Lire cette page en français

Privacy policy

Last updated : [date]

This page explains what personal information Pronosports collects, why, how long it is kept and how to have it deleted. It is written under Quebec's Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1, as amended by Law 25) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Person in charge of personal information protection

Law 25 requires that this person be named publicly. They are:

2. What we collect

No banking data is collected or stored by Pronosports. Card numbers are entered directly on Stripe's servers, to which we have no access.

No advertising profiling, no sale of information, no analytics. We collect only what the service needs to work.

3. No cookies

This site sets no cookies. It uses your browser's local storage for three things, which never leave your device:

• the session token that keeps you signed in;
• your chosen language;
• your chosen colour theme.

All three are either strictly necessary to the service or reflect a preference you set yourself. Clearing your browser storage signs you out and restores the defaults.

4. Who we share with

Your information is shared only with the providers the service needs to operate:

What is sent to the AI provider

Writing the analyses uses an external language model. What is sent to it:

• the sports data for the fixture — team names, statistics, computed probabilities. This is not personal information;
• when you use the assistant, the text of your questions.

Your email address and account ID are never sent to the AI provider. We nonetheless recommend not typing personal information into the assistant.

Disclosure outside Quebec

Section 17 of the Quebec Act requires a privacy impact assessment before any personal information is disclosed outside Quebec, weighing the sensitivity of the information, the purposes, the protections in place and the legal framework of the destination.

[State here, for each provider located outside Quebec, that the assessment has been carried out and that the disclosure is covered by a written agreement. Hosting the database in Canada reduces this obligation to its simplest form.]

5. Retention periods

6. Your rights

You have the following rights at all times:

• access — obtain the information we hold about you;
• correction — have inaccurate, incomplete or ambiguous information corrected;
• portability — receive your information in a structured, commonly used technological format;
• de-indexing and deletion — have information taken down or destroyed in the cases the Act provides for;
• withdrawal of consent — at any time, for processing that relies on it.

To exercise these rights, write to the person named in section 1. You will receive a reply within thirty days.

If that reply does not satisfy you, you may complain to the Commission d'accès à l'information du Québec. Residents of other provinces may contact the Office of the Privacy Commissioner of Canada.

7. Security and incidents

Passwords are stored as scrypt hashes, never in clear text. Traffic to and from the site is encrypted (HTTPS). Database access is restricted to the application's own services.

No system is infallible. In the event of a confidentiality incident presenting a risk of serious injury, we promptly notify the Commission d'accès à l'information and the individuals concerned, and the incident is entered in the register the Act requires us to keep.

8. Changes

This policy may change. Subscribers are notified by email of any significant change. The update date appears at the top of the page.

9. Language

This English version is provided for convenience. In case of any discrepancy, the French version prevails.