Privacy Policy

1. Who We Are

AI Poker Lab ("Lab", "we", "us") is a ToS-compliant GTO poker training platform at aipokerlab.com. Contact: hello@aipokerlab.com / privacy@aipokerlab.com.

2. What We Collect

• Account data: email, name, image (via auth provider), subscription tier, Stripe customer ID.
• Hand histories & hands: raw text you upload, parsed JSON, stakes/format, hero cards, actions, board, results. Stored per-user, isolated.
• Usage & product data: leaks, drills, drill attempts, progress (level, streak, XP), coaching sessions (prompt, solver context, LLM response, tokens), feedback.
• Technical: IP, user agent, cookies/localStorage for auth and preferences, analytics (PostHog / Vercel Analytics) if enabled.
• Payments: processed by Stripe. We never store full card numbers.

3. How We Use It

• Provide the Lab: parsing, solver lookups, leak detection, drills, AI coaching.
• Personalize coaching (leak-aware, tone adaptation, spaced repetition).
• Billing, subscription management, and support.
• Product improvement and analytics (aggregated, not per-hand without consent).
• Security, fraud prevention, and ToS enforcement.

4. Hand History Privacy — No Training Without Opt-In

Your hands never train our models without explicit opt-in. Raw histories are stored encrypted (R2 + Postgres), parsed hands are isolated per user, and embeddings (if used for similarity search) are per-user unless you opt into aggregated research. You can request deletion of all hand data at any time via privacy@aipokerlab.com or in-app (when available).

5. AI Coach & LLM Data

Coaching requests send solver context + leak summary + anonymized hand snippet to our LLM provider (OpenAI / Anthropic) for inference only. We cache responses by hash(solverContext + leakId) for 7 days to reduce cost — many users share spots. We do not use your prompts to fine-tune models without opt-in. See Methodology for grounding details.

6. Sharing & Processors

• Processors: Vercel (hosting), Neon/Supabase (Postgres), Upstash (Redis), Cloudflare R2 (storage), Stripe (payments), OpenAI/Anthropic (LLM inference), PostHog/Vercel Analytics (analytics), Resend (email).
• We do not sell your personal data.
• We share only as needed to provide the service or as required by law.

7. Retention

• Account & subscription: while account is active + 30 days after deletion (for recovery).
• Hand histories & hands: until you delete them or delete your account.
• SolverCache: shared, not per-user; LRU eviction.
• Coaching sessions: until account deletion or per your request.

8. Your Rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have rights to access, correct, delete, port, or object to processing. Contact privacy@aipokerlab.com. We respond within 30 days.

9. Cookies

We use essential cookies for auth and preferences, and analytics cookies if you consent (where required). You can control cookies via browser settings; essential cookies are required for login.

10. Security

HTTPS everywhere, encrypted storage, least-privilege access, and regular dependency updates. No system is 100% secure — we disclose breaches as required by law.

11. Children

Lab is not for users under 18. We do not knowingly collect data from children.

12. International Transfers

Data may be processed in the US and other regions where our processors operate. We use standard contractual clauses where required.

13. Changes

We'll update this page and, for material changes, notify via email or in-app. Continued use after changes means acceptance.

14. Contact

Privacy questions: privacy@aipokerlab.com · General: hello@aipokerlab.com · Contact form