Security

A short, honest summary of how we protect your data, and why your money is never at risk with us.

Your money is never with us

Tennis Magic AI is an information service. We do not ask for your exchange or sportsbook password or API key, we do not connect to your betting accounts, we hold no funds and we place no orders. The practice game uses pretend money with no cash value.

Where your card information lives

Your card number lives at Stripe, a PCI-DSS Level 1 service provider. Card data enters Stripe's own form and never touches our servers. We see only the subscription status and the identifiers Stripe provides.

Transport and account security

• HTTPS on every page.
• HTTP-only, same-site session cookies.
• Passwords stored only as salted hashes.
• No third-party advertising trackers.
• We will never ask for your password by email, text or phone. Anyone who does is not us; report it through /contact.

What we deliberately do not store

• Your card number (Stripe holds it).
• Any exchange or sportsbook password, API key, balance or position.
• Bank account numbers, government ID or passport scans.

If we discover a breach

We will notify affected users without undue delay and as the law requires, at the email on the account, and explain what happened, what we did and what you should do.

Reporting a security issue

Send a private report through /contact with the topic "Security / privacy". Please give us time to respond before disclosing anything publicly. We treat responsible reporters well.

Full data handling is described in our Privacy Policy. Full legal terms are in our Terms of Use.