Privacy Policy

Last updated: June 17, 2026 Effective date: June 17, 2026

NOT LEGAL ADVICE. This Privacy Policy is a working draft prepared with AI assistance and has not been reviewed by an attorney. It should be reviewed and finalized by qualified counsel before significant use or before any payment processing begins.

1. Introduction

This Privacy Policy describes how Workhorse Holdings LLC, doing business as Hedgevo ("Hedgevo," "we," "us") collects, uses, and shares information when you use the Hedgevo service, including hedgevo.com, profitprotected.com, and any related applications (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Policy.

2. Information We Collect

2.1 Information you provide

• Email address — when you sign up for our waitlist, create an account, or contact us.
• Account information — if you create an account (Phase 2), this may include name, authentication tokens from third-party providers (Google, Twitter/X, Facebook), and preferences.
• Bet data — bets you choose to track on the Service, including stake, odds, sportsbook, selection, and outcome.
• Communications — messages you send to us via email or in-app.
• Payment information — if you subscribe to a paid tier (Phase 2), payment details are processed directly by our payment processor (Stripe) and we do not store full card numbers ourselves.

2.2 Information collected automatically

• Usage data — pages visited, features used, time spent, click events.
• Device and browser data — IP address, browser type, operating system, device type, referring URL.
• Cookies and similar technologies — see Section 6.

2.3 Information from third parties

• Authentication providers — if you sign in via Google, Twitter/X, or Facebook, we receive basic profile information (name, email, profile image) as authorized by you through those services.
• Odds data providers — we receive sports odds data from third-party providers; this is not personal information about you.

3. How We Use Information

We use the information we collect to:

a. Provide, maintain, and improve the Service b. Compute hedge calculations and generate alerts on your behalf c. Send service-related communications (alerts, account notifications, transactional emails) d. Send marketing communications (with your consent and opt-out option) e. Process payments and manage subscriptions (Phase 2) f. Monitor for fraud, abuse, and security issues g. Comply with legal obligations h. Analyze usage to improve features and user experience

We do not sell your personal information.

4. How We Share Information

We share information only as described below:

4.1 Service providers

We share information with third-party service providers who help us operate the Service, including:

• Hosting and infrastructure (Vercel, Render, Neon/Supabase, Upstash)
• Authentication (Clerk)
• Transactional email (Resend) — account and service messages such as alerts and password resets
• Marketing email (Kit, formerly ConvertKit) — waitlist signups and launch/product updates you opt into
• Payment processing (Stripe — Phase 2)
• Analytics (PostHog) — privacy-respecting product analytics, configured without advertising or cross-site tracking
• Real-time delivery (Ably or Pusher)
• Odds data (SportsGameOdds and similar providers)

These providers process information on our behalf under contractual obligations to protect it.

4.2 Legal compliance

We may disclose information if required to do so by law, subpoena, court order, or other legal process; to protect our rights, property, or safety; or to investigate fraud or security issues.

4.3 Business transfers

If Hedgevo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before any such transfer.

4.4 With your consent

We may share information with other parties when you direct us to do so.

5. Data Retention

We retain personal information for as long as necessary to provide the Service and fulfill the purposes described in this Policy. Specifically:

• Account data — retained while your account is active, plus a reasonable period after deletion for legal and operational purposes.
• Bet tracking data — automatically deleted on a short cycle; see Section 5.1.
• Usage and log data — typically retained for up to 24 months.
• Email subscription data — retained until you unsubscribe.

You may request deletion of your data at any time (see Section 8).

5.1 Bet records — 24-hour retention

When you track a bet in the app (Phase 2), the bet record — including stake, odds, sportsbook, selection, and outcome — is kept only while the event is relevant and is automatically deleted approximately 24 hours after the event ends.

Hedgevo does not keep a long-term history of the bets you track, and does not maintain a running "profit protected" or lifetime-winnings total. We made this choice deliberately: because you place every bet yourself at your own sportsbook, we have no way to verify which of the hedges you calculated were actually placed, and we would rather hold no data than hold data we can't stand behind.

