Privacy Policy

1. Who We Are

Data Driven Sports is operated by Max Modulus, based in the United Kingdom. We are the data controller for the personal information we collect about you. This policy explains what data we collect, why we collect it, and your rights under UK GDPR.

2. What Data We Collect

• Email address — collected when you sign up, used to identify your account and send transactional emails.
• Subscription and billing data — managed by Lemon Squeezy. We do not store your card details. We receive confirmation of your plan and payment status only.
• Usage data — credits used, sports engines accessed, and prediction history, stored to manage your account balance.
• Analytics data — anonymised visitor counts and page views collected by Vercel Analytics. No personal identifiers are stored.

3. Why We Collect It (Legal Basis)

• Contract performance — to provide the subscription service you signed up for.
• Legal obligation — to comply with UK financial and consumer protection laws.
• Legitimate interests — to improve the Service and prevent fraud.

4. Who We Share Your Data With

We share your data only with the third-party services required to operate the platform:

• Supabase — our database and authentication provider. Stores your email, plan, and credit balance securely.
• Lemon Squeezy — our payment processor. Handles all billing and subscription management.
• Vercel — our hosting provider. Collects anonymised analytics data.

We do not sell your data to any third party. Ever.

5. How Long We Keep Your Data

• Account data — kept for as long as your account is active, plus 12 months after closure for legal compliance.
• Billing records — kept for 7 years as required by UK tax law.
• Analytics data — anonymised and aggregated; no personal data is retained.

6. Your Rights Under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your account and personal data.
• Portability — request your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at support@maxmodulus.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

We use essential cookies only — these are required for login sessions to work. We do not use advertising or tracking cookies. Vercel Analytics uses anonymised, cookieless tracking that does not require consent under UK PECR.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or by posting a notice on the Service. Continued use after changes constitutes acceptance.

9. Contact

For any privacy-related questions or to exercise your rights, contact us at: support@maxmodulus.com