Privacy Policy
Last updated: 18 August 2026
This Privacy Policy explains how Wari360 collects, uses, and protects your personal information in compliance with the UK/EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Please read it carefully.
1. Who We Are
Wari360 ("we", "us", "our") operates an online platform connecting football players, scouts, and clubs. For the purpose of GDPR, Wari360 is the data controller for personal data you provide through our platform.
2. Data We Collect
We collect information you provide directly (name, email, date of birth, football profile), data generated by your use of our platform (videos, scouting reports, messages), technical data (IP address, browser type, device identifiers), and with your consent, analytics and marketing data.
3. Legal Bases for Processing
We process your data on the following legal bases: (a) Contract performance — to deliver our service; (b) Legitimate interests — to prevent fraud, ensure security, and improve our platform; (c) Consent — for analytics and marketing cookies; (d) Legal obligation — for KYC/AML compliance and audit logs.
4. How We Use Your Data
Your data is used to: operate and improve the Wari360 platform; match players with scouts and clubs; generate AI-powered scouting reports; process payments via Stripe; send service communications; comply with legal obligations. We do not sell your personal data to third parties.
5. Data Sharing
We share data with: cloud providers (AWS, Supabase) for storage and database; Clerk for authentication; Stripe for billing; OpenAI for AI report generation; Sentry for error monitoring. All processors are bound by data processing agreements.
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Audit logs and billing records are retained for 7 years to meet legal obligations.
7. Your Rights (GDPR)
Under GDPR you have the right to: access your data (Article 15); rectify inaccurate data (Article 16); erasure / "right to be forgotten" (Article 17); restrict processing (Article 18); data portability (Article 20); object to processing (Article 21). Exercise these rights via Settings → Privacy, or by emailing [email protected].
8. Cookies
We use strictly necessary cookies for authentication. With your consent we use analytics cookies (platform improvements) and functional cookies (preferences). Manage your preferences at any time via the cookie banner or Settings → Privacy.
9. International Transfers
Some processors operate outside the EEA. Where this occurs we rely on Standard Contractual Clauses (SCCs) or adequacy decisions to ensure equivalent protection.
10. Contact & Complaints
Data Protection contact: [email protected]. You have the right to lodge a complaint with your national supervisory authority (e.g., the ICO in the UK at ico.org.uk).
Exercise Your Rights
Download all your data or permanently delete your account from your account settings.