Privacy Policy

Effective Date: 2026-05-15 · Back to home

Notice: Baseline draft; not yet attorney-reviewed. CCPA, GDPR, and other jurisdictional specifics should be checked with counsel for your customer base.

1. Who we are

ALLDAY EDGE LLC ("we", "our", "us") operates the ALLDAY EDGE website at www.aldaymlbedge.com. This Privacy Policy describes what information we collect, how we use it, who we share it with, and what rights you have.

2. Information we collect

Account information. Email address and hashed password when you create an account.
Payment information. Subscription status, plan tier, customer ID, and billing-period dates. Credit card numbers and full payment details are collected and stored by Stripe; we never see or store card numbers.
Authentication tokens. Supabase issues a session token (JWT) when you sign in. This token is stored in your browser's local storage so you stay signed in.
Usage data. Server logs of API requests, including timestamp, requested path, response status, IP address (truncated where feasible), and approximate geographic region. We use this only for operational monitoring and fraud prevention, not advertising.
Device information. Browser type and version, operating system, and screen size, collected by Vercel as part of standard web-server logging.
Email correspondence. If you email support, we retain the message to respond and to track resolution.

We do not collect names, phone numbers, mailing addresses, payment card numbers, photos, contacts, or location coordinates. We do not use the camera or microphone.

3. How we use your information

To provide and maintain the Service.
To manage your account, subscription, and billing.
To send important service updates (e.g., billing changes, security notices, policy changes). We do not send marketing emails unless you opt in.
To prevent fraud and unauthorized access.
To improve the Service (aggregate usage analysis).
To respond to your support requests.
To comply with legal obligations.

4. Third-party services (data processors)

We rely on the following third parties to operate the Service. Each handles a defined slice of your data under its own privacy policy:

Service	What it processes	Privacy policy
Stripe	Payment card data; subscription lifecycle	stripe.com/privacy
Supabase	Authentication (email + hashed password), session tokens, entitlements row keyed to your user ID	supabase.com/privacy
Vercel	Web hosting, edge caching, server logs	vercel.com/legal/privacy-policy
Render	Backend hosting for projection engine	render.com/privacy
Anthropic	AI-generated picks — receives anonymized slate context, no PII	anthropic.com/legal/privacy
SportsData IO	MLB statistics — outgoing only; we send no user data	sportsdata.io/privacy-policy
Tank01 (RapidAPI)	MLB statistics — outgoing only; we send no user data	rapidapi.com/legal/privacy-policy
MLB Stats API	Publicly available baseball statistics — outgoing only	Public API; no user data shared
OpenWeather, The Odds API	Weather and odds data — outgoing only; no user data	Respective providers' policies

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

5. Cookies and similar technologies

We use minimal browser storage. Specifically:

Local storage for your Supabase session token and a small profile object indicating your subscription tier.
Session cookies set by Stripe Checkout during the payment flow (only while you are on Stripe's domain).
Service Worker cache for static assets to improve performance.

We do not use third-party advertising cookies or cross-site tracking.

6. Data security

We use HTTPS for all traffic, hashed passwords (managed by Supabase), JWT-based session authentication, server-side row-level security on the entitlements database, and environment-variable-stored API credentials. Despite these measures, no method of internet transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Data retention

We retain your account information for as long as your subscription is active and for a reasonable period thereafter to handle billing reconciliation, dispute resolution, and legal obligations (typically up to 24 months from account closure). Server logs are retained for up to 90 days. You may request earlier deletion under Section 8.

8. Your rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your data ("right to be forgotten").
Export your data in a portable format.
Object to certain processing.
Withdraw consent at any time (without affecting the lawfulness of previous processing).
Lodge a complaint with a supervisory authority.

To exercise any of these rights, email aldaye2015@gmail.com. We respond within 30 days. Note that deleting account data terminates your subscription and revokes access.

9. California privacy rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what categories of personal information we collect, the sources, the purposes, and the third parties we share with. The information above describes our practices. We do not "sell" personal information as defined by CCPA. To exercise any California-specific right, email aldaye2015@gmail.com with the subject "California Privacy Request".

10. European Economic Area and UK (GDPR / UK GDPR)

If you access the Service from the EEA, UK, or Switzerland, the lawful basis for processing your data is (a) the performance of our contract with you (subscription) and (b) our legitimate interest in operating and improving the Service. You have the rights described in Section 8. We do not transfer your data outside the EEA/UK except through Stripe, Supabase, Vercel, Render, and Anthropic, all of which provide appropriate safeguards (typically Standard Contractual Clauses).

11. Children's privacy

The Service is not directed to and may not be used by individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated Effective Date. Material changes will be communicated to subscribers via email or in-app notice.

13. Contact

Privacy questions: aldaye2015@gmail.com