Privacy Policy

Effective Date: July 26, 2026
Last Updated: July 26, 2026

This Privacy Policy explains how Pink Panda Labs LLC, doing business as Prop Lab ("Prop Lab," "we," "us," or "our") collects, uses, discloses, and retains personal information when you access or use the Prop Lab website, accounts, subscriptions, content, features, and related services (collectively, the "Service").

This Privacy Policy applies to information processed through the Service. It does not apply to third-party websites or services that maintain their own privacy policies, including payment interfaces, sportsbooks, or other services you choose to visit.

1. Summary of Our Practices

We use personal information to:

• create, authenticate, secure, and maintain accounts;
• provide Free and Pro features;
• maintain profiles, watchlists, preferences, and entitlements;
• process plan reservations, subscriptions, payments, taxes, renewals, cancellations, refunds, and disputes;
• communicate with users about accounts, security, support, and billing;
• prevent fraud, abuse, unauthorized access, and other harmful activity;
• operate, troubleshoot, maintain, and improve the Service;
• measure product usage and performance when you consent to optional Analytics; and
• comply with legal, tax, accounting, security, and enforcement obligations.

We do not currently sell personal information or disclose it to third parties for cross-context behavioral advertising. We do not currently use personal information to serve targeted advertising through the Service.

Optional Analytics is disabled until you make an affirmative choice through our Privacy Choices interface. Technologies that are reasonably necessary for authentication, security, fraud prevention, billing, and requested product functionality may operate without optional Analytics consent.

2. Personal Information We Collect

The information we collect depends on how you use the Service.

2.1 Account and profile information

When you create or maintain an account, we may collect or process:

• first and last name;
• email address;
• account and profile identifiers;
• authentication credentials and authentication-related metadata;
• email-verification status;
• account role and feature-entitlement status;
• account creation and update timestamps;
• Terms acceptance date and document version;
• password-reset, magic-link, reauthentication, and security records; and
• account status and related administrative information.

Authentication credentials are handled through our authentication systems and service providers. We do not display your password to our personnel.

2.2 Watchlists, preferences, and product activity

When you use the Service, we may collect or store:

• props added to or removed from your watchlist;
• selected filters, teams, games, players, markets, and sorting choices;
• interface, panel, rail, table, display, pagination, and similar preferences;
• pages, routes, research views, and features accessed;
• modal, navigation, copy, and other feature interactions;
• selected plans and upgrade interactions;
• feature-access and entitlement information; and
• other actions you take through the Service.

Authenticated watchlist information is associated with your account. Some interface settings are stored only in your browser and may not follow you to another browser or device.

2.3 Billing, reservation, and transaction information

If you reserve, purchase, renew, change, cancel, or otherwise manage a paid plan, we and our payment and billing providers may collect or process:

• customer and transaction identifiers;
• the name associated with a payment method;
• billing and shipping address;
• selected plan and accepted price;
• billing period, access period, and renewal information;
• trial and promotion eligibility and status;
• reservation, activation, renewal, cancellation, and grace-period status;
• payment-method identifier and limited payment-method details, such as card type and last digits where available;
• invoice, payment, refund, dispute, and chargeback information;
• transaction amount, currency, and applicable tax;
• failed-payment and payment-recovery information; and
• financial audit, reconciliation, and recordkeeping information.

Your complete payment-card number and card security code are entered directly into a hosted payment interface operated by our payment processor. Prop Lab generally does not receive or store those complete values.

Although Prop Lab provides a digital service, a United States shipping address may be collected when needed for tax validation or supported payment methods. We do not use that address to ship a physical product unless we expressly tell you otherwise.

2.4 Device, network, session, and security information

When you access the Service, we or our providers may automatically receive:

• Internet Protocol address;
• browser, device, operating-system, and language information;
• user-agent and request metadata;
• referring page or domain;
• session and authentication identifiers;
• cookie and browser-storage information;
• approximate or coarse location derived from network information;
• timestamps and requested routes;
• error, availability, and performance information;
• fraud, rate-limit, and abuse-prevention signals; and
• CAPTCHA or similar challenge results.

We use this information to deliver the Service, maintain secure sessions, prevent abuse, diagnose problems, and protect users and systems.

2.5 Optional analytics and performance information

If you consent to Analytics through Privacy Choices, we and our analytics and performance providers may collect:

• page and route views;
• referrer information;
• browser, device, and operating-system category;
• approximate or coarse geographic information;
• navigation, engagement, and feature-interaction events;
• selected low-cardinality product-event information; and
• page-load, responsiveness, reliability, and performance measurements.

