer, and landing page that brought you to us
• Local storage: Your browser's localStorage for interface preferences and sign-up flow state

We do not use third-party advertising cookies. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent; however, essential cookies are required for signing in, and if you do not accept them you may not be able to use some portions of our Service.

Email Communications

We send marketing emails only where you have opted in, and we record the date and source of your opt-in. Every marketing email includes a one-click unsubscribe link that takes effect immediately; once you unsubscribe, you are excluded from all future marketing campaigns.

We may still send transactional emails — such as receipts, payment-failure notices, security alerts, and account deletion confirmations — even after you unsubscribe from marketing, because they are necessary to operate your account.

Children's Privacy

Our Service is not directed to individuals under the age of 21 (or the legal gambling age in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children or minors. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information. In particular, the Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn we have collected personal information from a child under 13, we will delete it promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where we operate. These countries may have data protection laws that are different from the laws of your country. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to the United States, we rely on appropriate safeguards such as standard contractual clauses.

Legal Bases (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

• Contract performance: To provide the Service and manage your account and subscription
• Legitimate interests: Analytics, security, and fraud and abuse prevention
• Consent: Marketing email and, where required, analytics cookies — you may withdraw consent at any time
• Legal obligation: Tax and accounting requirements

You also have the right to lodge a complaint with your local data protection supervisory authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. If we make material changes — such as collecting new categories of personal information or sharing information with new categories of third parties — we will notify registered users by email in addition to posting the updated policy here. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: