GDPR
Privacy Policy
What data we process, what we use it for and how you can exercise your rights.
1. Controller
Controller: Oriol Folguera, owner of Deep Tennis AI. Privacy email: deeptennisai@gmail.com.
2. Data processed
Depending on your use of the service we may process: identifier, display name and Telegram username; plan and activity within the bot; acquisition source; email and customer, payment or membership identifiers provided by Whop; support communications; country and device type; pages, clicks, campaign and pseudonymous session identifier when you consent to analytics or attribution.
The IP address is not stored in the web analytics table: it is used transiently for security, abuse limitation and generating a daily pseudonymous hash. The hosting provider's technical logs may contain IP addresses for the period determined by that provider for security purposes.
3. Purposes and legal bases
- Providing the bot, managing the account and delivering Premium: performance of the contract or pre-contractual measures.
- Managing payments, renewals, cancellations, support and tax obligations: contract and legal obligations.
- Security, fraud prevention and defence against claims: legitimate interest and legal obligations.
- Own analytics, experiments and campaign attribution: consent, which you can refuse or withdraw without losing access.
- Responding to messages and GDPR requests: consent, pre-contractual measures or legal obligation, depending on the case.
4. Recipients and transfers
We use providers necessary to operate: Render (hosting), Telegram (bot and messaging), Whop and its payment providers (purchase and subscription), email providers and X when you consent to attribution or an advertising conversion. Each third party processes data according to its own functions and contracts. Some may operate outside the European Economic Area; in those cases the applicable transfer mechanisms and safeguards apply, such as adequacy decisions or standard contractual clauses.
5. Retention
Ordinary anonymous web→Telegram codes expire after 24 hours. The cookie choice lasts up to 180 days and can be changed before then. The experiment cookie, if accepted, lasts a maximum of 90 days. Account data is retained for as long as the relationship with the service exists and is then blocked for the periods necessary to address legal obligations or claims. Payment and billing data is retained for the applicable legal periods. Pseudonymous analytics data is reviewed and deleted or aggregated when it is no longer necessary.
6. GDPR rights
You can request, free of charge, access, rectification, erasure, objection, restriction, portability and not to be subject to automated individual decisions where applicable. You can also withdraw your consent at any time from “Cookie settings”.
Write to deeptennisai@gmail.com stating “Data protection”, the right you wish to exercise and the information necessary to identify your account. We will generally respond within one month. If you believe the processing is not correct you can file a complaint with the Spanish Data Protection Agency.
7. Minors
The service is intended exclusively for persons over 18 years of age. We do not knowingly collect data from minors.
8. Automated decisions
The models automate sports analysis; they do not make legal decisions or decisions with equivalent effects on users. The FREE/PREMIUM classification depends on the account and subscription status.
