1. Introduction

Ape Global Capital, Inc. ("we," "our," or "us") operates footballanalytics.ai (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service, in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Ape Global Capital, Inc. is the data controller responsible for your personal data. For questions about this policy or your data rights, please contact us through our website.

3. Information We Collect

We collect the following categories of personal data:

Account Data: Email address, name, password (encrypted)
Profile Data: User preferences, account settings, subscription information
Usage Data: Service interactions, feature usage, analytics data
Technical Data: IP address, browser type, device information, cookies
Payment Data: Billing information, transaction history (processed securely)
Communication Data: Messages, support requests, feedback

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract Performance: To provide the Service and fulfill our obligations
Legitimate Interest: To improve our Service, prevent fraud, and ensure security
Consent: For marketing communications and optional features
Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use your personal data for the following purposes:

Providing and maintaining the Service
Processing payments and managing subscriptions
Sending service-related communications
Improving and personalizing the Service
Analyzing usage patterns and performance
Preventing fraud and ensuring security
Complying with legal obligations
Marketing (with your consent)

6. Data Sharing and Transfers

We may share your data with:

Service Providers: Cloud hosting, payment processing, analytics
Legal Authorities: When required by law or to protect rights
Business Partners: Only with your explicit consent

International Transfers: Your data may be transferred outside the European Economic Area (EEA). We ensure adequate safeguards through Standard Contractual Clauses and adequacy decisions.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication
Employee training on data protection
Incident response procedures

8. Data Retention

We retain your personal data only as long as necessary:

Account Data: Until account deletion or 3 years of inactivity
Usage Data: 2 years from collection
Payment Data: 7 years for tax and accounting purposes
Communication Data: 2 years from last interaction

Data may be retained longer if required by law or to protect legal rights.

9. Your Data Protection Rights

Under GDPR, you have the following rights:

Right of Access: Request a copy of your personal data
Right of Rectification: Correct inaccurate or incomplete data
Right of Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for consent-based processing
Right to Lodge a Complaint: Contact your local data protection authority

To exercise these rights, contact us through our website. We will respond within 30 days.

10. Cookies and Tracking

We use cookies and similar technologies for:

Essential Cookies: Service functionality and security
Analytics Cookies: Understanding usage patterns (with consent)
Marketing Cookies: Personalized content (with consent)

You can control cookies through your browser settings. Essential cookies cannot be disabled as they are necessary for the Service to function.

11. Automated Decision Making

We may use automated processing for analytics and service optimization. You have the right to request human review of automated decisions that significantly affect you.

12. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR.

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

15. Contact Information

For questions about this Privacy Policy, your data rights, or to exercise your GDPR rights, please contact us through our website. You also have the right to lodge a complaint with your local data protection authority.