Privacy Policy

This Privacy Policy explains how footyGPT (“we”, “us”, “our”) collects and uses personal data when you use our website and chat. It should be read with our Terms of Service. The Service is for people aged 18 or over only.

For privacy requests: hello@footygpt.com.

1. Who is responsible

The operator of footyGPT is the data controller for personal data collected through the Service. We process data in line with the UK GDPR and the Data Protection Act 2018 (and, where it applies, the EU GDPR).

2. Data we collect

Depending on how you use the Service, we may process:

• Account data: email address, name if you provide it (for example via a sign-in provider), authentication identifiers, and sign-in timestamps.
• Usage data: chat prompts and answers, session metadata, credit balance, plan, and similar product events needed to run the Service.
• Billing data: payment status, Stripe customer and subscription identifiers, and limited billing history. We do not store full card numbers; Stripe processes card data.
• Technical data: IP address, device/browser type, approximate location derived from IP, cookies or similar identifiers, and diagnostic logs.
• Support data: information you send to hello@footygpt.com.

Please do not put special category data, payment card numbers, or anyone else’s personal data into chat prompts unless necessary.

3. How we use data (lawful bases)

• Contract: to create your account, authenticate you, deliver chat, apply credits, and provide customer support.
• Legitimate interests: to keep the Service secure, prevent abuse and fraud, debug errors, understand aggregate usage, and improve product quality — balanced against your rights.
• Legal obligation: to keep records required for tax, accounting, or to respond to lawful requests.
• Consent: where we use non-essential cookies or similar technologies, if we introduce them (we will ask first).

We do not use your chats to make automated decisions that produce legal or similarly significant effects about you (for example credit scoring or eligibility for financial products). AI replies are informational only and are not a decision about you.

4. Processors and sharing

We do not sell your personal data. We share data with service providers who process it on our instructions, including:

• hosting and delivery (for example Vercel);
• authentication and database (for example Supabase);
• payments (Stripe);
• AI model routing (for example OpenRouter and the underlying model providers) — your prompts and conversation context are sent to generate replies;
• sports data providers (for example Sportmonks) for fixtures and odds context.

Those providers have their own privacy terms. We may also disclose data if required by law, to protect rights and safety, or in connection with a business transfer (merger, acquisition, or asset sale), with appropriate safeguards.

5. Cookies and similar technologies

We use essential cookies and similar storage to keep you signed in, protect the session, and remember theme preference. These are necessary for the Service to function. We do not currently use advertising cookies or sell browsing data to ad networks. If that changes, we will update this policy and obtain consent where required by PECR / UK GDPR.

6. International transfers

Some processors are based outside the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the UK Extension to the EU-US Data Privacy Framework where applicable, or standard contractual clauses / the UK International Data Transfer Addendum, together with any supplementary measures required.

7. Retention

We keep account and billing records for as long as your account is active and for a reasonable period afterwards (typically up to 6 years for transaction records where needed for tax and accounting). Chat logs are kept to provide history in the product and for security / abuse review, and may be deleted or anonymised when no longer needed. You can ask us to delete your account data (see section 9); we may retain limited information where the law requires it.

8. Children

The Service is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a minor has created an account, contact us and we will delete it.

9. Your rights

Subject to the UK GDPR, you may have the right to access, rectify, erase, restrict or object to processing, and to data portability. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk. To exercise rights, email hello@footygpt.com from the address on your account. We may need to verify your identity.

10. Security

We use reasonable technical and organisational measures (including encrypted transport, access controls, and reputable processors). No internet service is completely secure. You should use a unique email inbox you control and sign out on shared devices.

11. Gambling-related content

The Service discusses football betting markets. That does not mean we process data in order to take bets. Chat content may mention staking, selections, or banks — treat that as user-generated / model-generated text, not as a record of actual wagers with us. We do not operate a gambling account for you.

12. Changes

We may update this policy. The “Last updated” date will change. Material changes will apply to data processed after the update. Continued use of the Service after an update means you acknowledge the revised policy.

13. Contact

Privacy questions and requests: hello@footygpt.com. More help: contact page.