We do not intentionally include your name, email address, authentication token, complete payment information, billing address, shipping address, or support-message contents in analytics events.

Optional analytics scripts and custom analytics events remain disabled unless the browser's saved Analytics choice permits them.

2.6 Communications

If you contact us, we may collect:

• your name and email address;
• the contents of your message;
• attachments, screenshots, or other information you provide;
• support, troubleshooting, billing, privacy, security, or legal information; and
• our responses and internal handling notes.

Please do not send sensitive information that is not necessary for us to address your request.

3. How We Collect Information

We collect personal information:

• directly from you when you create or manage an account, select a plan, complete checkout, update settings, or contact us;
• automatically from your browser, device, network, and session when needed to operate and protect the Service;
• from your interactions with Service features;
• when you affirmatively consent to optional Analytics;
• from service providers that support authentication, hosting, data storage, security, payments, tax, billing, analytics, performance measurement, communications, and artificial intelligence; and
• from transaction, billing, refund, dispute, fraud-prevention, and account-security events.

We also receive sports, market, player, injury, weather, and similar football information from internal and external data sources. That information generally concerns NFL events and participants rather than Prop Lab users.

4. How We Use Personal Information

We may use personal information to:

• create, authenticate, and maintain accounts;
• verify email addresses and process password, magic-link, and reauthentication flows;
• provide profiles, watchlists, preferences, research tools, and other account-backed features;
• determine and enforce Free, Pro, and administrative access;
• display relevant account, plan, access, and billing information;
• create and manage preseason reservations and paid plans;
• process payments, taxes, renewals, cancellations, refunds, disputes, and failed-payment recovery;
• send account, security, service, support, trial, renewal, payment, cancellation, invoice, and receipt communications;
• respond to questions and troubleshoot problems;
• detect, investigate, and prevent fraud, abuse, scraping, account compromise, unauthorized access, and security incidents;
• enforce our Terms and protect legal rights;
• maintain financial, tax, consent, transaction, and audit records;
• understand product usage, reliability, and performance when optional Analytics consent has been provided;
• test, maintain, improve, and develop the Service;
• comply with law, legal process, court orders, and lawful government requests; and
• evaluate or complete a merger, financing, restructuring, acquisition, sale of assets, or similar business transaction.

We may use information that has been aggregated or deidentified so that it is not reasonably linked to a particular person. We do not attempt to reidentify deidentified information except to test whether our deidentification measures work or where otherwise permitted by law.

5. AI-Powered Features

Prop Lab uses an external artificial-intelligence service provider to help produce generalized NFL player-prop research, explanations, and AI Picks.

The inputs used for these generalized outputs may include structured sports and market information such as:

• player, team, opponent, position, and prop type;
• current and historical line information;
• model projections and probabilities;
• recent performance and matchup context;
• injury and availability information; and
• venue and weather conditions.

We do not intentionally include your name, email address, authentication information, billing information, payment information, watchlist, individual product activity, or support communications in the model inputs used to generate generalized AI Picks.

We may retain generated recommendations and related operational metadata, such as the model or configuration version, input fingerprint, output status, and quality-control information, so that the output can be displayed, evaluated, reproduced, improved, and audited.

AI Picks are generalized research outputs. They are not used to make employment, credit, housing, insurance, legal, or other decisions that produce legal or similarly significant effects concerning you.

6. Cookies and Browser Storage

6.1 Necessary technologies

We and our providers may use cookies or similar technologies that are reasonably necessary to:

• maintain authenticated sessions;
• complete secure authentication and redirect flows;
• protect against fraud, abuse, and unauthorized access;
• preserve requested product behavior;
• process and reconcile billing; and
• maintain security, availability, and reliability.

Because these technologies are needed to provide the Service you request, they are not controlled by the optional Analytics setting. Blocking them through your browser may prevent parts of the Service from working.

6.2 Local browser preferences

We may store information locally in your browser for purposes such as:

• filters and sorting;
• interface panels or rails;
• table and display preferences;
• navigation, pagination, scroll, or dismissal state; and
• your Privacy Choices record.

These settings may remain on the device until they expire, are replaced or invalidated, or you clear browser storage.

6.3 Analytics consent record

The Service stores a versioned Analytics choice in your browser. That record includes:

• the consent-policy version;
• whether Analytics is enabled; and
• the time the choice was saved.

The choice is browser- and device-specific and is not currently synchronized through your Prop Lab account. Clearing browser storage, using another browser or device, or using private browsing may require you to make the choice again.

