This Privacy Policy explains how GoalEdge ("GoalEdge", "we", "us") collects, uses, shares and protects personal data when you use our website and services (the "Platform"). GoalEdge is a sports prediction, analytics and fantasy platform. It is provided for entertainment and information only and is not a betting operator, bookmaker or investment service. We are committed to handling your data lawfully, fairly and transparently.

1. Who we are

GoalEdge operates the Platform from Nigeria. For any privacy matter you can contact our data protection contact at privacy@goaledge.com. Where required, we act as the data controller for the personal data described below.

2. Data we collect

We collect only what we need to run the Platform:

• Account data: your username and email address, and a securely hashed version of your password. We never store your password in plain text.
• Activity data: the predictions, fantasy squads, group memberships and gaming scores you create while using the Platform.
• Referral data: if you join through a referral link, we record the connection between your account and the referring account.
• Technical data: your IP address and basic request information, used transiently for security, rate limiting and abuse prevention. IP addresses are processed in memory for protection and are not retained in our database as a user profile field.
• Billing data (only if card payments are enabled and you subscribe): your subscription status and a provider reference. Card numbers are handled entirely by our payment processors. GoalEdge does not see or store full card details.

3. How we use your data

• To create and secure your account and provide the Platform's features.
• To operate predictions, analytics, fantasy competitions and the just-for-fun gaming arena.
• To protect the service against fraud, brute-force attempts and abuse.
• To administer optional subscriptions where card payments are enabled.
• To communicate important service, security or account information, and, where you have not opted out, occasional product updates.
• To comply with our legal obligations.

4. Legal bases

Depending on your location, we rely on the following legal bases: the performance of our contract with you (providing the Platform), our legitimate interests (keeping the service secure and improving it), your consent (for optional communications and non-essential cookies) and compliance with legal obligations.

5. Cookies and similar technologies

We use a small number of cookies. A strictly necessary session cookie keeps you logged in and protects forms against cross-site request forgery. If you use the on-page translation widget, the provider may set its own cookies. We do not use cookies to build advertising profiles. You can control cookies through your browser settings, though disabling the session cookie will prevent you from logging in.

6. Sharing your data

We do not sell your personal data. We share data only with service providers who help us operate the Platform, under appropriate safeguards:

• Payment processors (Stripe, Paystack, Flutterwave) where card payments are enabled, to process subscriptions securely.
• Infrastructure and security providers who host the Platform and protect it against attacks.
• Authorities where we are legally required to disclose information.

7. International transfers

Some of our providers operate outside your country. Where personal data is transferred across borders, we rely on the providers' own lawful transfer mechanisms and contractual protections.

8. How long we keep data

We keep account data for as long as your account is active. If you delete your account, we remove or anonymise your personal data within a reasonable period, except where we must retain certain records (for example billing records) to meet legal obligations. Our billing records are kept in an append-only ledger for audit integrity.

9. Your rights

Subject to applicable law, including the Nigeria Data Protection Act 2023 and, where relevant, the EU and UK General Data Protection Regulation, you may have the right to access, correct, delete, port or restrict your data, to object to certain processing, and to withdraw consent. To exercise any right, contact privacy@goaledge.com. You also have the right to lodge a complaint with your local supervisory authority, which in Nigeria is the Nigeria Data Protection Commission.

10. How we protect your data

We apply layered security measures, including encryption of data in transit, strong password hashing, protection against cross-site request forgery, rate limiting, brute-force lockout, least-privilege administrative access and an immutable billing ledger. No system is perfectly secure, but we work continuously to safeguard your information.

11. Children

The Platform is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with data, contact us and we will remove it.

12. Changes to this policy

We may update this policy from time to time. We will revise the date above and, for material changes, provide a clearer notice.

13. Contact

For any question about this policy or your data, email privacy@goaledge.com.

This policy is provided for general information and does not constitute legal advice.