Privacy Policy
This Privacy Policy explains how SuredaAnalytics LLC, a Florida limited liability company ("SuredaAnalytics," "we," "our," or "the Service"), collects, uses, stores, and shares information when you use suredaanalytics.com or any related subdomain (collectively, the "Site"). By using the Site you agree to the practices described here and to our Terms of Service.
1. Who We Are & How to Reach Us
SuredaAnalytics LLC is a sports analytics and information service operated from the State of Florida, United States. For any privacy-related question, request, or complaint, contact us at privacy@suredaanalytics.com.
2. Information We Collect
2.1 Information you provide
- Account information: email address and a hashed password (we never store your password in plain text; passwords are hashed with bcrypt).
- Billing information: handled entirely by our payment processor, Stripe, Inc. We do not see, store, or process your full card number, CVV, or bank details. We retain only a Stripe customer ID, Stripe subscription ID, subscription status, trial-end date, and period-end date.
- Correspondence: any messages you send us (support requests, feedback).
2.2 Information we collect automatically
- Log data: IP address, approximate geographic location derived from IP, user-agent string, referrer, pages viewed, and timestamps — collected for security, abuse prevention, and debugging.
- Cookies and similar technologies: see Section 6.
- Usage data: pages visited while logged in, features used, and aggregate engagement metrics.
2.3 Information we do NOT collect
- We do not knowingly collect information from children under 13 (see Section 8).
- We do not collect or store payment card data on our own servers.
- We do not handle, hold, transfer, or process funds for the purpose of gambling, and we do not collect wager or bet-slip data.
- We do not sell your personal information.
3. How We Use Information
We use the information described above to:
- create and secure your account;
- process subscription payments through Stripe and manage billing status;
- provide, personalize, and improve the analytics content on the Site;
- respond to support requests and communicate important service updates;
- detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service;
- comply with legal obligations, including age-verification and responsible-gambling requirements where applicable.
4. Legal Bases (EEA / UK users)
If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: (a) performance of a contract — to provide the Service you signed up for; (b) legitimate interests — to secure our Service, prevent abuse, and improve features; (c) consent — where required for non-essential cookies or marketing; (d) legal obligation — for tax, fraud-prevention, and law-enforcement purposes.
5. How We Share Information
We do not sell personal information. We share it only with the categories of recipients described below:
| Recipient | Purpose | Data shared |
|---|---|---|
| Stripe, Inc. | Process subscription payments and manage billing. | Email, Stripe customer ID, subscription events. |
| Hosting / infrastructure providers | Serve the Site and store data (e.g., cloud VM, managed Postgres, Redis, CDN). | All Site data in encrypted form at rest and in transit. |
| Email providers | Send account and billing emails. | Email address, message body. |
| Law enforcement / regulators | Comply with subpoenas, court orders, and lawful requests. | Only what is legally required. |
| BallDontLie, Inc. ("BDL") | Licensed commercial sports data API provider. BDL supplies NBA, MLB, and related statistics data used throughout the Site under a GOAT Tier commercial license. We make outbound API requests to BDL's servers; no personal user data is shared with BDL. | None — BDL receives only API request parameters (e.g., team IDs, season year). No user identifiers, emails, or account data are transmitted. |
| Successors in interest | In connection with a merger, acquisition, financing, or asset sale, with continued protection under this Policy. | User account and billing records. |
We do not share personal information with advertisers or data brokers.
6. Cookies & Similar Technologies
We use a minimal set of first-party cookies that are essential to the operation of the Site:
- sureda_session — your logged-in session; HttpOnly, Secure (in production), SameSite=Lax.
- remember_token — optional "keep me signed in" cookie (set only if you check the box at login); HttpOnly, Secure, 30-day lifetime.
- CSRF tokens — used to protect form submissions against cross-site request forgery.
We do not currently use third-party advertising cookies. If we add analytics cookies in the future (e.g., privacy-respecting product analytics), we will update this Policy and, where required by law, request your consent first.
7. Data Retention
- Account data is retained for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention reasons (typically up to 7 years).
- Billing records are retained by Stripe and by us as required by U.S. tax law.
- Log data is typically retained for 90 days and then rotated.
8. Children's Privacy
The Site is intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 13, and our Service is not directed to children. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. If you believe a child has provided us with personal information, contact privacy@suredaanalytics.com.
9. Your Rights
9.1 All users
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to correct inaccurate information.
- Deletion: delete your account and associated personal data directly from your Account Settings page, or email us at privacy@suredaanalytics.com. Self-service deletion immediately cancels your subscription and schedules your personal data for removal within 30 days.
- Portability: request a machine-readable copy of your data.
- Opt out: you can unsubscribe from non-essential email at any time.
9.2 California residents (CCPA / CPRA)
In the last 12 months we have collected the categories of personal information listed in Section 2 for the purposes described in Section 3. We have not sold or "shared" (for cross-context behavioral advertising) any personal information in the last 12 months, and we do not do so today. California residents may exercise the rights of access, deletion, correction, and non-discrimination by emailing privacy@suredaanalytics.com.
9.3 EEA / UK residents (GDPR)
In addition to the rights above, you may object to, or restrict, our processing of your data, and you have the right to lodge a complaint with your local supervisory authority.
9.4 Florida residents
Florida residents have the rights described under the Florida Digital Bill of Rights (where applicable), including the right to confirm processing, to access, to correct, to delete, to port, and to opt out of targeted advertising and the sale of personal information. We do not sell personal information or use it for targeted advertising.
To exercise any of these rights, email privacy@suredaanalytics.com from the address associated with your account. We may need to verify your identity before fulfilling a request.
10. Security
We take reasonable administrative, technical, and physical measures to protect your information, including: TLS / HTTPS in production, bcrypt password hashing, HttpOnly and Secure cookies, CSRF protection on all forms, rate limiting on authentication endpoints, a Content Security Policy, regular dependency updates, and least-privilege access to our infrastructure. No system is 100% secure; you share information with us at your own risk, and we cannot guarantee absolute security.
11. International Users
The Site is operated from the United States. If you access it from outside the United States, you understand that your information will be transferred to, stored, and processed in the U.S., which may not offer the same data-protection protections as your country.
12. Do Not Track
We do not currently respond to browser "Do Not Track" (DNT) signals because there is no common industry standard for interpreting them. We do not track your activity across third-party websites.
13. Third-Party Links & Data Providers
The Site may link to third-party websites, tools, or services (e.g., Stripe, Discord, news outlets). Those services have their own privacy policies and we are not responsible for their practices.
Our sports statistics data is sourced from BallDontLie, Inc. under a commercial license. BDL is an independent data provider; their privacy policy governs their own data practices at balldontlie.io. As noted above, no personal user data is shared with BDL in connection with our data retrieval.
14. Changes to This Policy
We may update this Policy from time to time. When we make material changes we will post the updated Policy here with a new "Last updated" date and, where appropriate, notify you by email or in-app notice. Continued use of the Site after the change takes effect constitutes acceptance of the updated Policy.
15. Contact
Questions? Requests? Concerns? — privacy@suredaanalytics.com.
← Back to home