6.4 Optional analytics technologies

Optional analytics scripts, identifiers, and custom events are enabled only after you affirmatively accept Analytics.

You may later change your choice using Privacy Choices in the Service. When you withdraw consent, we disable future optional Analytics collection in that browser, disable the optional analytics tag, attempt to remove related analytics cookies controlled through the Service, and reload the page so the new choice takes effect.

Withdrawal does not automatically delete information transmitted before withdrawal. You may submit a privacy request concerning previously collected information as described below.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients.

7.1 Service providers

We use service providers that perform services on our behalf, including providers for:

• account authentication and account-backed data storage;
• cloud hosting, content delivery, database, and backup infrastructure;
• security, fraud prevention, abuse prevention, and CAPTCHA services;
• payment processing, tax calculation, invoicing, receipts, and billing communications;
• optional analytics and performance measurement;
• email delivery and customer support;
• artificial-intelligence model processing;
• application monitoring, diagnostics, and troubleshooting; and
• legal, accounting, tax, security, and compliance services.

These providers may receive personal information reasonably necessary to perform their services and are subject to contractual, technical, or legal restrictions appropriate to their roles.

7.2 Legal, safety, and enforcement disclosures

We may disclose information when we reasonably believe it is necessary to:

• comply with law, legal process, a court order, or a lawful government request;
• enforce our Terms or other agreements;
• detect, investigate, or prevent fraud, unauthorized access, security incidents, or harmful conduct;
• protect the rights, property, or safety of Prop Lab, users, providers, or others; or
• establish, exercise, or defend legal claims.

7.3 Business transactions

Information may be disclosed or transferred as part of a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction.

A successor would remain subject to this Privacy Policy for previously collected information unless it provides appropriate notice and obtains any consent required before materially changing the applicable practices.

7.4 At your direction

We may disclose information when you request or authorize us to do so, such as when you choose to visit or interact with a third-party service.

8. Sale, Targeted Advertising, and Significant Profiling

We do not currently:

• sell personal information for money or other valuable consideration;
• disclose personal information for cross-context behavioral advertising;
• use personal information to serve targeted advertising through the Service; or
• profile users in furtherance of automated decisions that produce legal or similarly significant effects concerning them.

Optional analytics providers may receive browser and product-activity information after you consent, as described in this Policy. We use that information for product measurement, reliability, and performance rather than targeted advertising.

If these practices materially change, we will update this Privacy Policy, provide any required notice, and make legally required opt-out controls available before beginning the new processing.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, comply with law, resolve disputes, prevent fraud, maintain security, and enforce agreements.

Retention depends on the information and purpose:

• Account and profile information is generally retained while the account is active and is deleted or deidentified following account deletion, subject to the exceptions below.
• Account-backed watchlist information is generally retained while associated with an active account and removed from active account systems when the account is deleted.
• Browser-local preferences and consent records remain until replaced, invalidated by a later version, expired, or cleared from the browser.
• Authentication, security, abuse-prevention, and technical logs may be retained for a reasonable period needed to prevent fraud, investigate incidents, protect systems, and resolve disputes.
• Analytics information is retained according to our configured settings and the applicable provider's retention controls.
• Support and other communications are retained for as long as reasonably needed to respond, preserve support history, resolve disputes, and protect legal rights.
• Billing, payment, tax, refund, dispute, cancellation, consent, and transaction records may be retained after account deletion for accounting, tax, financial reporting, fraud prevention, chargeback management, legal compliance, audit, and claims purposes.
• Backups may contain deleted information for a limited period until overwritten through ordinary backup processes.
• Aggregated or deidentified information may be retained for longer where it cannot reasonably be linked to you.

Where practical, retained financial and audit records are detached from the active authentication account after deletion.

10. Account Changes and Deletion

Authenticated users may use account controls to update certain profile information, request a verified email change, update a password, manage eligible billing settings, and request account deletion.

Account deletion may require recent authentication and completion of billing-safety checks. When the deletion workflow is successfully completed, we will take reasonable steps to:

• cancel future subscription billing and unactivated reservations;
• terminate current account and feature access;
• delete the authentication account and active profile;
• remove account-backed watchlist information; and
• detach retained financial or audit information from the active account where appropriate.

Deleting your account does not necessarily delete:

• transaction, tax, invoice, refund, dispute, fraud-prevention, or audit records that we reasonably need to retain;
• information temporarily stored in backups;
• information a provider must retain under an independent legal obligation;
• deidentified or aggregated information; or
• information needed to establish, exercise, or defend a legal claim.

