Privacy Policy

1. Who we are

exitvelo.ai publishes calibrated MLB player-prop probabilities and "edge" scores for informational and entertainment purposes. The site is not a sportsbook, does not accept wagers, and does not provide investment or gambling advice.

The service is operated by an individual owner. The operator can be reached at hello@exitvelo.ai.

2. Data we collect

Account data (when you register)

• Email address
• Password (stored as a bcrypt hash; we never store or transmit your plain-text password)
• Subscription plan and status (free or Pro), maintained via Stripe and stored in our database
• Referral code assigned to your account, and the count of successful referrals you have generated

User-generated content (only if you use account features)

• Saved "slips" - the player-prop picks you have added to your tracking slip
• Notification preferences (which alerts you have enabled)

Optional data (provided at your discretion)

• Phone number - only if you opt in to SMS alerts (Pro and Lifetime subscribers). Collected and processed via Twilio. You may opt out at any time.
• Linked Discord account - only if you choose to connect your Discord via OAuth. We store your Discord user ID and username to sync access to the exitvelo Discord community.

Technical data (collected automatically)

• Aggregate, privacy-respecting analytics from Vercel Analytics and Speed Insights (no cross-site tracking, no personal identifiers). See the Vercel Analytics privacy page for details.
• Standard server logs (IP address, browser type, pages visited) retained in accordance with Vercel's infrastructure policies.

We do not collect payment card details directly; all payment data is handled by Stripe. We do not buy or receive data from data brokers.

3. How we use your data

We use the data we collect only to:

• Create and maintain your account and subscription
• Save and display your tracked slips and picks
• Send transactional emails (account confirmation, subscription receipts, password reset)
• Send daily or digest MLB edge alerts you have opted in to (free and Pro tiers)
• Send SMS alerts you have explicitly opted in to (Pro and Lifetime subscribers only, via Twilio)
• Sync Discord community access when you link your Discord account
• Provide the "Edge Assist" in-app support chatbot to subscriber-tier users, powered by Amazon Bedrock (Claude). Conversations with Edge Assist are not stored permanently and are not used to train AI models.
• Understand aggregate usage patterns to improve calibration accuracy and product features
• Debug errors and maintain service reliability

We do not sell your personal data. We do not use your data for advertising targeting. We do not share your data with third parties for their own marketing purposes.

4. How and where data is stored

Account data, subscription records, saved slips, and notification preferences are stored in AWS DynamoDB in the us-east-1 (Northern Virginia) region. Data is encrypted at rest and in transit. We retain your data for as long as your account is active. You may request or self-serve deletion at any time (see Section 10).

If you are located outside the United States (including in the European Union, the United Kingdom, or Brazil), your data will be transferred to and processed in the United States. By using exitvelo.ai, you acknowledge this transfer. We rely on the necessity of the transfer to perform our service to you as the legal basis for this cross-border transfer.

5. Third-party processors

We use the following third-party services that may process some of your data on our behalf. Each acts as a data processor under a binding agreement.

• Stripe - payment processing and subscription management. Stripe processes your payment card details. We do not store your card numbers. See Stripe's privacy policy.
• Resend - transactional and digest email delivery. Resend processes your email address when we send you messages. See Resend's privacy policy.
• Twilio - SMS alert delivery (opt-in only). Twilio processes your phone number if and only if you have opted in to SMS notifications. See Twilio's privacy policy.
• Discord - optional account linking via OAuth. If you connect your Discord account, Discord processes the OAuth handshake. We receive only your Discord user ID and username. See Discord's privacy policy.
• Amazon Web Services (AWS) - cloud infrastructure. AWS hosts our DynamoDB database, Lambda functions, and Amazon Bedrock (used for the Edge Assist chatbot). Data stays within the us-east-1 region. See AWS privacy notice.
• Vercel - frontend hosting, edge infrastructure, and privacy-respecting analytics. See Vercel's privacy policy.
• MLB Stats API and mlbstatic.com - we retrieve publicly available statistics and player headshot images from MLB's official data and image APIs. We do not share your personal data with MLB.

6. Email and SMS communications

Email

We may send you the following types of email:

• Transactional messages: account confirmation, password reset, subscription receipts. These are sent only in response to actions you take and cannot be unsubscribed from.
• Daily or weekly MLB edge-alert digests, if you have opted in to these in your notification preferences.

