Privacy policy
Last updated:
This policy explains what personal data BetVault collects, why, who we share it with and the rights you have. We keep it to what we need to run the service.
1. Who is responsible for your data
[Company name], [Registered address], is the controller of your personal data. Contact: contact@betvault.vip. [Data protection contact / ICO registration number: to confirm.]
2. What we collect
- Account details: your email address and a securely hashed version of your password (we never store the password itself).
- What you put into BetVault: bets you record (match, selection, odds, stake, bookmaker, result), bankroll figures, favourite teams and leagues, alert and display settings.
- Subscription details: your plan, trial and subscription status, and the customer and subscription IDs from our payment provider Stripe. Stripe handles your card details; we don't receive your full card number.
- Notifications: if you turn on notifications, the push subscription your browser gives us so we can send them.
- Referrals: if you joined through a friend's invite link, which account invited you, so the right person gets the referral reward.
- Technical data: your IP address and basic request details in security and server logs, used for things like rate-limiting sign-in attempts and fixing errors.
We don't use advertising or analytics trackers, and we don't sell your data.
3. Why we use it, and our lawful basis
- To provide BetVault (your account, your dashboard, alerts you've asked for, billing): necessary for our contract with you.
- To keep the service secure and prevent abuse: our legitimate interests.
- To send service emails such as email verification, password resets, trial-ending reminders and receipts: necessary for our contract with you. Optional emails such as the weekly digest can be switched off in Settings.
- To meet legal obligations, such as keeping payment records for tax.
4. Who we share it with
We use trusted providers that process data on our behalf, under contract:
- Stripe: payments and subscription billing.
- Vercel: website hosting.
- Neon: database hosting.
- Resend: sending account emails.
- Your browser's push service (for example Google, Apple or Mozilla): delivering notifications you've turned on.
Some of these providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK data protection law. [Transfer mechanisms per provider: to confirm.] We only share data with others if the law requires it.
5. How long we keep it
We keep your data while you have an account. If you delete your account (Settings → Account), we delete your personal data and anonymise what's left, except records we must keep by law, such as payment records. [Retention periods for logs and payment records: to confirm.]
6. Your rights
You can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent where we rely on it. You can export your data yourself from Settings → Account, or email us. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk), but please contact us first.
7. Cookies
See our cookie policy.
8. Changes
If we change this policy in a way that matters, we'll tell you before it takes effect. The "Last updated" date above shows the current version.
