Summary
- We collect the minimum needed to run your account, bill you, and keep the Service working: your email, username, and password (stored hashed); your payment records (not your card number); the profit or loss figure from each settled arbitrage, which is how Credit is billed; and any bet-feedback reports you choose to send.
- You sign in to your sportsbooks yourself, inside the application. We never receive your sportsbook passwords or sessions. They stay on your computer.
- We never hold, see, or move your betting funds.
- We use no advertising trackers, no analytics scripts, and no crash reporting.
- We do not sell personal information and we do not share it with sportsbooks.
- Our service providers (authentication and database hosting, payment processing, and network security) may store your information outside Canada, including in the United States.
- You can access, correct, or ask us to delete your information at any time. See Section 10.
This policy complies with the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA"). It forms part of our Terms of Service.
1. Who We Are
1001662080 Ontario Inc., operating as Prometheus Bets ("Prometheus", "we", "us"), is the organization responsible for personal information collected through the Prometheus desktop application, the prometheusbets.com website, and the Prometheus data feed (together, the "Service").
Our Privacy Officer is responsible for our compliance with this policy and with PIPEDA. Contact: [email protected]. A mailing address is provided on request.
2. Scope
This policy covers personal information we collect from users of the Service who are adults resident in Ontario, Canada. The Service is not offered outside Ontario and is not directed at anyone under 19.
It does not cover the practices of sportsbooks, payment processors, or any other third party. Their own privacy policies govern the information you give them, including everything you do inside your sportsbook accounts.
3. What We Collect, and Why
3.1 Information you give us
| Information | When | Why we need it | Legal basis |
|---|---|---|---|
| Email address | Registration, login, checkout | Identify your account, sign you in, send required notices and receipts, deliver a copy of the Terms | Consent; performance of our agreement with you |
| Password | Registration, login | Authenticate you. Stored only as a one-way hash by our authentication provider. We cannot read it. | Performance of our agreement |
| Username | Registration | Display name and unique account identifier | Performance of our agreement |
| Invite code | Registration | Validate your invitation; registration is invite-only | Performance of our agreement |
| Bet-feedback reports (your notes, the legs you report, outcomes, amounts, and the engine's record of the same arbitrage) | Only if you submit a report from the application | Investigate a settlement or placement you believe was wrong, and fix defects in the Service | Consent (each report is voluntary) |
| Support correspondence | When you contact us | Respond to you and keep a record of the matter | Consent; legitimate business need |
3.2 Information the application sends to us automatically while it runs
| Information | Why we need it |
|---|---|
| Settlement results: for each arbitrage the application completes, an internal arbitrage identifier, an internal bet identifier, and the profit or loss in cents once the bets settle | This is how Credit is billed (Credit is deducted against realised profit). It is the only betting data the application sends us without your action. The identifiers are internal codes for the arbitrage and the bet. The data does not include your stake, your odds, your sportsbook account name, or your balances. |
| Credit balance requests | Show your remaining Credit and decide whether the application may act on new opportunities |
| Feed connection: your feed key and, through our network provider, your IP address and connection metadata | Authenticate your access to the odds feed, prevent abuse, and keep the feed available |
3.3 Information we receive from others
| Source | Information | Why |
|---|---|---|
| Payment processor (Stripe) | Confirmation that a payment succeeded, the amount, a payment reference, and the email you used at checkout | Grant the Credit you paid for and keep billing records. We never receive your card number. |
3.4 Information that stays on your computer
The application stores the following on your device only. We do not receive it, cannot access it, and it is not backed up by us:
- your sportsbook login sessions and cookies, in the application's browser storage. You sign in to each sportsbook yourself in a window the application opens; the application does not ask for or store your sportsbook passwords;
- your Prometheus login session, encrypted with your operating system's credential store (Windows DPAPI or macOS Keychain) in a file named
auth-session.enc; - your settings and parameters;
- your local placement history, recovery log, failed-opportunity log, and settlement-debugging log;
- pacing, limit, and closing-line-value state used by the application's own logic.
You can delete all of it by uninstalling the application and removing its data folder. Because it lives on your device, its security depends on your device's security. Anyone with access to your unlocked computer may be able to use your sportsbook sessions.
3.5 What we deliberately do not collect
- Your sportsbook credentials, sessions, or balances.
- Your card or bank details.
- Your government ID, date of birth, or address. We rely on your representation at registration that you are 19 or older and resident in Ontario.
- Precise geolocation. Our network security provider determines the country of your IP address for security purposes; we do not collect your precise location.
- Behavioural analytics, advertising identifiers, or tracking cookies.
4. How We Use Information
We use personal information only for the purposes listed in Section 3 and for the following closely related purposes:
- operating, securing, and improving the Service, including detecting defects the settlement data or your feedback reveals;
- billing, refunds where applicable, chargeback handling, and fraud prevention, including detecting duplicate accounts;
- enforcing our Terms of Service, including eligibility and prohibited-use rules;
- sending you transactional and legally required messages: receipts, security notices, changes to the Terms or this policy, and a copy of the Terms after acceptance;
- sending you marketing or product messages only if you have opted in, in compliance with Canada's Anti-Spam Legislation. Every such message includes an unsubscribe link, and unsubscribing never affects your account;
- responding to lawful requests from courts, regulators, or law enforcement (Section 6.3);
- producing aggregated, de-identified statistics about how the Service performs. De-identified data cannot reasonably be used to identify you and is not personal information.
We do not use your information to profile your gambling behaviour for marketing, to encourage you to bet more, or to make automated decisions with legal effect about you. The application's decisions about which opportunities to act on are made on your device under your own settings.
