BETFLYAISIGN IN

Privacy Policy

Effective: 2026-06-15 · Version: v2

This Privacy Policy describes how DropFly Inc. ("DropFly," "we," "us") collects, uses, and shares information when you use BetFly (the "Service"). DropFly is a Delaware corporation operating from California.

1. Information We Collect

Information you provide

  • Account information: email address, password (stored as a salted hash), state of residence (for restricted-state eligibility), self-attested age confirmation, and any optional profile details you choose to provide.
  • Billing information: billing name, postal code, payment method metadata (last four digits, card brand, expiration). Full payment card numbers are handled exclusively by Stripe; we never see or store them.
  • Discord identifier (optional): if you link Discord via OAuth for paid-channel access, we store your Discord user ID, your username at the time of linking, and your membership status in our Discord server. We do not access your messages, DMs, friends list, or activity outside our server.
  • Communications: emails, support requests, and feedback you send us.

Information collected automatically

  • Session data: sign-in time, session cookies, IP address (used for session security, abuse prevention, and restricted-state eligibility only — not for advertising).
  • Usage data: aggregate engagement signals (which pages or channels you read, broad open rates) used to improve the product. We do not build individual behavioral profiles for advertising purposes.
  • Approximate location: derived from IP address at the U.S. state level, used solely to enforce our restricted-states list under /legal/restricted-states.

Sensitive Personal Information

BetFly does not collect Sensitive Personal Information as defined under the California Consumer Privacy Act (CPRA) or analogous state laws. Specifically, BetFly does not collect government ID numbers, social security numbers, precise geolocation, racial or ethnic origin, religious beliefs, biometric data, health information, sexual orientation, immigration status, or any other category designated as sensitive under applicable privacy laws.

What we do not collect

  • Full payment card numbers (handled by Stripe);
  • Government IDs, social security numbers, or KYC documents (we do not process actual wagers and do not have KYC obligations);
  • Sportsbook, prediction market, or DFS account credentials, balances, or trade history;
  • Health, biometric, or precise geolocation data;
  • Advertising or cross-site tracking identifiers;
  • Information from children under 18.

2. How We Use Information

We use information to:

  • Deliver the Service and the content you subscribe to;
  • Process subscriptions and billing through Stripe (including California-required automatic-renewal reminders for California subscribers);
  • Provision and manage your Discord access;
  • Respond to support requests and feedback;
  • Detect, prevent, and address fraud, abuse, restricted-state circumvention (e.g., VPN use), or violations of our Terms;
  • Improve the Service using aggregate, de-identified usage signals;
  • Comply with legal obligations and respond to lawful requests.

3. Third-Party Service Providers

We share information with the following processors solely to operate the Service:

  • Stripe — payment processing, subscription billing, and (if enabled) optional age-verification via Stripe Identity.
  • Discord — content delivery via Discord channels and role provisioning. We share your Discord user ID with Discord to assign you the paid role; we do not share other subscriber data with Discord beyond what is necessary for role assignment.
  • Resend — email delivery for digest emails and transactional notifications.
  • Supabase — database hosting (account records, subscription state, pick history).
  • Railway — compute and backend application hosting.
  • Vercel — dashboard and web hosting.

Each processor is contractually limited to using your information only for the purpose of providing services to us, in accordance with applicable data processing agreements. We do not sell, rent, or share your personal information with advertisers.

What we do NOT share with Kalshi or any sportsbook

BetFly operates an automated trading account on Kalshi for its own proprietary trading (see our Disclaimer §3a for details). BetFly does not transmit subscriber identity, email, payment information, or any other personal information to Kalshi, FanDuel, DraftKings, Underdog, or any sportsbook or exchange. Subscribers interact with those platforms entirely on their own accounts.

4. Cookies and Tracking Technologies

We use a limited set of cookies and similar technologies:

  • Strictly necessary cookies — session cookies for authentication, CSRF protection, and load balancing. These cannot be disabled without breaking the Service.
  • Functional cookies — theme preference (dark/light mode), language, and similar UI state. Disabling these reduces functionality but does not break the Service.
  • Aggregate analytics — privacy-preserving, server-side measurement of page views and engagement, without cross-site tracking identifiers. We do not use Google Analytics, Facebook Pixel, or similar third-party advertising trackers.

We do not use third-party advertising cookies or behavioral tracking cookies. We do not participate in cross-context behavioral advertising.

