This policy explains what personal data Odds Artist collects, why, how long it is kept, who it is shared with, and your rights under UK GDPR and the Data Protection Act 2018.
Who we are
Controller: [COMPANY NAME] (registered in Scotland,
company number [SCXXXXXXX]).
Registered office: [REGISTERED OFFICE ADDRESS].
Contact: contact form
or privacy@oddsartist.com.
What we collect
- Account data — username, email address, hashed password.
- Session data — IP address, user-agent string, sign-in timestamps. Used to detect unfamiliar logins.
- Billing data — Stripe customer ID and subscription state. Card details are held by Stripe, not us; we never see your card number.
- Usage data — bets you choose to track, filter presets you save, offer notes. Stored against your account so the product works for you across devices.
Lawful basis
- Contract — running your account, processing subscription payments, providing the matched-betting tools.
- Legitimate interests — security and abuse prevention (session logs, rate limiting).
- Legal obligation — accounting and tax records (6 years).
Sharing
We do not sell or rent personal data. Limited sharing with:
- Stripe Payments Europe Ltd — payment processing.
- Resend — transactional email delivery.
- Civo Ltd — hosting (UK region).
Retention
- Account data: kept while your account is open, then deleted within 30 days of account closure (or sooner on request).
- Billing data: 6 years after the last payment, to satisfy UK accounting law.
- Session logs: 90 days.
Your rights
You have the right to access, correct, port, restrict processing of, or delete your data, and to object to processing. To exercise these:
- Download your data: /account/export/ (logged-in users only).
- Delete your account: /account/delete/.
- For anything else, contact us using the form below.
You can complain to the UK Information Commissioner's Office (ico.org.uk) at any time.
Cookies
See our separate Cookie Policy.
Last updated: DRAFT — not yet published. Questions: contact us.