Privacy Policy

What this policy covers

We operate a football analytics product focused on Sporting CP. This policy applies when you browse sportingcp.ai, create or access an account, interact with our API, or contact us for support.

By using our services, you agree to the practices described below.

Data we collect

We only collect the data needed to run the product, secure the service, and comply with billing rules.

• Account data: email, hashed password or SSO identifier, language preference, and subscription tier.
• Usage and device data: IP address, browser/device type, timestamps, pages or features used, and error logs. We use Vercel Analytics and server logs to keep the site reliable, and a Google Ads tag (AW-11555838107) for conversion measurement.
• Billing data: plan selection, Stripe customer and subscription identifiers, tax/VAT details you provide, invoices, and payment status. Card details are processed directly by Stripe and are not stored by SportingCP.ai.
• Football model inputs: match data and anonymized telemetry that never includes information about identifiable individuals.
• Support data: information you include when you email or otherwise contact us.

How we use data

We process personal data to:

• Authenticate you, maintain sessions, and deliver predictions and analytics you request.
• Process payments, manage subscriptions, and send service messages about your plan.
• Monitor performance, detect abuse or fraud, and improve model quality.
• Run marketing and conversion measurement for our own services.
• Comply with accounting, tax, and legal obligations.

Legal bases under the GDPR

Depending on the context, we rely on: (a) performance of a contract (providing the app you sign up for), (b) legitimate interests (security, product analytics, fraud prevention, conversion measurement), (c) consent (non-essential cookies/tags), and (d) legal obligations (keeping invoices and tax records).

Sharing and processors

We do not sell personal data. We do not rent personal data. We share it only with service providers that help us run SportingCP.ai:

• Supabase for authentication, database storage, and session management.
• Stripe for payments, invoicing, and subscription management. Card data goes directly to Stripe.
• Vercel for hosting and Vercel Analytics for aggregated product analytics.
• Google Ads/Tag Manager (AW-11555838107) for conversion measurement.
• Support and email tooling to respond when you contact us.

Cookies and tracking

Essential cookies keep you signed in and secure the service. Analytics and conversion tags may set additional cookies or use similar technologies. You can block or delete cookies in your browser; doing so may limit sign-in and subscription features. We do not use tracking for gambling, betting, or third-party advertising offers.

Data retention

Account and billing records are kept while your account is active and as required for tax and accounting. Invoices and tax evidence may be retained for the legally required period.

Server logs and product analytics are generally kept for less than 12 months unless needed to investigate security issues.

If you close your account or request deletion, we delete or anonymize personal data unless we must retain certain records for legal reasons.

Security

We encrypt data in transit, hash passwords, and restrict access to production systems to personnel who need it. No online service can guarantee perfect security, but we monitor for abuse and apply updates to keep the platform protected.

International data transfers

Our providers may process data in the European Union and the United States. Where required, we rely on standard contractual clauses or equivalent safeguards to protect personal data transferred outside your region.

Your rights

If you are in the EU/EEA, UK, or another region with similar rights, you may request: access, correction, deletion, restriction, portability, and objection to certain processing, as well as withdrawal of consent where that is our legal basis. You can also lodge a complaint with your local data protection authority.

To exercise these rights, contact us using the email below. We may need to verify your identity before responding.

Children

SportingCP.ai is not directed to children under 16, and we do not knowingly collect personal data from them.

Changes to this policy

If we make material changes, we will update the date above and, where appropriate, notify you through the app or by email.