BLUEPRINTBETTOR

Privacy Policy

Last updated: September 2026

This is a product-drafted Privacy Policy describing what Blueprint Bettor actually stores and how, based on a direct review of the application. It is not an attorney-certified legal document, and it does not claim compliance with any specific privacy law (e.g. GDPR, CCPA) unless stated. Sections needing further input are marked [OWNER/ATTORNEY INPUT].

1. Information We Collect

Category	What it is
Account information	Your email address and authentication credentials, managed by our authentication provider (Supabase Auth). Blueprint does not itself store your raw password.
Session data	Session identifiers used to keep you signed in and to enforce one active session per account, plus a record of sessions you've explicitly signed out of.
Subscription & payment identifiers	Your Stripe customer ID and subscription status. We do not store your card number, CVC, or any other raw payment credentials — card entry and processing happen directly with Stripe.
Projection/search history	The players, stats, and lines you look up, so your history is available to you later.
Bet tracker data	Bets you choose to log (player, market, odds, stake, result, notes).
Saved players	Your watchlist, if you use it.
Referrals	Your referral code and, if you signed up via someone else's link, that relationship.
Creator-partner data	If you're a creator partner: your code, referred users, and commission ledger.
Usage/metering data	How many free daily lookups you've used, to enforce plan limits.
Technical/log information	Standard operational logs generated by running the service.

2. How We Use It

To provide and operate the service you're using
To enforce free/paid plan limits
To process billing through Stripe
To apply referral and creator-partner rewards
To communicate with you about your account, trial, or billing (e.g. a trial-ending notice)
To improve the product

3. Third Parties We Share Data With

Stripe — payment processing and subscription billing
Supabase — account authentication and database hosting
If configured, anonymized conversion events (e.g. that a trial started) may be shared with advertising platforms such as Meta for ad measurement.
[OWNER/ATTORNEY INPUT]: confirm which ad-pixel integrations are actually live in production today, so this can be stated definitively rather than conditionally.

We do not sell your personal information.

4. Data Retention & Deletion

[OWNER/ATTORNEY INPUT REQUIRED]: a specific retention period and account/data deletion process. Not stated here because no such policy currently exists in the product to describe accurately.

5. Your Rights

To request access to or deletion of your data, contact hello@blueprint-bettor.com.

[OWNER/ATTORNEY INPUT REQUIRED]: specific data-subject rights language (e.g. under GDPR/CCPA) — not claimed here unless actually established.

6. Security

Passwords are handled by our authentication provider (Supabase Auth), not stored by Blueprint in plain text. Data is transmitted over encrypted connections. Sessions can be individually revoked, and only one session per account is active at a time.

7. Children's Privacy

Blueprint is not directed at children, consistent with the age-eligibility language in our Terms of Service.

8. Changes to This Policy

We may update this Privacy Policy from time to time.

9. Contact

Questions about this policy: hello@blueprint-bettor.com