Global Privacy Policy

Effective Date: March 2026•Contact: samueldoku09@gmail.com

1. Data Controller & Overview

XGAI Predictor ("we", "us", or "our"), operating in partnership with YODABETS, is committed to respecting and protecting your privacy. This Privacy Policy outlines how we collect, use, store, disclosure, and safeguard your personal information when you access or use our sports prediction web application across all global domains and localized subpaths.

For any privacy inquiries or to exercise your statutory rights under GDPR (EU/UK), CCPA/CPRA (California), or LGPD (Brazil), please contact our Data Protection Office at samueldoku09@gmail.com.

2. Information We Collect

We process personal data only when necessary to fulfill core service operations or with your explicit consent:

Account Data

Email address
Display Name / Profile Name
Encrypted password hash (Credentials authentication)
Google OAuth profile token (Google Sign-In)

Technical & Usage Data

IP Address (truncated for security logging)
Browser user agent & device attributes
hCaptcha anti-bot challenge response tokens
App preferences (language, dark/light theme, watchlist)

3. Legal Basis & Processing Purposes (GDPR Art. 6)

We process your data strictly under valid legal grounds:

Contract Performance: To provision user accounts, authenticate logins, and manage premium algorithm features.
Legitimate Interest: To prevent fraud, detect bot abuses via hCaptcha, and protect infrastructure security.
Consent: For optional, anonymized performance telemetry via Vercel Analytics, which you can grant or revoke anytime via Cookie Preferences.

4. Cookies & Local Storage

We utilize technical cookies and HTML5 LocalStorage essential for core application performance:

Name	Type	Purpose
next-auth.session-token	Essential Cookie	Encrypted session token for user login status.
cookie_consent_v1	Essential Storage	Stores your cookie consent choices and telemetry preferences.
theme / language	Essential Storage	Remembers UI dark/light mode and international language selection.
_vercel_analytics	Optional Telemetry	Anonymized page load speed & error rate diagnostics (requires consent).

5. Third-Party Service Providers

We partner with trusted, SOC2/GDPR-compliant infrastructure providers to deliver our web application:

Vercel Inc.: Application hosting, edge deployment, and optional performance analytics.
Prisma / PostgreSQL: Encrypted, isolated database hosting for account credentials and subscription records.
Intuition Machines (hCaptcha): Bot protection and automated abuse prevention.
Google OAuth: Optional single sign-on authentication service.

6. Your Data Rights (GDPR & CCPA)

Regardless of your geographic location, you enjoy full sovereignty over your data:

Right to Access & PortabilityDownload a complete, machine-readable JSON copy of all personal data held about you directly from your User Menu.

Right to Erasure ("Right to be Forgotten")Instantly trigger complete, irreversible deletion of your account, email, and preferences from our active database.

🚫 Right to Object / Opt-OutRevoke optional performance analytics consent at any time via the Cookie Preferences footer button.

✏️ Right to RectificationRequest immediate correction of inaccurate profile data by contacting support.

7. Security & Data Retention

We employ industry-standard bcrypt hashing, TLS 1.3 encryption in transit, and strict database access controls. Account data is retained only for as long as your account remains active. If you request account deletion, your records are purged within 72 hours across all operational systems.

Have Privacy Questions or Requests?

Our Data Protection team is ready to assist you with any questions regarding data security, privacy policy compliance, or exercising your statutory rights.

✉️ Contact Compliance Office: samueldoku09@gmail.com