Global Privacy Control (GPC)

BetFly recognizes and honors the Global Privacy Control (GPC) signal. When your browser transmits a GPC signal, BetFly treats it as a valid opt-out request for any sale or sharing of personal information under the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and analogous state laws, in addition to our standing practice of not selling or sharing personal information for cross-context behavioral advertising.

5. Legal Disclosures

We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, comply with regulatory requests (including from the CFTC, FTC, state attorneys general, or gambling regulators), protect the safety of our users, or investigate fraud or abuse.

6. Data Retention

We retain account information for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. Specifically:

  • Account records: retained while your account is active; deleted within 60 days of account deletion request, except where retention is required for legal, accounting, or tax obligations.
  • Billing records: retained for up to seven (7) years for tax and audit compliance.
  • Communications and support requests: retained for up to two (2) years.
  • Session logs: retained for up to 90 days for abuse detection and security analysis, then deleted or anonymized.

You may request deletion of your account at any time (see Section 8).

7. Security

We use commercially reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS), salted password hashing, principle-of-least-privilege access controls, and processor agreements with our service providers. No system is perfectly secure; we cannot guarantee absolute security.

8. Your Rights

All users

You may:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Request deletion of your account and personal information;
  • Export your account data in a portable format;
  • Opt out of non-essential communications.

To exercise any of these rights, email dropflyai@gmail.com. We respond to verifiable requests within 45 days; complex requests may require an additional 45-day extension with notice.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

  • Right to know what personal information we collect, use, disclose, and sell or share (if any);
  • Right to delete personal information we have collected;
  • Right to correct inaccurate personal information;
  • Right to opt out of the sale or sharing of personal information. BetFly does not sell or share personal information for cross-context behavioral advertising.
  • Right to limit the use and disclosure of Sensitive Personal Information. BetFly does not collect Sensitive Personal Information.
  • Right to non-discrimination for exercising your privacy rights;
  • Right to have BetFly honor your Global Privacy Control signal.

Submit California-specific requests to dropflyai@gmail.com with "CCPA Request" in the subject line.

Other U.S. state privacy laws

Residents of the following states have analogous rights under their state privacy laws, including the rights to access, correct, delete, and obtain a portable copy of personal information, and the right to opt out of targeted advertising and the sale or sharing of personal information:

  • Colorado (Colorado Privacy Act)
  • Connecticut (Connecticut Data Privacy Act)
  • Virginia (Virginia Consumer Data Protection Act)
  • Utah (Utah Consumer Privacy Act)
  • Oregon (Oregon Consumer Privacy Act)
  • Texas (Texas Data Privacy and Security Act)
  • Montana (Montana Consumer Data Privacy Act)
  • Other states with effective consumer privacy laws not enumerated here at the time of subscription

BetFly does not sell or share personal information for cross-context behavioral advertising and does not engage in profiling that produces legal or similarly significant effects. To submit a request, email dropflyai@gmail.com with your state name in the subject line.

9. Notice of Financial Incentive (Founder Pricing)

BetFly offers founding subscribers a lifetime locked rate ($10/month for the first fifty paying subscribers) compared to the standard $15/month post-founder rate. This founder pricing is offered solely as a launch incentive and does not depend on you providing additional personal information beyond what is required for any subscription (account email, billing information, state of residence, age confirmation). The estimated value of the founder benefit ($60/year savings versus standard pricing) is reasonably related to the value of subscription revenue, customer feedback, and early adoption signal to BetFly. You may decline the founder rate and subscribe at standard pricing without forfeiting any privacy rights, and you may withdraw from any financial incentive program at any time by canceling your subscription.

10. Children

The Service is intended for users aged 21 and older. BetFly does not knowingly collect personal information from anyone under 18. If we learn we have collected information from someone under 18, we will delete it as soon as practicable. Subscribers between 18 and 20 are not eligible for the Service under our 21+ baseline eligibility policy; see our Disclaimer §5 for details.

11. International Users

The Service is intended for users located in the United States. We do not solicit subscriptions from users in the European Union, United Kingdom, Canada, or other international jurisdictions. If you access the Service from outside the United States, you do so at your own risk and consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email to active subscribers and via in-product notice. The "Effective" date at the top of this page reflects the latest version. Continued use of the Service after a material update constitutes acceptance of the updated Privacy Policy.

13. Contact

DropFly Inc.
Privacy inquiries: dropflyai@gmail.com

Privacy Policy — BetFly · BetFly