Legal
Privacy Policy
Effective date: 8 July 2026
1. Who we are
This policy explains how OddsRelay ("we", "us", "our") handles personal data. We are the data controller for the personal data described here.
- Contact for privacy matters: hello@oddsrelay.io
Important: the OddsRelay data feed itself contains no personal data — it is odds and market data. The personal data we handle is limited to business contacts, account/billing details, and service-usage records. We keep personal data to a minimum.
2. The personal data we collect, and why
| What | When we collect it | Why (lawful basis) |
|---|---|---|
| Trial details — name, work email, company | You request a free trial | To provide the trial and follow up (legitimate interest / steps toward a contract) |
| Enquiry details — name, work email, company, your message, indicative volume/region | You use our contact/enquiry form | To respond to and manage your enquiry (legitimate interest) |
| Customer and billing details — contact name, work email, company, billing details, payment reference | You become a paying customer | To provide the Service and manage billing (performance of a contract; legal obligation for accounting) |
| Service-usage records — API key identifier, IP address, endpoints and regions requested, timestamps, request counts, status codes | Automatically, when your integration calls the API | To run, secure, and monitor the Service, prevent abuse, measure service levels, and calculate usage (legitimate interest; and contract for billing) |
| Communications — emails and messages between us | When you contact us or we contact you | To communicate with you and keep records (legitimate interest) |
| Website analytics — pages viewed, aggregate usage | When you visit our website (if analytics are enabled) | To understand and improve our website (legitimate interest). We use privacy-friendly, cookieless analytics and do not build personal profiles |
We do not collect special-category data, and we do not carry out automated decision-making that produces legal or similarly significant effects.
3. Payment data
Payments are processed by Stripe. We do not see or store your full card details — Stripe handles card data as a payment processor under its own terms. We keep only the information needed to manage your account and meet our accounting and tax obligations.
4. Business-to-business marketing and prospecting
We may contact businesses (at corporate email addresses) about OddsRelay where we have a legitimate interest in doing so, consistent with the Privacy and Electronic Communications Regulations (PECR) business-to-business rules. Where we do this:
- we use business-contact details obtained from you, from public and professional sources, or from business information you have made available;
- every marketing message includes a clear way to opt out, and we stop promptly on request; and
- you can opt out at any time by replying to any message or emailing hello@oddsrelay.io.
We do not send marketing to personal email addresses or to sole traders/individuals without an appropriate basis.
5. Who we share data with
We use a small number of trusted service providers ("processors") to run OddsRelay. They process data only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database hosting (accounts, keys, usage records) | EU (Ireland) |
| Vercel | Website and app hosting (including forms) | US |
| Stripe | Payment processing | US |
| Resend | Sending transactional and notification emails | US |
| Privacy-friendly analytics (if enabled) | Cookieless website analytics | — |
| Hetzner | Server hosting (staging/testing) | EU (Germany) |
We do not sell your personal data. We may disclose data where required by law, to enforce our agreements, or in connection with a business reorganisation or sale (under confidentiality).
6. International transfers
Some of our providers are based outside the UK (for example, in the US). Where personal data is transferred outside the UK, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement or Addendum, or UK-recognised adequacy — so your data stays protected.
7. How long we keep it
- Trial and enquiry contacts: up to 3 years after last contact, for follow-up.
- Customer and billing records: for the duration of the contract, then up to 6 years to meet accounting and tax obligations.
- Service-usage records: detailed request logs for around 90 days; aggregated usage kept for the billing/accounting periods above.
- We delete or anonymise personal data when it is no longer needed for these purposes.
8. Your rights
Under UK data-protection law you have the right to: access a copy of your personal data; have inaccurate data corrected; have data erased; restrict or object to processing; and receive certain data in a portable format. To exercise any of these, email hello@oddsrelay.io. We will respond within one month.
If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk — though we'd appreciate the chance to put things right first.
9. Cookies and tracking
We keep cookies to a minimum. We use only what's necessary to run the website securely, and privacy-friendly, cookieless analytics where enabled. If we introduce any non-essential cookies, we will ask for your consent first.
10. International customers (South Africa, Nigeria, and others)
Where we serve customers in other regions, we also aim to meet local data-protection expectations (for example, South Africa's POPIA and Nigeria's data-protection regime) in respect of the limited business-contact and account data involved.
11. Changes to this policy
We may update this policy from time to time. We'll post the updated version here and change the "effective date" above. For material changes, we'll take reasonable steps to let affected customers know.
12. Contact
Any questions about your privacy or this policy: hello@oddsrelay.io.