You can unsubscribe from non-transactional emails at any time using the unsubscribe link in any email we send, or by updating your preferences in Account Settings (/me/account), or by emailing hello@exitvelo.ai.

SMS

SMS alerts are an opt-in feature available to Pro and Lifetime subscribers. We will send SMS messages only to phone numbers you explicitly provide and verify. Standard carrier message and data rates may apply. To opt out, reply STOP to any message, update your preferences in Account Settings, or email us. We will honor opt-out requests within one business day.

7. Analytics and performance monitoring

exitvelo.ai uses Vercel Analytics and Vercel Speed Insights for aggregate site performance data. These tools collect anonymized page-view and web-vitals data. They do not use cookies and do not track individual users across sites. No personal identifiers are stored as part of analytics.

We do not use Google Analytics, Meta Pixel, or any other third-party behavioral tracking tools.

8. Cookies and session storage

exitvelo.ai sets the following first-party cookies:

• tyde_session - a signed, httpOnly session cookie containing only an opaque session identifier. Used to keep you logged in. Does not contain personal data. Expires at logout or after a period of inactivity.
• tyde_tier - a display-only cookie that stores your current subscription tier (free or Pro) so the UI can show the right features without an extra network call. Contains no payment data.
• tyde_user - a display-only cookie that stores basic identifying information (e.g. your display name) for use in the client-side UI. Contains no sensitive data.

We do not use advertising cookies, third-party tracking cookies, or fingerprinting techniques. Vercel Analytics is cookieless by design.

9. Your rights (GDPR, CCPA, and similar laws)

Depending on where you live, you may have the following rights regarding your personal data. We honor all of these requests regardless of your location.

• Access. You can request a copy of the personal data we hold about you.
• Correction. You can ask us to correct inaccurate or incomplete information.
• Deletion. You can delete your account and all associated data at any time directly from your Account Settings at /me/account. See Section 10 for what deletion covers. Deletion requests submitted by email are completed within 30 days.
• Portability. You can request your data in a machine-readable format.
• Opt-out of email and SMS. You can unsubscribe from non-essential communications at any time (see Section 6).
• Restriction / objection. In jurisdictions where this right exists, you may ask us to restrict or stop processing your personal data under certain circumstances.
• Non-discrimination (CCPA). We will not discriminate against you for exercising any of these rights.

California residents: we do not sell or share your personal information as defined by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). You have the right to know, delete, correct, and opt out of the sale or sharing of personal information. To exercise any of these rights, contact us at hello@exitvelo.ai.

European Union and UK residents: the legal basis for processing your account and subscription data is the performance of a contract (providing the service you signed up for). You also have the right to lodge a complaint with your national data protection authority.

10. Account and data deletion

You can delete your account at any time from Account Settings. Account deletion:

• Permanently removes your account and login credentials
• Cancels any active Pro subscription with Stripe (no further charges)
• Erases all saved slips and notification preferences
• Removes your linked Discord OAuth connection
• Removes your phone number from our SMS list

Deletion is permanent and cannot be undone. Aggregate or anonymized analytical data that does not identify you may be retained. Stripe may retain transaction records as required by law and their own policies.

You may also request deletion by emailing hello@exitvelo.ai. We will complete email-submitted deletion requests within 30 days.

11. Age requirement

exitvelo.ai is intended for users who are 18 years of age or older due to the sports-analytics and prop-probability content it provides. We do not knowingly collect personal information from users under 18. If you believe we have inadvertently collected information from a user under 18, please contact us at hello@exitvelo.ai and we will promptly delete it.

12. Security

We take reasonable technical measures to protect your data. Passwords are bcrypt-hashed before storage. Session cookies are signed and httpOnly. All data is transmitted over HTTPS. Account data is stored in AWS DynamoDB with encryption at rest.

No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it to hello@exitvelo.ai and we will respond promptly.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of exitvelo.ai after a policy update constitutes acceptance of the updated policy. If you have an account, we may also notify you by email when material changes are made.

14. Contact

For any privacy-related question, access request, or deletion request, email:

hello@exitvelo.ai

We aim to respond to all privacy requests within 5 business days.