Goal90Score ("Goal90", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at https://goal90score.com, our browser extension, and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

This Privacy Policy applies to all users of the Service, including visitors, registered users, and subscribers. It does not apply to information collected by third parties, including through any application or content that may link to or be accessible from the Service.

We collect information that you provide directly to us, information collected automatically when you use the Service, and information from third-party sources.

2.1 Information You Provide Directly
When you register for an account, subscribe to our Service, or contact us, you may provide us with: (a) your name; (b) email address; (c) Google account identifier (when authenticating via Google OAuth); (d) profile image (if available through your Google account); (e) payment and billing information (processed by our third-party payment processors); (f) any other information you choose to provide, such as feedback, support requests, or communications with us.

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including: (a) device information such as device type, operating system, unique device identifiers, and browser type; (b) log information including access times, pages viewed, referring URL, and the page you visited before navigating to our Service; (c) IP address (anonymized where technically feasible and required by law); (d) usage data such as features used, actions taken, and interaction patterns within the Service; (e) performance data including crash reports, response times, and error logs.

2.3 Google Calendar Data (Optional)

If you choose to connect your Google Calendar, we access only the following information necessary to provide calendar functionality: (a) match-related event titles and descriptions created by the Service; (b) event dates, times, and reminder metadata; (c) calendar identifiers necessary to create and manage events. We do not access, read, store, or process any calendar content unrelated to the Service's football match reminder functionality.

2.4 Cookies and Similar Technologies

We use cookies, local storage, and similar tracking technologies to collect and store information about your preferences and settings, authenticate users, analyze Service usage, and improve user experience. You can control cookies through your browser settings; however, disabling cookies may limit your ability to use certain features of the Service.

Types of cookies we use: (a) Essential cookies — required for the Service to function properly, including authentication and security; (b) Functional cookies — remember your preferences and settings; (c) Analytics cookies — help us understand how users interact with the Service to improve functionality and user experience.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or other jurisdictions with similar data protection laws, we process your personal data based on the following legal grounds:

3.1. Performance of Contract: Processing necessary to provide the Service, manage your account, process subscriptions, and deliver requested features.

3.2. Consent: Processing based on your explicit consent, such as when you connect your Google Calendar or opt-in to receive marketing communications. You may withdraw consent at any time.

3.3. Legitimate Interests: Processing necessary for our legitimate business interests, including improving the Service, preventing fraud, ensuring security, and conducting analytics, provided such interests are not overridden by your fundamental rights and freedoms.

3.4. Legal Obligation: Processing necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests

We use the information we collect for the following purposes:

4.1. Service Provision: To authenticate users, provide access to the Service, deliver live scores and match data, synchronize calendar reminders, and fulfill subscription services.

4.2. Account Management: To create and manage your account, process payments and billing, communicate with you about your account, and provide customer support.

4.3. Service Improvement: To analyze usage patterns, identify trends, measure the effectiveness of features, conduct research and development, and improve the overall user experience.

4.4. Security and Fraud Prevention: To detect, prevent, and respond to fraud, abuse, security risks, and technical issues that could harm the Service or our users.

4.5 Communications: To send you service-related notices, updates, security alerts, and administrative messages. We may also send promotional communications if you have opted in, with the option to unsubscribe at any time.

4.6. Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, and to enforce our Terms of Use and other agreements.

Goal90's use of Google OAuth and Google APIs, including Google Calendar API, complies with the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to the minimum scopes necessary to provide the Service's functionality;
• We do not sell, rent, lease, or trade Google user data to any third party;
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising;
• We do not use Google user data for purposes unrelated to the Service;
• We do not allow humans to read Google user data unless: we have your explicit consent, it is necessary for security purposes, it is required by law, or the data is aggregated and anonymized for internal operations.
  
  

You may revoke Goal90's access to your Google account data at any time through your Google account settings at https://myaccount.google.com/permissions.

Goal90 uses third-party providers, including SportMonks, to supply football statistics, match data, team information, player data, and related visual content. These third-party providers operate under their own terms of service and privacy policies, which govern their collection and processing of data.

Goal90 does not control how third-party data providers collect, process, or protect data outside the scope of the Service. We encourage you to review the privacy policies of any third-party services you interact with.

We do not sell your personal data. We may share your information only in the following circumstances:

7.1. Service Providers: We share data with trusted third-party service providers who perform services on our behalf, including: hosting and infrastructure providers, payment processors, analytics providers, and customer support tools. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

7.2. Legal Requirements: We may disclose your information if required by law, legal process, governmental request, or when we believe disclosure is necessary to:

• comply with applicable laws or regulations;
• enforce our Terms of Use and other agreements;
• protect the rights, property, or safety of Goal90, our users, or others;
• detect, prevent, or address fraud, security, or technical issues.
  
  

7.3. Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on the Service of any change in ownership or uses of your personal data.

7.4. With Your Consent: We may share your information with third parties when you have given us your explicit consent to do so.

7.5. Aggregated or De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, or other purposes.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

8.1. Account Data: We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

8.2. Usage Data: Automatically collected usage and analytics data is typically retained for up to 24 months for analytical purposes, after which it is aggregated or deleted.

Payment Records: Transaction and billing records may be retained for up to 7 years as required by tax and accounting regulations.

8.3. Legal Holds: If we are involved in litigation or a governmental investigation, we may be required to retain data beyond our standard retention periods.

You may request deletion of your data at any time by contacting us at hello@goal90score.com. We will respond to your request within 30 days.

We implement appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols;
• Secure authentication mechanisms, including OAuth 2.0;
• Regular security assessments and monitoring;
• Access controls limiting data access to authorized personnel;
• Secure data storage with reputable cloud infrastructure providers.
  
  

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activities under your account.

In the event of a data breach that affects your personal data, we will notify you and the relevant supervisory authorities as required by applicable law.

Depending on your location and applicable laws, you may have certain rights regarding your personal data:

10.1 General Rights

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances
• Right to Restrict Processing: You have the right to request that we limit how we use your personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
  
  

10.2 Rights for EEA/UK Residents

If you are a resident of the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR, including the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

10.3 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected, the sources of collection, the business purposes, and the categories of third parties with whom we share your data.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
  
  

To exercise any of these rights, please contact us at hello@goal90score.com. We will respond to verifiable requests within 45 days (or as otherwise required by applicable law). We may require you to verify your identity before processing your request.

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to DNT signals. However, you can control cookies and tracking technologies through your browser settings as described in Section 2.4.

The Service is not intended for children under the age of 13 (or the minimum age required by applicable law in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at hello@goal90score.com.

If we discover that we have collected personal information from a child under 13, we will take steps to delete such information as quickly as possible. If you are under 13, please do not use the Service or provide any personal information to us.

Your personal data may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those of your jurisdiction.

When we transfer personal data from the EEA, UK, or Switzerland to countries not deemed adequate by the European Commission, we implement appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• other legally recognized transfer mechanisms;
• your explicit consent where appropriate.
  
  

By using the Service, you consent to the transfer of your information to countries outside your country of residence, including to countries that may not provide the same level of data protection as your home country.

We do not currently use automated decision-making or profiling that produces legal effects or similarly significantly affects you. If this changes in the future, we will update this Privacy Policy and provide you with information about the logic involved and the significance of such processing.

The Service may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to third-party sites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We encourage you to review the privacy policies of any third-party sites you visit. Your interactions with third-party services are governed by their respective privacy policies and terms of service.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• update the "Last updated" date at the top of this Policy;
• notify you via email (if you have provided an email address) or through prominent notice on the Service at least 14 days before the changes take effect.
  
  

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: email: hello@goal90score.com