Privacy Policy

Last updated: September 4, 2026

1. Introduction

Marginox ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have regarding your data when you use the Marginox platform ("Service").

This policy explains our data practices and your privacy choices. For questions or requests, contact info@marginox.com.

2. Information We Collect

We collect the following categories of information:

Account Information

• Email address: provided during registration, used for authentication and communication.
• Password: stored only as a cryptographic hash. We never store or have access to your plaintext password.

Account, Billing, and Service Information

• Subscription status, plan, Stripe customer and subscription identifiers, renewal timing, and limited card metadata such as brand, last four digits, cardholder name, and a card fingerprint used to detect and investigate repeated trial use.
• Book, league, odds-format and display preferences; wagers you choose to log, including sportsbook, selection, accepted odds, stake, results and profit/loss.
• Account lifecycle events such as signup, login attempts, logout, verification, password reset, and subscription changes.
• Weekly locked-play peek counts used to enforce free-plan limits.
• A pseudonymous account identifier and daily Odds API credit count used to enforce provider-usage limits; the provider does not receive your account email through this ledger.
• The time you confirmed legal-wagering-age eligibility, the time you accepted the Terms, and the accepted Terms version.

Device and Technical Information

• Browser and device information contained in your user-agent string.
• A random device-session identifier and recent activity time used to enforce account device limits.
• IP address used for rate limiting, security, fraud prevention, and account audit records.

Marginox does not operate client-side behavioural analytics or advertising trackers.

3. How We Use Your Information

We use the information collected to:

• Provide, operate, and maintain the Service.
• Authenticate your identity and secure your account.
• Process subscription payments and manage billing.
• Save your preferences and personal wager log across devices, with model-based results and comparison metrics.
• Communicate with you regarding your account, service updates, or support requests.
• Detect and prevent fraud, abuse, or unauthorized access.

4. Cookies and Sessions

Marginox uses an essential signed session cookie to keep you logged in. Interface preferences may also be stored in your browser's local storage and, when you are signed in, mirrored to your account. We do not use third-party advertising or tracking cookies.

• Session cookie: an essential signed cookie used for authentication, configured to expire after 30 days.
• Local storage: stores non-sensitive settings such as selected books, leagues, region, odds format, bankroll inputs, and interface preferences on your device.

You can configure your browser to reject cookies, but this may prevent you from using certain features of the Service.

5. Third-Party Services

We use the following service providers to operate Marginox:

• Stripe: processes all subscription payments. When you subscribe, Stripe collects your payment details (card number, billing address) directly. We do not store your full payment card information on our servers. Stripe's handling of your data is governed by the Stripe Privacy Policy.
• Resend: delivers account verification, password-reset, support, and service email.
• Odds data providers: The Odds API and OddsBlaze supply market data requested by our servers. Marginox does not send your account password or full card details to these providers.
• Open-Meteo: supplies optional weather forecasts used in baseball analysis when commercially configured.
• Google Fonts, Plotly, and ESPN-hosted images: supply visual assets loaded by some pages and may receive standard request metadata such as your IP address and browser user-agent.
• Infrastructure providers: our hosting, database, reverse-proxy, DNS, monitoring, and backup providers process data as needed to operate and secure the Service.

We do not sell or rent your personal information or share it for third-party advertising.

6. Data Retention

• Account data is retained while your account is active and afterward only as needed for security, dispute resolution, legal obligations, or legitimate business records.
• Account audit records are retained for up to 365 days; used or expired authentication tokens for up to 7 days; processed webhook receipts and inactive device sessions for up to 90 days; and free-peek enforcement rows for up to 120 days.
• Pseudonymous per-account provider-usage rows are retained for up to 45 days.
• Billing and tax records are retained for the period required by applicable law.
• Browser local storage remains on your device until you clear it or reset the applicable settings.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS).
• Cryptographic password hashing using the current Werkzeug password-hashing method.
• Access controls limiting employee access to personal data on a need-to-know basis.

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Withdraw consent for data processing at any time, which may result in loss of access to the Service.

To exercise any of these rights, contact us at info@marginox.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at anyone below the legal wagering age in their jurisdiction, including anyone under 19 in Ontario. We do not knowingly collect personal information from ineligible minors. If we learn that we have done so, we will promptly delete the account and associated data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through a notice on the platform at least 14 days before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or your personal data, contact us at:

info@marginox.com

This policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein.