Privacy Policy

1. Executive Overview & Scope

DCODDS ("DCODDS", "we", "our", or "us") operates the quantitative sports investing analytics SaaS platform at https://dcodds.com. This Privacy Policy details our strict standards regarding the collection, processing, storage, and protection of personal data across global jurisdictions including the European Union General Data Protection Regulation (GDPR Regulation EU 2016/679), the California Consumer Privacy Act (CCPA/CPRA), the UK Data Protection Act 2018, and international data standards.

2. Information We Collect

We only collect data strictly necessary to fulfill our analytical software services and maintain security integrity:

• Account & Registration Credentials: Email address, hashed authentication credentials, account preferences, and subscription tier status.
• Financial & Payment Transaction Data: Subscription billing information processed securely via Stripe. DCODDS never stores or accesses full credit card numbers or sensitive payment details directly.
• Usage & Technical Diagnostics: Anonymized device identifiers, browser type, IP addresses, access timestamps, and error logs for server performance diagnostics.
• Legal Consent Records: Timestamps of Terms of Service and Privacy Policy acceptances to fulfill regulatory compliance standards.

3. How We Use Collected Information

We process your data strictly under valid legal bases for the following operational purposes:

• To deliver subscription-based mathematical tools, Poisson simulations, and Monte Carlo risk calculators.
• To authenticate subscriber access and enforce server-side security locks against unauthorized abuse.
• To transmit automated account notifications, performance reports, and transactional email confirmations.
• To detect, prevent, and mitigate fraudulent activities, cyber threats, and security vulnerabilities.

4. Third-Party Data Disclosures

DCODDS strictly refrains from selling, renting, or trading user personal data to third-party brokers or advertisers. We share limited operational data only with trusted enterprise infrastructure providers under strict Data Processing Agreements (DPAs):

• Stripe Inc.: Payment processing, customer portal management, and subscription billing.
• Hostinger International Ltd.: Secure cloud hosting, server infrastructure, and database management.
• Firebase / Google Cloud: Authentication services and serverless database storage.

5. International Data Rights (GDPR & CCPA)

Depending on your residence, you possess enforceable legal rights regarding your personal data:

• Right to Access & Portability: Request a complete copy of personal data stored in our system.
• Right to Rectification: Request correction of incomplete or inaccurate account information.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your user account and historical data.
• Right to Opt-Out (CCPA): Request that your data not be shared for analytics.

6. Data Security & Retention

We implement industry-standard technical measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, regular vulnerability scanning, and automated DDoS protection. Personal data is retained only for the active lifecycle of your account plus statutory financial retention periods.