Privacy policy

1. Data controller

The data controller for your personal information is the owner of Football Intelligence (hereinafter "Service", "we", "us"). Contact for data protection matters: hello@footballinteligence.com.

2. Data we collect and why

Category	Specific data	Purpose	Legal basis (GDPR)
Account data	Username, email address, encrypted password	Account registration and login	Art. 6(1)(b) — performance of contract
Activity data	AI chat history (SportGPT), betting simulator state, preferences (risk / experience level)	Service delivery, personalisation	Art. 6(1)(b) — performance of contract
Payment data	Billing email, Stripe subscription ID	PRO / Elite subscription management	Art. 6(1)(b) — performance of contract
Technical data	IP address (server logs), access timestamps	Security, abuse prevention	Art. 6(1)(f) — legitimate interest
Local storage	Betting simulator state stored in browser localStorage	Session persistence across page refreshes	Art. 6(1)(b) — performance of contract

We do not collect or process special categories of personal data (Art. 9 GDPR) such as health, racial, political, or biometric data.

3. Third-party processors

• Stripe Inc. (USA) — payment and subscription processing. Stripe privacy policy.
• Anthropic PBC (USA) — AI query processing (SportGPT). Queries are sent to the Anthropic API. We do not store chat history server-side after the session ends. Anthropic privacy policy.
• Resend.com (Resend Labs Inc., USA) — transactional and marketing email delivery. Used for account verification, billing receipts, and (with opt-in) the weekly digest. Resend privacy policy.
• Hosting provider — server infrastructure (Railway). Data is stored in the EU or in jurisdictions with adequate protection.

4. Data retention

Data	Retention period
Account data (username, email, password)	Until account deletion by user, or 24 months after last activity
Activity history (AI picks, simulator)	12 months from last login
Payment data (Stripe)	Per Stripe policy (typically 7 years for tax compliance)
Server logs (IP)	30 days

5. Your rights

Under GDPR, you have the following rights:

• Right of access — request a copy of your data (Art. 15)
• Right to rectification — request correction of inaccurate data (Art. 16)
• Right to erasure ("right to be forgotten") — request deletion of your account and data (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing based on legitimate interest (Art. 21)

To exercise these rights, contact us at hello@footballinteligence.com. We will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority.

6. Email marketing & one-click unsubscribe

Marketing emails (weekly digest, occasional product news) are sent only if you opted in — the checkbox at registration is unchecked by default. You can unsubscribe at any time via the one-click link in every marketing email (RFC 8058 List-Unsubscribe) or by emailing us. Transactional emails (verification codes, billing receipts) are required for the service and cannot be opted out of while your account is active.

7. Cookies and localStorage

The Service uses localStorage (browser-side storage, not cookies) to store:

• Betting simulator state (balance, bet history)
• Timezone preferences

This data remains solely on your device and is not automatically transmitted to our servers. You can delete it at any time via your browser settings.

A single first-party session cookie (signed, HttpOnly, SameSite=Lax) is set after login for authentication. The Service does not use tracking cookies, advertising pixels, or third-party analytics tools.

8. Security

• Passwords are hashed using bcrypt (salted hash) — we never store passwords in plaintext.
• All communication is secured via HTTPS / TLS.
• HTTP security headers (Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy).
• Sessions are bound to a signed cookie; admin endpoints require a separate secret.

9. International transfers

Data may be transferred to entities outside the EEA (Stripe, Anthropic, Resend — all USA) under Standard Contractual Clauses (SCC) approved by the European Commission and/or under the EU–US Data Privacy Framework (DPF).

10. Minors

The Service is intended solely for persons aged 18 or older. If you believe a minor has registered, contact us immediately at hello@footballinteligence.com — we will delete the account and associated data.

11. Changes to this policy

We reserve the right to update this privacy policy. Material changes will be communicated via an in-app notification or by email. The date of last update is shown at the top of this document.

12. Gambling disclaimer

13. Contact

For data protection matters: hello@footballinteligence.com.