Privacy Policy

1. Introduction

AIOTECH Labs Inc., carrying on business as EVstrike Analytics and operating under the EVstrike brand (“EVstrike”, “Company”, “we”, “us”, or “our”), operates the website evstrike.com and the EVstrike web application, including any related features, dashboards, alerts, subscription services, and support services (collectively, the “Service”).

The Company is based in New Brunswick, Canada. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you access or use the Service.

By using the Service, creating an account, or subscribing to a paid plan, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with our Terms of Service.

2. Personal Information We Collect

2.1 Information You Provide to Us

• Account information: Email address, display name, login credentials, and account settings.
• Authentication information: Passwords are processed by Supabase. We do not store or have access to plaintext passwords.
• Billing and subscription information: Stripe processes payment information. We may store your Stripe customer ID, subscription status, plan type, billing dates, and related billing metadata. We do not store full payment card numbers.
• Bet tracking information: If you use bet tracking features, we may store the sportsbook, market, odds, stake, notes, result, and other information you enter.
• Alert preferences: EV thresholds, sports, markets, notification preferences, and other alert rules you configure.
• Support communications: Messages, attachments, feedback, or other information you provide when contacting us.

2.2 Information Collected Automatically

• Usage information: Pages viewed, features used, clicks, navigation paths, session activity, and interactions with the Service.
• Device and browser information: Browser type, operating system, device type, screen resolution, language settings, and related technical data.
• Network information: IP address, approximate location derived from IP address, referral source, and log data.
• Notification information: If you enable browser push notifications, we store the technical tokens and keys required to deliver notifications.

2.3 Information from Third Parties

• OAuth providers: If you sign in using Google or another supported provider, we may receive your name, email address, profile image, and authentication identifiers, depending on your provider settings.
• Stripe: We receive subscription and payment event information, such as successful payments, failed payments, cancellations, refunds, and subscription updates.
• Service providers: We may receive technical, delivery, or security-related information from vendors that help us operate the Service.

3. How We Use Personal Information

We use personal information for the following purposes:

• To provide the Service: Create accounts, authenticate users, deliver odds data, calculate EV and CLV metrics, provide alerts, and enable bet tracking features.
• To manage subscriptions: Process payments, manage plan access, handle billing events, issue receipts, and support refunds or cancellations.
• To send notifications: Deliver alerts, transactional emails, password resets, account notices, billing notices, and service-related announcements.
• To improve the Service: Analyze usage, troubleshoot issues, test features, improve performance, and develop new functionality.
• To maintain security: Detect, investigate, and prevent fraud, abuse, unauthorized access, scraping, misuse, or violations of our Terms of Service.
• To provide support: Respond to questions, investigate issues, and communicate with you about your account.
• To comply with legal obligations: Maintain records, respond to lawful requests, and comply with tax, accounting, regulatory, or legal requirements.

We do not sell your personal information. We do not otherwise use your personal information for third-party targeted advertising.

4. Legal Basis for Processing

Where applicable privacy laws require a legal basis for processing personal information, we rely on the following bases:

• Performance of a contract: To provide the Service, manage your account, process subscriptions, and deliver paid features.
• Consent: To send optional alerts, browser push notifications, marketing communications, or process information where consent is required.
• Legitimate interests: To secure the Service, prevent abuse, improve functionality, debug issues, and understand usage patterns.
• Legal obligations: To comply with applicable tax, accounting, regulatory, or legal requirements.

5. How We Share Personal Information

We share personal information only as reasonably necessary to operate, secure, and improve the Service, or as required by law.

5.1 Service Providers

We use third-party service providers that process information on our behalf. These providers are authorized to use personal information only as necessary to provide services to us.

5.2 Legal and Safety Disclosures

We may disclose personal information if we believe it is reasonably necessary to:

• Comply with applicable law, legal process, subpoena, court order, or government request.
• Protect the rights, property, security, or safety of EVstrike, our users, or others.
• Investigate fraud, abuse, security incidents, or violations of our Terms of Service.
• Enforce agreements or protect against legal liability.

5.3 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction. If this occurs, we will provide notice where required by law.

6. Cookies, Local Storage, and Tracking Technologies

We use cookies, local storage, and similar technologies to operate and improve the Service.

• Authentication and session storage: Used to keep you signed in and secure your session.
• Functional preferences: Used to remember preferences such as odds format, filters, dismissed notices, and app settings.
• Security and diagnostics: Used to detect abuse, troubleshoot errors, and improve reliability.
• Product analytics and session replay: We use Microsoft Clarity to understand how users interact with the Service through behavioral metrics, heatmaps, and session replay. Sensitive content (account details, payment data, bet entries, and admin pages) is masked and is never transmitted to Microsoft. Clarity cookies are only set after you consent via the consent control described below. For more information, see the Microsoft Privacy Statement.
• Consent management: We present a consent banner before any analytics cookies are set. You can review or change your choice at any time using Manage privacy choices in the site footer.

