1. Who We Are

SureArb ("we", "us", "our") operates the website surearb.com. We provide daily sports betting data reports delivered by email. If you have questions about this policy, contact us at support@surearb.com.

2. Data We Collect

• Account information: your name, email address, and a hashed version of your password when you create an account.
• Payment information: processed entirely by Stripe. We never see or store your card number. We store your Stripe customer ID and subscription status.
• Usage data: server logs that include your IP address, browser type, and pages visited. These are used for security, debugging, and service improvement.
• Consent records: the date and time you consented to this policy and to receiving emails.

3. How We Use Your Data

• To create and manage your account.
• To send you the daily reports you subscribed to.
• To send transactional emails (account confirmation, password resets, subscription confirmations).
• To process payments via Stripe.
• To monitor and improve the security and performance of our service.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

• Consent: you give explicit consent when you create an account and agree to receive emails.
• Contract: processing is necessary to deliver the service you subscribed to.
• Legitimate interest: server logs for security and fraud prevention.

5. Data Sharing

We share data only with the following service providers, who process it on our behalf:

• Stripe — payment processing.
• Amazon Web Services (AWS) — hosting, email delivery (SES), and database storage. Data is stored in the EU (eu-west-2, London).

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data from our database. Server logs are retained for up to 90 days.

7. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Delete your account and personal data (via your account page or by emailing us).
• Withdraw consent to receiving emails at any time by cancelling your subscription or contacting us.
• Lodge a complaint with a supervisory authority (e.g., the UK Information Commissioner's Office).

To exercise any of these rights, email support@surearb.com.

8. Cookies

We use a single session cookie that is strictly necessary for the site to function (keeping you logged in). We do not use analytics cookies, tracking cookies, or third-party cookies.

9. Security

Passwords are hashed using industry-standard algorithms and never stored in plain text. All data is transmitted over HTTPS. Our infrastructure is hosted on AWS with encryption at rest and in transit.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.