Privacy Policy

O15AI ("Over15AI","we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our sports intelligence platform, including our website, sports data APIs, developer services, automation features, and consumer sports products (collectively, the "Service").

By using the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use the Service.

2.1 Information You Provide Directly

When you use the Service, you may provide:

• Account Information: Email address, name, and profile information from authentication providers (such as Google OAuth)
• Payment Information: Billing information processed by third-party payment providers (we do not directly store payment card details)
• Developer API Credentials: API keys, access tokens, and related authentication information for API usage
• Integration Data: Bot tokens (encrypted), channel identifiers, webhook URLs, and other technical integration information
• Profile Preferences: Sport preferences, favorite teams, leagues, notification settings, and other customization options
• Communications: Messages, feedback, support requests, and other information you provide when contacting us

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect:

• Usage Data: API requests, pages visited, features accessed, interaction data, time spent, and user activity patterns
• Device Information: Browser type and version, operating system, device type, screen resolution, and unique device identifiers
• Network Information: IP address, approximate geographic location (based on IP address), internet service provider, and network connection type
• Performance Data: API response times, error rates, system performance metrics, and technical diagnostics
• Cookies and Tracking: Session cookies, authentication tokens, preference cookies, and analytics identifiers

2.3 Information from Third-Party Sources

• Authentication Providers: Profile information from Google OAuth or other authentication services you use to access the Service
• Payment Processors: Transaction confirmation, payment status, and billing information from payment service providers
• Analytics Services: Aggregated usage statistics, traffic sources, and behavioral analytics from third-party analytics platforms

We use collected information for the following purposes:

• Service Provision: Provide, operate, maintain, and improve the Service, including API access, sports data delivery, automation features, and consumer products
• Authentication and Security: Verify identity, manage accounts, authenticate API requests, prevent fraud, and protect against unauthorized access
• Payment Processing: Process subscriptions, handle billing, manage payments, and maintain transaction records
• Communication: Send service updates, technical notifications, API status alerts, support responses, and account-related communications
• Personalization: Customize user experience, remember preferences, provide relevant sports information, and deliver personalized content
• Analytics and Improvement: Analyze usage patterns, optimize performance, develop new features, improve API reliability, and enhance service quality
• Automation Services: Deliver automated sports content, manage integrations, execute workflows, and provide developer automation capabilities
• Compliance: Comply with legal obligations, enforce our Terms of Service, respond to legal requests, and protect our rights

We process your personal data based on legitimate business interests, contractual necessity, legal obligations, and your consent where applicable.

Google OAuth

We use Google OAuth for secure authentication. When you sign in with Google:

• We receive your email address and basic profile information
• Your email is automatically verified by Google
• We do not access your Google account password or other Google services
• You can revoke Over15AI's access at any time through your Google account security settings
• Google's Privacy Policy applies to information they collect during authentication

We only request the minimum permissions necessary to authenticate your account and do not access other Google services or data.

We Share Information With:

• Payment Processors: Tuma (M-Pesa), NowPayments (cryptocurrency), and other payment service providers for transaction processing
• Cloud Infrastructure: Railway, Vercel, and other hosting providers for service operation and data storage
• Analytics Providers: Analytics platforms for usage statistics, performance monitoring, and service improvement
• Email Services: Email delivery providers for transactional emails, notifications, and communications
• Authentication Services: Google OAuth and other authentication providers for secure account access

We Do NOT:

• Sell your personal data to third parties for marketing purposes
• Share your data with advertisers without your consent
• Access your private communications, messages, or personal content not necessary for Service provision
• Provide your data to data brokers or third-party marketing platforms

Legal Disclosure:

We may disclose your information if required by law, legal process, government request, court order, or to protect our rights, property, safety, or the rights of others. We will provide notice of legal requests when legally permitted.

We implement industry-standard security measures to protect your personal data:

• Encryption: HTTPS/TLS encryption for all data transmission, encrypted storage for sensitive information such as API tokens and bot credentials
• Authentication: Secure authentication via Better Auth, OAuth 2.0, and API key management
• Access Controls: Limited employee access to personal data, role-based permissions, and audit logging
• Infrastructure Security: Secure cloud hosting, regular security updates, vulnerability monitoring, and automated backups
• Monitoring: Continuous security monitoring, intrusion detection, and incident response procedures

Important: While we implement strong security measures, no system can guarantee absolute security. We cannot ensure or warrant complete security of information transmitted to or stored by the Service. You use the Service at your own risk.

We retain your information as follows:

• Active Accounts: Account data, preferences, and usage history are retained while your account remains active
• Payment Records: Billing and payment information retained for 7 years for tax compliance and legal obligations
• API Logs: API usage logs and request data retained for up to 90 days for operational purposes
• Analytics Data: Aggregated and anonymized usage statistics may be retained indefinitely
• Deleted Accounts: Personal data removed within 30 days of account deletion, except where retention is required by law

You can request deletion of your account and associated data at any time by contacting us at privacy@over15ai.com.

Depending on your location and applicable privacy laws, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate or incomplete personal information
• Deletion: Request deletion of your account and associated personal data
• Data Portability: Receive your personal data in a structured, machine-readable format
• Objection: Object to certain data processing activities based on legitimate interests
• Restriction: Request restriction of data processing in certain circumstances
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis
• Opt-Out: Unsubscribe from marketing communications while continuing to receive transactional emails

To exercise these rights, contact us at privacy@over15ai.com. We will respond to your request within 30 days.

We use cookies and similar tracking technologies for:

• Essential Cookies: Authentication, security, session management, and core Service functionality (required for Service operation)
• Analytics Cookies: Usage statistics, performance monitoring, error tracking, and service improvement
• Preference Cookies: Remember your settings, language preferences, and customization choices

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Note that disabling essential cookies may affect Service functionality and prevent proper authentication.

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Over15AI operates globally. Your personal data may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer data internationally, we implement appropriate safeguards such as:

• Standard contractual clauses approved by relevant authorities
• Ensuring service providers maintain adequate data protection standards
• Compliance with applicable international data transfer requirements

The Service is not intended for users under 18 years of age. We do not knowingly collect, use, or disclose personal information from children under 18.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@over15ai.com. We will take steps to delete such information from our systems.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational reasons.

When we make material changes to this Privacy Policy, we will notify you by:

• Updating the "Last updated" date at the top of this policy
• Sending an email notification to your registered email address (for significant changes)
• Displaying a prominent notice on the Service (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy-related requests within 30 days. For urgent matters, please indicate the urgency in your communication.