🔒 Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, password, and any other information you provide during registration
• Payment Information: Payment card details are processed securely through Stripe. We do not store your full payment card information on our servers
• Profile Information: Any additional information you choose to provide in your user profile
• Communications: Messages, feedback, or other communications you send to us

1.2 Automatically Collected Information

• Usage Data: Information about how you interact with our service, including pages visited, features used, and time spent
• Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
• Log Data: Server logs, including timestamps, IP addresses, and error messages
• Cookies and Tracking Technologies: We use cookies and similar technologies to enhance your experience and analyze service usage

1.3 Third-Party Information

• Authentication Providers: If you sign in using third-party services (e.g., Google), we may receive information from those providers
• Payment Processors: Stripe provides us with transaction information necessary to process payments

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our AI-powered football analysis service
• Account Management: To create and manage your account, process transactions, and provide customer support
• Personalization: To personalize your experience and deliver relevant content and features
• Communication: To send you service-related notifications, updates, and marketing communications (with your consent where required)
• Analytics: To analyze usage patterns, improve our service, and develop new features
• Security: To detect, prevent, and address security issues, fraud, and abuse
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations to you
• Legitimate Interests: To operate and improve our service, ensure security, and prevent fraud
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Obligation: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our service:

• Stripe: Payment processing and subscription management
• Supabase: Database hosting and authentication services
• OpenAI: AI-powered analysis and chat functionality
• Hosting Providers: Cloud infrastructure and hosting services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or abuse
• Respond to legal requests

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Portability

You have the right to access and receive a copy of your personal data in a structured, commonly used format.

6.2 Correction

You can update or correct your personal information through your account settings or by contacting us.

6.3 Deletion

You may request deletion of your personal data, subject to our legal obligations to retain certain information.

6.4 Objection and Restriction

You may object to certain processing activities or request restriction of processing in specific circumstances.

6.5 Withdrawal of Consent

Where processing is based on consent, you may withdraw your consent at any time.

6.6 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

6.7 Exercising Your Rights

To exercise any of these rights, please contact us at the information provided in Section 10. We will respond to your request within 30 days (or as required by applicable law).

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer personal data from the EEA or UK to countries outside the EEA/UK, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by law

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Authenticate users and maintain sessions
• Remember your preferences and settings
• Analyze service usage and performance
• Provide personalized content and features

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our service.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date at the top of this page
• Sending you an email notification (for significant changes)

Your continued use of our service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Additional Information for Specific Regions

13.1 European Economic Area (EEA) and United Kingdom

If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your data protection rights.

13.2 Brazil

If you are located in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including the right to access, correct, delete, and port your personal data.

13.3 Canada

If you are located in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access and correct your personal information.