Privacy Policy

When you create an account and use Carve, we collect:

• Account information — email address and a hashed password (or, if you sign in with a magic link, no password at all).
• Billing information — subscription plan and status. Card details are collected and stored directly by Stripe, our payment processor; we don’t see or store your full card number.
• Bet tracking data — bets you choose to log in Carve (sport, market, stake, odds, sportsbook, outcome), and any notes you add. This applies to every sport Carve supports.
• Cash Out analyzer data — if you upload a screenshot of a bet slip, the screenshot is processed as described in section 3. What Carve keeps is the ticket details you review and confirm (for example teams, markets, odds and stake), not the image.
• Messages you send us — the name, email address and message you enter in the contact form.
• Technical data — your IP address and basic request information in our hosting and security logs, and short-lived counters that limit repeated sign-in and form attempts. We do not currently run analytics or advertising trackers.

• To provide the service — authenticate you, run your subscription, and show your tracked bets, recaps, and analysis.
• To communicate with you — account notices, sign-in and verification emails, billing receipts, replies to your messages, and (only if you opt in) product updates.
• To keep Carve secure and working — preventing abuse, diagnosing bugs and limiting automated sign-in attempts.

We don’t sell your personal information, and we don’t use it for advertising.

When you use the Cash Out analyzer to read a bet-slip screenshot, your browser first re-encodes the image, which removes location and camera metadata. Carve’s server then sends the image to Anthropic, our image-reading provider, so the ticket details can be read. Carve does not store the image.

Anthropic keeps what it receives for up to 30 days by default before deleting it automatically (up to 2 years if its safety systems flag the content), and by default does not use it to train its models. Carve has no zero-retention agreement with Anthropic. Slips can show account details, so crop or cover anything you do not want sent. Before the first upload we ask you to acknowledge this.

We share data only with the service providers that help us run Carve, and only what each needs to do its job:

• Stripe — payment processing and billing.
• Anthropic — reading Cash Out screenshots you choose to upload (section 3).
• Resend — delivering our emails, including sign-in links and messages from the contact form.
• Vercel and our database and storage providers — running the application and storing your account and tracked-bet data securely.

Carve also retrieves odds, schedules, statistics and weather from sports-data providers. Those requests are for games, markets and players. They do not include your account details, your tracked bets or your screenshots.

We don’t share your tracked-bet history or account details with sportsbooks, advertisers, or data brokers.

Carve uses cookies that are needed to keep you signed in and to protect sign-in forms. It also stores display preferences, such as your odds format, in your browser. We do not use analytics or advertising cookies. If that changes, we will ask for your consent where the law requires it and update this policy first.

We keep your account and bet-tracking data for as long as your account is active. If you ask us to delete your account, we delete or anonymize your personal data within a reasonable period, except where we’re required to retain records (for example, billing records for tax purposes). Messages sent through the contact form are delivered by email and are not stored by Carve’s application; we keep them in our mailbox only as long as needed to respond.

• Update your account information from Settings.
• Delete individual tracked bets.
• Ask us to access, correct or delete your account and associated data, or to stop product emails, using the contact form.

We use industry-standard measures — encrypted connections, hashed passwords, rate limiting and access controls — to protect your data. No method of transmission or storage is perfectly secure, and we can’t guarantee absolute security.

Carve is not directed at, and is not intended to be used by, anyone under 18.

We may update this policy from time to time. If we make material changes, we’ll post the updated policy here with a new “last updated” date.

Questions about this policy or your data? Write to us through the contact form.