Account deletion is permanent and may immediately end trial or paid access and forfeit remaining prepaid time without a refund, as described in our Terms.

Browser-local settings are stored separately from the account. You may need to clear your browser's cookies or local storage to remove those settings from the device.

11. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• confirm whether we process personal information concerning you;
• access personal information or categories of personal information we process;
• correct inaccurate personal information;
• delete personal information;
• obtain a portable copy of information you previously provided;
• obtain information about third parties to which personal information was disclosed where applicable;
• opt out of the sale of personal information, targeted advertising, or certain significant profiling;
• withdraw consent for processing based on consent; and
• appeal a decision concerning a privacy request.

You can update certain information and request account deletion through your account settings. You can manage optional Analytics through Privacy Choices.

To submit another privacy request, email proplab.help@gmail.com with the subject Privacy Request and describe the right you want to exercise.

We may need to verify your identity or authority before acting. Verification may include confirming control of the account email or requesting information reasonably related to the request. We will not request more information than reasonably necessary for verification.

Where permitted, an authorized agent, guardian, or conservator may submit a request on your behalf. We may require proof of authority and direct verification where allowed.

If we deny a request, you may appeal by replying to our response with the subject Privacy Appeal and explaining why you believe the decision should be reconsidered. We will respond within the period required by applicable law and will provide information about additional complaint options where required.

We will not unlawfully discriminate against you for exercising a privacy right. Some features may be unavailable if the information is necessary to provide the requested Service.

We do not currently sell personal information, use it for targeted advertising, or conduct significant profiling as described above. Requests to opt out of those activities will be treated consistently with our current practices.

12. Browser Privacy Signals and Cross-Site Collection

Some browsers offer a "Do Not Track" signal. Because there is no uniform industry standard for interpreting that signal, the Service does not currently respond to it as a separate privacy control. Use Privacy Choices to control whether optional Analytics operates in your browser.

We do not currently sell personal information or disclose it for cross-context behavioral advertising. As a result, a Global Privacy Control or similar opt-out signal does not change those current practices. If we later engage in processing for which applicable law requires recognition of an opt-out preference signal, we will implement the required response before beginning that processing.

After you consent to optional Analytics, analytics and performance providers may collect information about your activity on the Service using cookies or similar identifiers and may process information under their own privacy notices. We do not intentionally configure optional Analytics for targeted advertising.

13. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. Depending on the system and information involved, these safeguards may include:

• access restrictions and least-privilege controls;
• authentication and reauthentication controls;
• encryption in transit;
• server-controlled billing and entitlement records;
• fraud, abuse, and rate-limit protections;
• logging, monitoring, and reconciliation;
• provider security controls;
• backups and recovery procedures; and
• incident-response processes.

No Internet service, transmission method, or storage system is completely secure. We cannot guarantee that personal information will never be accessed, disclosed, altered, lost, or destroyed without authorization.

You are responsible for protecting your credentials and promptly notifying us if you suspect unauthorized access.

14. Children's Privacy

The Service is intended for adults and account holders must be at least 18 years old. The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that we collected personal information from a child under 13 without legally sufficient authorization, we will take reasonable steps to delete it.

If you believe a child has provided personal information through the Service, contact us at proplab.help@gmail.com.

15. International Access and Data Transfers

Prop Lab is operated from the United States. We and our providers may process information in the United States and other countries where they operate.

If you access the Service from outside the United States, your information may be transferred to and processed in jurisdictions with data-protection laws that differ from those in your location.

Paid plans are currently intended for eligible United States customers. Before intentionally offering paid services in a jurisdiction that requires additional privacy notices, legal bases, transfer safeguards, representatives, or consent mechanisms, we will review and update our practices as appropriate.

16. Third-Party Links and Services

The Service may link to or interact with third-party websites and services. Those third parties may collect information directly from you and process it under their own privacy policies.

We do not control third-party privacy practices. Review the applicable policy before providing information or using a third-party service.

17. Changes to This Privacy Policy

We may update this Privacy Policy as our Service, providers, billing model, legal obligations, or data practices change.

We will post the revised Policy with a new effective date and last-updated date. For material changes, we may provide additional notice by email, in-product message, consent interface, or another appropriate method.

If a change materially affects how we collect, use, or disclose previously collected personal information, we will provide any notice and opportunity to withdraw consent required by applicable law before applying the materially different practice.

Your continued use of the Service does not substitute for consent where applicable law requires affirmative consent.

18. Contact Us

For privacy questions, requests, appeals, or complaints, contact:

Pink Panda Labs LLC
Doing business as Prop Lab
Email: proplab.help@gmail.com