Privacy Policy (GDPR)

Last Updated: January 9, 2026

1. Preamble

The purpose of this Privacy Policy is to inform users of the CORVUS ORACLE service about the means used to collect, access, process, and store users' personal data.

2. Data Controller

The personal data is collected by Mr. Omar YOUHAT, operating under the trade name CORVUS ORACLE, located in Nantes, France.

Contact for Data Privacy: privacy@corvusoracle.com

3. Collected Data

As part of the use of the Service, we may collect the following data:

  • Identification Data: Email address (via Supabase Auth).
  • Technical Data: IP address, connection logs, browser type, and approximate location (used for security and to prevent geographic fraud).
  • Financial Data: Subscription status and payment history. Important: We never store your full credit card numbers.

4. Purpose of Processing

Your data is collected for the following purposes:

  • To provide access to sports prediction services (Tennis/NBA).
  • To manage billing and subscriptions.
  • To fight against fraud (specifically the use of VPNs to bypass local pricing).
  • To send transactional emails (password reset, invoices).

5. Data Recipients (Sub-processors)

We share your data only with third parties necessary for the proper functioning of the Service. All are GDPR compliant:

  • Hosting & Infrastructure: Vercel Inc. (USA)
  • Authentication & Database: Supabase (USA/Singapore)
  • Payment Processing: Stripe (USA)
  • Transactional Emails: Resend (USA)

6. Data Retention

  • Account Data: Retained as long as the account is active, and deleted 3 years after the last activity.
  • Billing Data: Retained for 10 years (legal accounting obligation in France).

7. Your Rights

In accordance with the GDPR, you have the right to access, rectify, erase, and port your data.

To exercise these rights, please contact us at: privacy@corvusoracle.com