You can decline or withdraw consent for analytics cookies at any time via Manage privacy choices. Where you decline, non-essential cookies are not used.

7. Marketing Communications

We may send you service-related emails, such as account notices, billing updates, security alerts, and important product changes. These communications are transactional and may be necessary to provide the Service.

If we send promotional or marketing emails, you may opt out at any time by using the unsubscribe link in the email or by contacting us. Opting out of marketing emails does not prevent us from sending transactional or legally required communications.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:

• HTTPS/TLS encryption for data transmitted between your browser and the Service.
• Password hashing and authentication controls managed by Supabase.
• JWT-based authentication and server-side authorization checks.
• Server-side subscription enforcement for paid features.
• Parameterized database queries and other safeguards against common web vulnerabilities.
• Rate limiting and abuse-prevention controls on sensitive endpoints.
• Limited access to production systems based on operational need.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security of personal information.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account information: Retained while your account remains active.
• Deleted accounts: Personally identifiable account data is deleted or anonymized within a reasonable period, typically within 30 days, unless retention is required by law.
• Bet tracking data: Retained while your account remains active, unless you delete it or request deletion.
• Alert history: Retained for a limited period, generally up to 90 days, unless needed for troubleshooting or security.
• Server logs: Generally retained for up to 30 days for security, debugging, and reliability purposes.
• Billing and transaction records: Retained as required for tax, accounting, legal, and compliance purposes, typically up to 7 years.
• Aggregated or de-identified data: May be retained indefinitely because it does not identify you.

Some deleted information may remain in backups for a limited period before being securely overwritten or deleted.

10. Your Rights and Choices

10.1 General Rights

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of your account or personal information.
• Request export of certain information, such as bet tracking data.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain processing activities.
• Opt out of optional alerts, push notifications, or marketing communications.

To exercise these rights, contact us at privacy@evstrike.com. We may need to verify your identity before processing your request.

10.2 Canadian Residents

We handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable. Canadian users may request access to, correction of, or information about our handling of their personal information by contacting us.

10.3 California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, access, correct, delete, and opt out of the sale or sharing of personal information.

We do not sell personal information for money. We will not discriminate against you for exercising your privacy rights.

10.4 European Economic Area, United Kingdom, and Similar Jurisdictions

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy rights, you may have rights to access, rectify, erase, restrict, object to processing, request portability, withdraw consent, and lodge a complaint with a supervisory authority.

11. Automated Processing

The Service may use automated calculations, models, formulas, and rules to generate sports betting analytics, including expected value, closing line value, market movement indicators, alerts, and related metrics.

These features are provided for informational and analytical purposes only. We do not use automated decision-making that produces legal or similarly significant effects concerning you.

12. International Data Transfers

We are based in Canada, but our service providers may process and store personal information in Canada, the United States, and other countries where they operate. These countries may have privacy laws that differ from those in your jurisdiction.

When personal information is transferred internationally, we rely on appropriate safeguards where required by law, including contractual protections and the security commitments of our service providers.

13. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe that a minor has provided us with personal information, contact us at privacy@evstrike.com and we will take reasonable steps to delete the information.

14. Affiliate Links and Third-Party Sportsbooks

The Service may contain links, odds, promotions, or references to third-party sportsbook websites or services. When you click a third-party link, you may be directed to a website that we do not own or control.

• Third-party sportsbooks are governed by their own privacy policies and terms.
• They may use cookies, tracking links, referral codes, or attribution technologies.
• We may receive a commission or referral fee if you register or take certain actions through an affiliate link.
• We are not responsible for the privacy practices, content, or security of third-party websites.

You should review the privacy policy and terms of any third-party sportsbook before creating an account or providing personal information.

15. Third-Party Links and Services

The Service may include links to third-party websites, applications, or services. This Privacy Policy does not apply to third-party services that we do not own or control. We are not responsible for how third parties collect, use, or disclose personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page.

If we make material changes, we may provide additional notice, such as by email, in-app notice, or prominent notice on the Service. Your continued use of the Service after the updated Privacy Policy becomes effective means you acknowledge the updated policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, contact us at:

AIOTECH Labs Inc.
Carrying on business as EVstrike Analytics
Operating under the EVstrike brand
New Brunswick, Canada
Email: privacy@evstrike.com
Support: support@evstrike.com

We aim to respond to privacy-related inquiries within 30 days.