If a longer-lived bet history is ever offered, it will be a clearly labeled, opt-in feature — off by default — and this Policy will be updated before it launches.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service and improve your experience. This section describes what we use, why, and how you can control them. We do not use cookies to build advertising profiles or sell data to third parties.

6.1 Categories of cookies we use

Strictly necessary cookies — required for the Service to function. These cannot be disabled without breaking core features.

| Cookie | Purpose | Duration | |---|---|---| | hedgevo_disclaimer_ack | Records that you have acknowledged our informational-use disclaimer so we don't show it on every page load | 30 days | | Authentication session (set by Clerk) | Keeps you signed in across pages (Phase 2) | Session / up to 30 days | | Security and load-balancing cookies (set by hosting infrastructure) | Protect against fraud, route traffic, and maintain session integrity | Session |

Functional cookies — remember your preferences and improve your experience.

| Cookie | Purpose | Duration | |---|---|---| | hedgevo_theme | Remembers your light/dark theme choice | Up to 12 months | | Settings and preference cookies | Remember other UI choices like default thresholds (Phase 2) | Up to 12 months |

Analytics cookies — help us understand how the Service is used, in aggregate.

| Cookie | Purpose | Duration | |---|---|---| | PostHog analytics | Aggregated, privacy-respecting usage analytics — page views, feature use, error tracking. Configured without advertising or cross-site tracking, and where possible without persistent cookies. | Up to 12 months |

We do not use third-party advertising cookies, tracking pixels for ad networks, or social-media tracking cookies.

6.2 How to control cookies

You can control cookies through several methods:

a. Browser settings. Most browsers let you block or delete cookies. Look for "Privacy," "Security," or "Cookies" in your browser settings. Blocking strictly necessary cookies may prevent parts of the Service from working.

b. Per-site controls. Some browsers let you block cookies for individual sites.

c. Do Not Track. Some browsers send a "Do Not Track" signal. We honor this signal where required by law; our analytics provider may also honor it independently.

d. Mobile. On mobile, you can usually limit ad tracking through device settings (iOS: "Allow Apps to Request to Track"; Android: "Ads" settings).

6.3 Changes to cookie use

If we add new categories of cookies (for example, if we start using cookies that require explicit consent in your jurisdiction), we will update this section and, where required, request your consent before setting them.

7. Security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission or storage system is completely secure. You provide information at your own risk.

If we become aware of a security breach affecting your personal information, we will notify you as required by law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information ("right to be forgotten")
• Restriction — request that we limit how we use your information
• Portability — request a machine-readable copy of your data
• Objection — object to certain uses of your information (e.g., marketing)
• Withdrawal of consent — where processing is based on consent, you may withdraw it

To exercise these rights, contact us at legal@hedgevo.com. We will respond within the time period required by applicable law.

8.1 California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act. We do not sell your personal information. You may request information about the categories of personal information we collect, the purposes for collection, and the categories of third parties with whom we share information.

8.2 EU/EEA/UK residents (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing your personal information include: contract performance, legitimate interest, consent (for marketing), and legal obligation. You have the right to lodge a complaint with your local data protection authority.

8.3 Other jurisdictions

Residents of Virginia, Colorado, Connecticut, Utah, and other states with consumer privacy laws may have similar rights. Contact us to exercise them.

9. Children's Privacy

The Service is intended for users 21 years of age or older (or the legal minimum age for sports wagering in their jurisdiction). We do not knowingly collect personal information from individuals under 18. If we learn we have collected information from a person under 18, we will delete it promptly. If you believe we have collected such information, please contact us.

10. International Transfers

Hedgevo is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries. By using the Service, you consent to such transfers.

11. Third-Party Links

The Service may contain links to third-party websites (e.g., sportsbook sites, responsible-gambling resources). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance.

13. Contact

Questions about this Privacy Policy or our data practices? Contact us at:

legal@hedgevo.com

Workhorse Holdings LLC d/b/a Hedgevo