Privacy Policy

PitchPulse ("we", "us", "our") is a football prediction and analytics platform operated as a sole trader based in the United Kingdom. Our platform is accessible at www.pitchpulseai.com and associated domains.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, please contact us at the address provided in Section 11.

We collect the following categories of personal data:

• ›Account data: Your name and email address, collected when you register an account. You may also sign in via Google or other supported single sign-on providers.
• ›Billing data: Payment method details (card number, expiry, billing address) processed and stored securely by our payment processor. We never see or store your full card number.
• ›Usage data: Pages visited, features used, session duration, and interaction patterns — collected automatically to improve the platform.
• ›Prediction history: Records of predictions you have viewed or saved, stored in our secure database to power your personalised history page.
• ›Notification data (optional): If you opt into our match alert service, a unique identifier is stored solely to deliver the alerts you have requested. This is entirely opt-in.
• ›Technical data: IP address, browser type, device type, and operating system — collected automatically by our hosting provider for security and performance purposes.

We do not collect sensitive personal data such as racial or ethnic origin, health data, or biometric data.

We use your personal data only for the following purposes:

• ›To create and manage your account and subscription
• ›To process payments and send receipts
• ›To deliver the prediction and analytics service you subscribed to
• ›To send you subscription-related communications (receipts, renewal reminders, service updates)
• ›To send match alerts if you have opted into our notification service
• ›To detect, investigate, and prevent fraudulent or abusive activity
• ›To improve the platform based on aggregated usage patterns
• ›To comply with our legal obligations under UK law

We do not sell your data to third parties. We do not use your data for targeted advertising. We do not share your data with bookmakers or gambling operators.

To operate the platform we work with carefully selected sub-processors. Each is contractually bound to process only the data necessary for their specific function and to apply appropriate security measures. The categories of processors we use are:

All processors are based in the UK, EU, or USA (with appropriate transfer safeguards under UK GDPR) and operate under data processing agreements with us. You may request details of specific processors by contacting us at the address in Section 11.

We use the following types of storage on your device:

• ›Authentication cookies: Session tokens that keep you signed in. These are essential for the service to function and cannot be disabled.
• ›Local storage (app preferences): Your bet slip selections and UI preferences are stored locally in your browser only. This data never leaves your device.
• ›Analytics: Anonymous page-view data used to understand feature usage. No personal identifiers are included.

We do not use advertising cookies, tracking pixels, or third-party marketing trackers of any kind.

• ›Account data: Retained while your account is active. Deleted within 30 days of account closure upon request.
• ›Billing records: Retained for 7 years as required by UK tax and accounting law.
• ›Prediction history: Retained for 12 months, then automatically purged.
• ›Notification identifier: Deleted immediately upon request or when you disconnect from the alert service.
• ›Server logs: Retained for 90 days by our hosting provider for security purposes.

Under UK GDPR, you have the following rights in relation to your personal data:

• ›Right of access: Request a copy of all personal data we hold about you.
• ›Right to rectification: Correct any inaccurate or incomplete data.
• ›Right to erasure: Request deletion of your personal data ("right to be forgotten").
• ›Right to restriction: Ask us to pause processing while a dispute is resolved.
• ›Right to data portability: Receive your data in a machine-readable format.
• ›Right to object: Object to processing based on legitimate interests.
• ›Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at the address in Section 11. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We take reasonable technical and organisational measures to protect your personal data:

• ›All data is transmitted over HTTPS with TLS encryption
• ›Authentication is managed by a SOC 2 Type II certified third-party provider
• ›Payment data is handled by a PCI DSS Level 1 certified payment processor
• ›Database access is restricted via row-level security policies and API key controls
• ›We never store passwords — authentication uses secure tokens only

No method of transmission or storage is 100% secure. In the unlikely event of a data breach affecting your rights, we will notify you and the ICO as required by law.

PitchPulse is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify active subscribers by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

For any privacy-related questions, data subject requests, or complaints, please contact us: