Privacy Policy
We collect the minimum data needed to run Odds Scanner AI — and we tell you, in plain English, what we do with each piece. CX Media Ltd is the data controller.
What we collect
Account data
Email, name, password hash — for sign-in and support.
Billing data
Plan, last-4 of card, country — for charges and VAT.
Usage data
Tips viewed, screens, errors — to improve the product.
Device data
OS, version, push token — for compatibility and alerts.
Card numbers and CVCs are handled by our PCI-DSS payment processor — they never touch our servers.
Why we use it
Service delivery: Authenticate you, surface tips, run notifications. Lawful basis: contract.
Product improvement: Aggregate analytics on which tips perform and which screens confuse people. Lawful basis: legitimate interest.
Communications: Service emails (always) and product updates (only if you opt in). Lawful basis: consent.
Compliance: Detect fraudulent accounts and respond to lawful requests. Lawful basis: legal obligation.
Who sees your data
Our engineers, on a need-to-know basis, with audit logs.
Sub-processors we use to operate the service — listed at oddsscanner.com/sub-processors.
Authorities, only when compelled by valid legal process.
How long we keep it
Account data — while your account is active, plus 30 days.
Billing records — 7 years (tax law).
Anonymous analytics — 24 months.
Support emails — 2 years from last contact.
Where it lives
Primary storage is in the EU (Frankfurt). Push tokens and CDN edge data may transit other regions; transfers outside the UK rely on the UK International Data Transfer Agreement and additional safeguards.
Your rights
Under the UK GDPR you can, at any time:
Access a copy of your data.
Correct anything inaccurate.
Delete your account and personal data.
Port your data to another service.
Object to processing based on legitimate interest.
Withdraw consent for marketing — without affecting prior processing.
Exercise any of these from Settings → Data & privacy or by emailing privacy@oddsscanner.com. We respond within 30 days.
Children
Our service is not directed at people under 18 and we do not knowingly collect data from minors. If we learn we hold such data, we delete it.
Security
Data in transit is encrypted with TLS 1.3. Data at rest is encrypted with AES-256. We run quarterly third-party penetration tests and disclose incidents per applicable law.
Complaints
You can complain to the Information Commissioner's Office (ICO), the UK's data protection authority. We'd prefer to resolve things first, so please reach out to us before filing a complaint.
Data Protection Officer · CX Media Ltd · Malta.