Privacy Policy

AVRA AI LLC ("AVRA," "we," "us," "our") operates the AVRA fantasy football decision platform at tryavra.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.

1. Information we collect

Information you give us directly:

• Name and email address when you sign up, join the waitlist, or contact us.
• Account profile data, username, display name, time zone, communication preferences, optional avatar URL.
• Fantasy account identifiers you choose to link (e.g., your Sleeper username + numeric user ID). We use these to read your public league data; we do not access private credentials.
• Payment information you provide to our payment processor (Stripe) for paid plans. AVRA does not receive or store card numbers.
• Messages you send us via the contact form, email, or support channels.

Information collected automatically:

• Standard log data, IP address, browser type, device characteristics, pages viewed, timestamps.
• Authentication metadata, session tokens, last sign-in time, user-agent strings.
• Usage signals, which leagues you sync, which recommendations you act on, refresh frequency. This drives our model improvements and feature decisions.
• Cookies and local storage for session persistence + remembering your active league.

Information from third parties: when you connect a fantasy platform, we receive public league + roster + transaction data from that platform's public API (e.g., Sleeper). We do not request credentials.

2. How we use information

• To operate the Service, load your leagues, compute projections, deliver recommendations.
• To improve our models, aggregated usage signals refine our machine-learning predictions.
• To communicate with you, transactional emails (welcome, password reset, billing receipts) and, with your consent, product updates.
• To process payments and prevent fraud, via Stripe.
• To monitor security, detect abuse, and protect the platform.
• To comply with legal obligations and respond to lawful requests.

3. Who we share information with

We do not sell your personal data. We share limited information only with the following service providers, and only as needed to operate the Service:

• Supabase, our database and authentication provider. Stores all account, league, and usage data.
• Resend, sends our transactional and account emails.
• Stripe, processes payments. Stripe receives your billing information directly; AVRA does not store card data.
• Modal Labs, runs our machine-learning training jobs on aggregated, non-personally-identifying data.
• Fantasy platforms (e.g., Sleeper), we read your public league data via their official APIs.
• Law enforcement or regulators, when required by valid legal process.

4. Data security

We protect data with industry-standard safeguards: TLS encryption in transit, encryption at rest, row-level security on every database table, scoped API tokens, and least-privilege access for our team. No system is perfectly secure; if we ever discover a breach affecting your data we will notify you promptly as required by law.

5. Data retention

We retain your account information for as long as your account is active. If you delete your account, we soft-delete first (7-day grace period to recover) and then permanently remove your personal data, except where retention is required for legal, accounting, or fraud-prevention reasons. Aggregated, non-identifying data may be retained indefinitely to improve our models.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate personal data.
• Delete your personal data (GDPR Article 17, CCPA right to delete).
• Export your data in a portable format (GDPR Article 20).
• Object to or restrict certain processing.
• Withdraw consent for marketing communications at any time.

Most of these rights can be exercised directly in your account settings (My account, Danger zone). For anything else, email privacy@tryavra.com.

7. Cookies and tracking

We use cookies and local storage for essential session management (keeping you signed in) and for remembering your preferences (active league, time zone). We do not currently use third-party advertising trackers. If we ever add analytics that go beyond essential use, we will update this policy and offer a clear opt-out.

8. Children

The Service is not intended for children under 13 (or under 16 in jurisdictions where that is the applicable threshold). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@tryavra.com and we will delete it.

9. International users

AVRA AI LLC operates in the United States. If you access the Service from outside the U.S., you understand and consent to the transfer and processing of your information in the U.S., where data-protection laws may differ from those in your country.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date and, where appropriate, notify you by email or in-product banner. Continued use of the Service after the changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy or our data practices? Reach us at privacy@tryavra.com, via the contact form, or at: