Privacy policy

The data controller is Back Post Tips. For anything about your data, contact backposttipsuk@gmail.com.

• Account details: your email address, an optional display name and your password (stored only as a secure hash by our authentication provider).
• Subscription details: your plan, renewal dates and payment status. Card details are handled by our payment provider; we never see or store your full card number.
• What you do on the site: teams you follow, bets you choose to track, bet-slip images you upload for review, questions you ask the AI assistant and your usage of AI allowances.
• Technical data: basic logs (such as pages requested and errors) and a one-way, salted hash of your connection's IP address used only to prevent abuse of free allowances. We cannot turn the hash back into your address.
• Messages: emails you send us, and your Telegram account if you choose to join our group.

• To provide the service you signed up for: your account, alerts, AI features and subscription (contract).
• To keep the service secure and fair: preventing fraud, abuse and sharing of paid content (legitimate interests).
• To improve the service: understanding which features are used and fixing problems (legitimate interests).
• To send service emails: account, password, billing and important changes (contract), and a short welcome guide when you join (legitimate interests; you can opt out).
• Marketing emails: only if you agree, and you can unsubscribe at any time (consent).
• To meet legal duties: for example keeping billing records for tax (legal obligation).

We do not sell your data, and we do not use it for advertising.

We use trusted service providers who process data only on our instructions:

• Supabase: database and account login.
• Railway: hosting the website.
• Anthropic: the AI that answers questions and reviews bet slips. It receives the text or image you submit for that request.
• Our email provider: sending account and service emails.
• Our payment provider: taking subscription payments.
• Telegram: if you join our Telegram group.

Our football data suppliers receive no personal data about you.

Some providers store or process data outside the UK, including in the United States. Where they do, we rely on recognised safeguards such as the UK International Data Transfer Agreement or addendum, or a UK adequacy decision.

• Account and activity data: for as long as you have an account, and deleted within 30 days of you asking us to close it.
• Billing records: up to 6 years, as required for tax and accounting.
• Technical logs: normally no longer than 90 days.

You can ask to access, correct, delete or restrict your data, object to how we use it, receive a copy in a portable format, and withdraw consent at any time. Contact backposttipsuk@gmail.com; we will reply within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

We use only what the site needs to work: cookies that keep you signed in, and your browser's local storage for preferences such as your usual stake. We do not use advertising or tracking cookies, so there is nothing to opt out of.

The service is not for anyone under 18. If we learn we hold an under-18's data, we will close the account and delete it.

Data is encrypted in transit, access is restricted to what is needed, and passwords are never stored in readable form. No system is perfectly secure; if a breach affected you, we would tell you and the ICO where the law requires.

We will post any changes here and update the date at the top. For significant changes we will also email you.