5. Consent
By creating an account you consent to the collection, use, and disclosure described in this policy. Where a purpose is optional (bet-feedback reports, marketing messages) we ask separately, and you can decline or withdraw at any time. Withdrawing consent for information we need to run your account means closing the account (Section 10).
We do not knowingly collect information from anyone under 19. If you believe a minor has registered, tell us and we will delete the account.
6. When We Share Information
We do not sell, rent, or trade personal information. We share it only as follows.
6.1 Service providers
Providers who process information on our behalf, under contracts that restrict them to our instructions and require appropriate security:
| Provider | What they process | Where | Purpose |
|---|---|---|---|
| Supabase | Account records, hashed passwords, Credit ledger, settlement results, bet-feedback reports, invite-code records, and account emails such as sign-in confirmations | North America, including the United States | Authentication, database hosting, and account email |
| Stripe | Your email, the amount, and your payment details (entered directly on Stripe's checkout page, never on ours) | United States, with Canadian processing | Payment processing and receipts |
| Cloudflare | IP address and connection metadata for feed and website requests | Global network, including the United States | Network security, TLS, and abuse prevention |
6.2 Sportsbooks
We do not share any information with sportsbooks. We have no relationship with them. The only information a sportsbook receives about you is what your own device sends to it through your own account when the application transmits a wager.
6.3 Legal requirements
We may disclose information where required by law, court order, or a lawful request from a regulator or law-enforcement body with jurisdiction over us, or where necessary to establish, exercise, or defend our legal rights, including in a dispute with you. Where the law permits, we will tell you before we disclose.
6.4 Business transfers
If we merge, are acquired, or sell assets, personal information may be transferred to the successor, who must honour this policy or give you notice and a choice.
7. Cross-Border Transfers
Some of our service providers store or process information outside Canada, principally in the United States. While there, it is subject to the laws of that country and may be accessible to its courts and authorities. We use contractual and technical safeguards, but we cannot guarantee that foreign law provides the same protection as Canadian law. By using the Service you consent to this transfer. If you have questions about our providers' locations, contact the Privacy Officer.
8. Retention
We keep personal information only as long as needed for the purposes above and to meet legal obligations, then delete or de-identify it.
| Information | Retention |
|---|---|
| Account records (email, username, hashed password) | Life of the account, then deleted within 30 days of closure, except as needed below |
| Credit purchases, grants, and settlement ledger | 7 years after the transaction, as required for tax and accounting records |
| Bet-feedback reports | Until the report is resolved plus 12 months, then de-identified |
| Support correspondence | 24 months after the matter closes |
| Feed and website access logs (IP address) | 30 days, unless needed to investigate abuse or a security incident |
| Records of your acceptance of the Terms (version, date, account) | Life of the account plus 2 years, or longer if needed for a dispute |
| Marketing consent records | As long as the consent is relied on, plus 3 years |
Information on your own device is retained until you delete it.
9. Security
We protect personal information with safeguards appropriate to its sensitivity, including:
- passwords stored only as salted one-way hashes by our authentication provider;
- encryption in transit (TLS) for every connection between the application, the website, the feed, and our providers;
- row-level access controls so that each user's records are readable only by that user and by authorized administrators;
- feed access keyed and rate-limited behind a network security provider that hides our infrastructure;
- the application's own session stored on your device encrypted with your operating system's credential store;
- a design that keeps sportsbook passwords, sessions, and funds off our systems entirely;
- access to production data limited to named administrators of the corporation.
No system is perfectly secure. If we learn of a breach of security safeguards that creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada as PIPEDA requires, and we keep a record of every breach.
Your part: keep your computer, your Prometheus password, and your sportsbook logins secure. Sign out of the Service and your sportsbooks when you are not supervising the application.
10. Your Rights
You may at any time:
- Access the personal information we hold about you and learn how it has been used and to whom it has been disclosed;
- Correct inaccurate or incomplete information;
- Withdraw consent for optional uses, including marketing messages, without affecting your account;
- Close your account, after which we delete your information within the periods in Section 8, except records we must keep for tax, accounting, fraud-prevention, or legal-dispute purposes;
- Complain. Contact our Privacy Officer first. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada, 1-800-282-1376, priv.gc.ca.
To exercise a right, email [email protected] from the address on your account. We will verify your identity, respond within thirty (30) days as PIPEDA requires, and will not charge you except where the law allows a minimal fee for access requests, which we will tell you about in advance.
11. Cookies and Similar Technologies
The website uses only strictly necessary storage: a session token so you stay signed in, and preferences you set. We do not use advertising or analytics cookies. Our network security provider may set a strictly necessary cookie to distinguish people from automated traffic. The application stores its own session and settings locally as described in Section 3.4. You can clear browser storage at any time; doing so signs you out.
12. Third-Party Links and Communities
The website and application may link to third-party sites, including sportsbooks, Stripe, and any community server we operate on Discord. Those services have their own privacy practices. Anything you post in a community server is visible to its members and is governed by that platform's terms.
13. Changes to This Policy
We may update this policy. For material changes we will give at least thirty (30) days' notice by email and in the application before they take effect. Continued use after the effective date means you accept the change. We will not use information for a materially new purpose without seeking fresh consent.
14. Contact
Privacy Officer 1001662080 Ontario Inc., operating as Prometheus Bets Registered office: Ontario, Canada. Mailing address provided on request. Email: [email protected]
Office of the Privacy Commissioner of Canada: 30 Victoria Street, Gatineau, Quebec K1A 1H3. Toll-free 1-800-282-1376. priv.gc.ca.