Privacy Policy

This policy covers edgefinder.ca, our mobile applications, and related services (the "Services"). EdgeFinder is the controller of the personal information described here.

Cookies and similar technologies are covered in more detail in our Cookie Policy.

We do not collect or store full payment card numbers. Card details are entered directly with Stripe.

We do not knowingly collect information from anyone under 18. See "Children" below.

• to provide, operate and maintain the Services
• to create and administer your account and authenticate you
• to process subscriptions and deliver the content you have paid for
• to generate and personalise analysis and recommendations
• to send administrative messages: security alerts, billing notices and service updates
• to send marketing emails, where you have subscribed — you can unsubscribe from any of them
• to detect, investigate and prevent fraud, abuse and prohibited access methods
• to measure and improve performance and reliability
• to comply with legal obligations and enforce our Terms

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following lawful bases under Article 6(1):

Where we rely on legitimate interests, we have assessed that our interest in operating a secure, working service does not override your rights. You may object to that processing — see "Your rights".

Analytics and advertising technologies load only after you consent, and are off by default for every visitor. Strictly necessary storage — keeping you signed in, remembering your cookie choice — is used without consent because the Services cannot function without it.

The full inventory, and how to change or withdraw your choice, is in the Cookie Policy.

We share personal information only as described here:

• with the service providers listed below, which process data on our behalf under contract
• with legal authorities where required by law or in response to a valid legal request
• to establish, exercise or defend legal claims, or to protect the rights and safety of users and the public
• in connection with a merger, acquisition or asset sale, subject to this policy continuing to apply

We do not sell personal information for money. We do use Google AdSense, which — if you consent to advertising cookies — may constitute "selling" or "sharing" under California law. Withdrawing advertising consent stops it: see "California privacy rights".

These are the third parties that receive or process personal information in the course of running EdgeFinder. Each is bound to use it only for the purpose we engaged them for.

EdgeFinder operates from Canada and several providers above are in the United States, so your information may be transferred outside your province, state or country and may be accessible to authorities there under local law.

For transfers of EEA, UK or Swiss personal data, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), or on the Commission's adequacy decision for Canada. You can request a copy of the safeguards used by writing to support@edgefinder.ca.

We keep personal information only as long as needed for the purposes above, unless a longer period is required or permitted by law.

At the end of a retention period data is securely deleted or anonymised. Data subject to a legal hold or an ongoing regulatory or law-enforcement inquiry may be kept longer. You can request earlier deletion where the law permits.

We use encryption in transit, hashed password storage, row-level access controls and least-privilege service credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information we will notify you and the relevant regulators as required by law.

Subject to applicable law, you can ask us to:

• confirm what personal information we hold about you, and give you a copy
• correct information that is inaccurate or incomplete
• delete your personal information
• restrict or object to certain processing
• provide your information in a portable, machine-readable format
• withdraw consent you have given, at any time, without affecting processing already carried out

To exercise any of these, email support@edgefinder.ca from the address on your account, or contact us from within the app. We respond within 30 days, and will tell you if we need longer. We may need to verify your identity first. We will not discriminate against you for exercising your rights.

To change cookie choices you do not need to contact us — use the "Cookie settings" link in the footer.

In addition to the rights above, you have the right to lodge a complaint with your local supervisory authority. In the UK that is the Information Commissioner's Office; in the EEA it is the authority in your country of residence.

We do not carry out automated decision-making that produces legal or similarly significant effects concerning you. The analysis EdgeFinder publishes is generated by statistical models applied to sports data, not to your personal information.

We have not appointed a Data Protection Officer, as we are not required to. Privacy enquiries go to support@edgefinder.ca.

If you are a California resident, you have the right to know what personal information we collect, use, disclose and share; to request deletion; to request correction; to opt out of the sale or sharing of personal information; and to limit the use of sensitive personal information. We do not collect sensitive personal information as that term is defined by the CPRA.

The categories we collect, the sources, the purposes and the third parties we disclose them to are set out in sections 2, 3 and 7 above. In the preceding twelve months we disclosed identifiers, commercial information, internet activity and inferences to the service providers listed in section 7 for business purposes.

We do not sell personal information for money. Serving personalised advertising through Google AdSense may qualify as "selling" or "sharing" under the CPRA. To opt out, open "Cookie settings" in the footer and turn advertising off — that is our Do Not Sell or Share My Personal Information mechanism, and it takes effect immediately. We also honour Global Privacy Control signals where your browser sends them.

You may use an authorised agent to submit a request. Requests go to support@edgefinder.ca.

EdgeFinder is based in British Columbia and handles personal information in accordance with PIPEDA and applicable provincial legislation. You may access and correct your personal information, withdraw consent subject to legal and contractual restrictions, and complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.

The Services are not directed to anyone under 18 and we do not knowingly collect their personal information. If you believe a minor has given us information, contact support@edgefinder.ca and we will delete it.

We may update this policy. Changes are posted here with a revised "last updated" date, and material changes are notified to you where required by law.

EdgeFinder — Privacy, British Columbia, Canada. Email support@edgefinder.ca.