Privacy Policy
Last updated: 9 July 2026
1 Overview
We value your privacy and are committed to collecting and processing only the minimum personal data required to operate our service. This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR).
2 Personal Data We Collect
Account Information
- Username
- Email address
- Account creation date
This data is used solely to create and manage your account and communicate with you about the service.
Billing Information
We use Stripe as our payment processor. We store:
- Subscription status
- Invoice records (dates, amounts, currency)
- Payment status (e.g. paid, failed, refunded)
We do not store or have access to your full payment card details. All payment information is processed and stored securely by Stripe.
Security Information
To protect accounts and prevent abuse, we log the following during authentication events (registration, login, and failed login attempts):
- IP address
- Timestamp of the event
- Event type (e.g. login success, failed attempt)
This data is used solely for security purposes such as rate limiting, fraud detection, and abuse prevention. Security logs are automatically deleted after 90 days. We do not use IP addresses for tracking, profiling, or marketing.
3 Data We Do Not Collect
We intentionally do not collect or store:
- Third-party advertising or marketing profiles
- Cross-site tracking cookies
- Device fingerprints
- Location data beyond IP-based country for security
- Financial account balances or bank-account details
- Data brokered or purchased from third parties
Note on prediction data: model predictions are written to our own append-only prediction log and retained for track-record auditability. These records are tied to the horse and race — not to any individual user. Bet-tracker entries you create yourself are stored against your account and deleted when you delete your account.
4 Cookies
We use only essential cookies required for core functionality such as authentication and security. We do not use analytics, advertising, or tracking cookies.
5 Legal Basis for Processing
- Contractual necessity — to provide and manage your account and subscription
- Legal obligation — to comply with accounting and tax requirements
- Legitimate interest — to maintain service security and prevent abuse
6 Data Retention
We retain personal data only for as long as necessary:
- Account data: for the duration of your account
- Billing records: as required by financial and tax laws
- Security logs: automatically deleted after 90 days
If you delete your account, personal data is removed or anonymized unless retention is legally required.
7 Data Sharing
We do not sell or rent your personal data. We share data only with the following processors, each bound by GDPR-compliant data-processing terms:
- Stripe — subscription payment processing. Stripe receives your email and billing details through their hosted checkout; we do not see or store card numbers.
- Google (Sign in with Google) — optional OAuth authentication. If you choose to sign in with Google, Google shares your email and Google account ID with us.
- Hostinger — hosts our servers and delivers transactional email (account verification, password resets, trial welcome, alerts) via SMTP.
- The Racing API — third-party racing data feed for race cards, form and results. No user data flows to them.
- Sentry — application error tracking. Stack traces plus your user ID and email may be sent to Sentry to diagnose bugs.
- Telegram — public daily-brief channel. Joining is optional; Telegram receives only the messages we publish.
We do not share data with advertising networks, data brokers, affiliate marketers, or bookmakers. RaceChatAI Ltd receives no revenue from your betting activity with any bookmaker.
8 International Data Transfers
If personal data is transferred outside your country of residence, appropriate safeguards are used to ensure data protection in compliance with applicable laws.
9 Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request a copy of your data
- Object to or restrict processing
To exercise your rights, contact us using the details below.
10 Data Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.
11 Contact Us
If you have questions about this Privacy Policy or how we handle personal data, please contact: