Privacy Policy

Pobi is a sports betting planning tool operated from Ontario, Canada. We are responsible for the personal information described in this policy.

You can reach us about anything in this document at info@pobi.bet.

• Account details. Your email address, your first and last name, and the display name you go by in the app. If you sign in with Google, we receive your email address and basic profile information from Google. We never receive your Google password.
• Where you bet. Your country, your province or state, and which sportsbooks you hold an account with. We ask because the app only has any use for promos you can actually take.
• Your phone number. Optional. We collect it so we can text you about payouts, and for nothing else: it is not a way to sign in, and we do not use it for marketing or share it with anybody.
• Billing details. Your plan, your trial end date, your subscription status, and the customer and subscription identifiers our payment processor gives us. Card numbers go directly to Stripe and never reach our servers, so we cannot see, store or use your card.
• What you log. The boosts, bets, slips, legs, stakes, odds, results and notes you enter. This is the record the app exists to keep, and it is the largest thing we hold about you.
• Screenshots and voice clips. Images of a sportsbook promotions page you upload, and voice clips you record, so the app can read the boosts out of them. See the section on AI features below for what happens to them.
• Messages you send us. The subject and body of a support request, the address you sent it from, and our correspondence with you about it.
• Referrals. Your own invite code, who invited you or whom you invited, and whether a reward has been earned and paid.
• Technical records. Your IP address, your browser and device, and the request logs our hosting and database providers keep. We also count how often you use the metered parts of the app, which is what lets us enforce a daily allowance.

• We never ask for your sportsbook username, password, or any other credential, and you should never give one to us or to anyone claiming to be us.
• We never log into, connect to, or place a bet on your sportsbook accounts, and we never hold, move or pay out money.
• We never see your full card number.
• We do not sell your personal information, and we do not share it for advertising. There are no advertising trackers and no third-party analytics on this site.

• To run the app: to price the promos you hold, build slips, keep your record, and grade what you placed.
• To bill you and to manage your subscription and trial.
• To answer your support requests.
• To run the referral programme and pay what it owes.
• To keep the service working and to prevent abuse, fraud and the running up of costs on somebody else's account.
• To fix problems and improve how the product works, using our own records of what broke.
• To meet legal, tax and accounting obligations.

We do not use what you log to train any AI model of our own, and we do not sell it to anyone who would.

Under Canadian privacy law we rely on your consent to collect and use your personal information. Some of it we need in order to provide a service you have asked for at all: we cannot keep your betting record without your betting record, and we cannot charge you without a payment method.

You can withdraw your consent at any time by closing your account, subject to any legal or contractual limits and to reasonable notice. Withdrawing it means we can no longer provide the service to you.

We share personal information with the companies that run parts of the service for us, and with nobody else except as described in this section. Each of them receives only what it needs to do its job, and each is bound to use it only for that.

• Supabase. Our database and sign-in provider. It holds your account and everything you log.
• Vercel. Our hosting provider. It handles every request to the site and keeps request logs, which include IP addresses.
• Stripe. Our payment processor. It receives your name, email address and card details directly from your browser, and it handles the payment under its own privacy policy.
• Resend. Sends the email we send you. It receives your address and the contents of the message.
• Google. Only if you choose to sign in with Google, and only for that sign-in.
• OpenAI. Reads the boosts out of a message you type or a screenshot you upload. It receives that text or image and returns structured boosts.
• Groq. Turns a voice clip you record into text. It receives the clip and returns the transcript.
• Odds and results feeds. We buy prices and final scores from sports data providers. They receive no personal information about you at all: we ask them about games, never about people.

We may also disclose personal information where the law requires it, where we need to establish or defend a legal claim, or to a buyer as part of a sale or reorganisation of the business. If the business changes hands, we will tell you before your information is used under a different policy.

The providers above store and process information in Canada and in the United States, and some of them may process it elsewhere. Information held outside Canada is subject to the law of the country it is held in, which means a court, a regulator or a law enforcement agency there may be able to obtain it under that country's law.

• Your account and your record. For as long as your account is open, and for a short period afterwards while deletion is carried out.
• Billing records. For as long as tax and accounting law requires us to keep them, which is longer than the life of the account.
• Support threads. After an account is deleted, the thread is kept but the link to the account is removed, so the correspondence survives without naming a customer who no longer exists.
• Screenshots and voice clips. We do not keep them. They are read and discarded within the request that carried them.
• Backups and logs. Our providers' backups and request logs expire on their own rolling schedule, so a deleted record can persist in a backup for a short time before it ages out.

• A copy of the personal information we hold about you, and an account of who we have disclosed it to.
• A correction, if something we hold is wrong.
• Deletion of your account and everything you logged with it.
• Withdrawal of your consent, as described above.

Write to info@pobi.bet and we will answer within 30 days. We may need to confirm who you are before we act, which we will do through the email address on the account rather than by asking for identity documents.

Deleting your account deletes your profile and every boost, slip and bet attached to it. That cannot be undone, so export or screenshot anything you want to keep first.

• A sign-in cookie. Set when you sign in, and read on every request to know it is you. Without it there is no way to stay signed in.
• A referral cookie. Set when you open somebody's invite link, so that whoever invited you is still credited after the email round trip that follows. It holds an invite code and nothing else, it expires after 30 days, and only our server can read it.
• Stripe's cookies. Set by Stripe on the payment step, for fraud prevention on the payment itself.
• Local storage. Your browser keeps a copy of the slate you are working on, so the app survives a reload. It stays on your device.

There are no advertising cookies and no third-party analytics, which is why this site does not show you a cookie banner. Every cookie above is needed to provide something you asked for.

Three parts of the app send what you give it to an AI provider: typing a boost in your own words, uploading a screenshot of a promotions page, and dictating a clip. In each case the provider reads the input, returns what it found, and we show it to you to confirm or correct.

Nothing that comes back is acted on automatically. No decision about you, your account or your money is made by a model. The boosts a model reads are drafts you approve, and every bet is placed by you at a sportsbook we have no connection to.

Traffic to the site is encrypted. The database enforces row-level security, so one member's rows are unreachable by another member even if the app asks for them. Access by the people who run Pobi is limited to what the job needs. Card details never touch our servers at all.

No service can promise perfect security, and we do not. If a breach ever affects you, we will tell you and the relevant regulator as the law requires.

Pobi is for adults aged 21 and over, as our Terms of Service require. We do not knowingly collect personal information from anyone under 21. If you believe a minor has given us information, write to us and we will delete it.

We will update the effective date at the top of this page whenever this policy changes, and we will email you before a change that materially affects your rights takes effect.

Questions, requests and complaints about privacy all go to info@pobi.bet. We would rather hear it from you first.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the privacy regulator in your own province.