Privacy policy

Who we are

OddSignal is owned and operated by Teehelm Enterprises Ltd, the controller of your personal data. Payment details are handled by our payment processors under their own privacy policies; we receive only what we need to match a payment to your account.

What we collect

• Account details: the email address and name from your Google sign-in, or the email address you give us to receive a sign-in code. We never see your Google password.
• Year of birth: asked once, when you create an account, to confirm you are 18 or older. We keep only the year.
• Plan and payment records: your plans, and the amount, reference and status of each payment.
• Device sessions: when you sign in and out, so we can apply the device limit of your plan.
• Visit counts: which pages are visited, on a phone or a computer, and which site the visitor came from, counted without cookies (see Cookies and visit counts).
• Invite-link checks: if you sign up through someone's invite link, we record that link, and two scrambled codes (see How long we keep it) made from the network your sign-up came from and from your browser's user-agent text. We do not keep the network address itself.
• Technical data: the cookies listed below.

Why we use it

• To run your account and give you the plan you have paid for (to perform our contract with you).
• To take payments and keep the records the law requires (legal obligation).
• To keep OddSignal secure and prevent abuse of plans and devices (legitimate interest).
• To spot abuse of invite links, such as many sign-ups made from one network or one browser to earn a reward (legitimate interest). A sign-up we hold for this is reviewed by a person; nothing is decided only by a machine.
• To tell you about your plan, such as when it is about to end (service messages).
• To count how many people visit and which pages they use, so we can improve OddSignal (legitimate interest).
• To trace a leaked slip: on some plans slips show your name and ID as a watermark and carry invisible marks in their text, so a slip shared against our Terms can be traced to your account (legitimate interest).

Our slips are produced by our own proprietary engine from match data, not from your personal data.

Who we share it with

We do not sell your personal data. We share it only with:

• Google, for sign-in, and our email provider, to send you sign-in codes.
• Flutterwave, to take payments.
• Our hosting providers, under data protection terms.
• Authorities, when the law requires it.

Cookies and visit counts

• Essential: keep you signed in and protect forms from forgery.
• Preferences: remember your light or dark choice.
• Invite link: if you open someone's invite link, a small cookie remembers it for 30 days so the invite is credited if you sign up.

We do not use advertising cookies.

We count visits without cookies and without keeping your IP address. Each day your connection details are turned into a scrambled code that cannot be turned back, used only to tell one visitor from another, and deleted after 7 days. What we keep longer is totals: visits per page, per day, by phone or computer, and by the site people came from. We do not follow you to other sites. If your browser sends Do Not Track or Global Privacy Control, we do not count your visit.

How long we keep it

The two scrambled codes kept for invite-link checks are made with a secret key, so they cannot be turned back into a network address or a browser. They are deleted when a person has reviewed the sign-up, when the person who invited you has received their reward, and in any case after 90 days.

We keep account data while your account is open. Payment and plan records are kept for as long as tax, accounting and other laws require. When you ask us to delete your account, we erase the personal data we are not required to keep.

Security

We use encrypted connections and access controls to protect your data. No system is perfectly secure; if you find a weakness, please tell us.

Your rights

Under the Nigeria Data Protection Act you may ask to see, correct or delete your data, to restrict or object to how we use it, to receive a copy of it, and to withdraw any consent you gave. You may also complain to the Nigeria Data Protection Commission.

To make a request, including to delete your account, email [email protected]. We will reply within a reasonable time.

Age

OddSignal is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a minor has an account, email us and we will remove it.

Changes and contact

We may update this policy and will show the date above. Questions? Email [email protected].