Soccermatessoccermates

Privacy Policy

Effective Date: January 1, 2025

Questions? Contact us at [email protected]

Soccermates ("we", "our", or "us"), operated by Hangzhou Xiaojia Network Technology Co., Ltd., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website soccermates.appor use any of our Chrome browser extensions (collectively, the "Service"). Please read this policy carefully.

This policy is compliant with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the United Kingdom (UK), as well as the California Consumer Privacy Act (CCPA) where applicable.

1. Data Controller

For the purposes of applicable data protection laws, Hangzhou Xiaojia Network Technology Co., Ltd. (杭州小加网络科技有限公司) is the data controller responsible for your personal data. You may contact us at:

  • Entity Name: Hangzhou Xiaojia Network Technology Co., Ltd.
  • Address: Room 4-13, Building 5, No. 1181 Bin'an Road, Changhe Street, Binjiang District, Hangzhou, Zhejiang Province, China
  • Email: [email protected]
  • Website: https://soccermates.app

2. Information We Collect

2.1 Information You Provide Directly

  • Google OAuth Data: When you sign in with Google, we receive your Google account email address, display name, and profile picture URL. We do not receive or store your Google password.

2.2 Information Collected Automatically

  • Usage Data: Log data including your IP address, browser type, pages visited, time and date of visits, and time spent on pages.
  • Extension Usage: Anonymised metrics on which extension features are used, for the purpose of improving the Service. No browsing history outside of Soccermates features is collected.
  • Device Information: Browser version, operating system, and language settings.

2.3 Payment Information

We do not collect or store payment card details. All payment processing is handled by our payment processor, Paddle. We may receive transaction identifiers, subscription status, and licence information from Paddle.

2.4 Information We Do Not Collect

We do not collect your browsing history, passwords, or sensitive personal information. Our Chrome extensions operate with minimal permissions and do not access your other browser tabs or data outside of the Soccermates interface.

3. Legal Basis for Processing (GDPR)

If you are located in the EEA or UK, we process your personal data under the following legal bases:

  • Contractual Necessity (Art. 6(1)(b) GDPR): To provide the Service you have requested, including account creation, authentication, and subscription management.
  • Legitimate Interests (Art. 6(1)(f) GDPR): To improve our products, prevent fraud, ensure security, and send transactional communications.
  • Legal Obligation (Art. 6(1)(c) GDPR): To comply with applicable laws and regulations, such as tax and accounting obligations.
  • Consent (Art. 6(1)(a) GDPR): Where we process optional data (e.g., marketing emails), we will obtain your explicit consent, which you may withdraw at any time.

4. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate your identity.
  • Provide, operate, and improve the Service and its features.
  • Process payments and manage your subscriptions and licences.
  • Send transactional emails (e.g., subscription confirmation, billing notices).
  • Respond to your support requests and enquiries.
  • Monitor for abuse, fraud, and security incidents.
  • Comply with legal obligations.
  • Analyse aggregate usage patterns to improve product performance.

5. Sharing of Information

We do not sell your personal data. We may share your information with:

  • Service Providers: Third-party vendors who assist us in operating the Service, including Paddle (payment processing), Google (authentication and cloud infrastructure), and SportMonks (football data). These providers are bound by confidentiality obligations and may only use your data to provide services on our behalf.
  • Legal Authorities: If required to do so by law, or in response to valid legal requests by public authorities (e.g., a court or government agency).
  • Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as a business asset, subject to the same privacy protections.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or we transfer to recipients in countries deemed to provide an adequate level of protection.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. We will also retain and use your data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically:

  • Account data is retained for the duration of your account and up to 90 days after deletion.
  • Transaction and billing records are retained for up to 7 years for tax and accounting compliance.
  • Anonymised usage analytics may be retained indefinitely.

8. Your Rights (GDPR)

If you are located in the EEA or UK, you have the following rights under applicable data protection law:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to certain legal exceptions.
  • Right to Restriction: Request that we restrict processing of your data in certain circumstances.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Rights Related to Automated Decision-Making: We do not make decisions solely based on automated processing that produce legal or similarly significant effects.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national DPA in the EEA).

9. Cookies and Tracking Technologies

We use essential cookies and browser storage (localStorage, sessionStorage) to maintain your authenticated session and user preferences. We do not use third-party advertising cookies or behavioural tracking technologies. You may disable cookies in your browser settings, though this may affect the functionality of the Service.

10. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal information without parental consent, please contact us immediately and we will take steps to remove such information.

11. Security

We implement industry-standard security measures to protect your personal data, including TLS encryption in transit and hashed credentials at rest. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Effective Date" at the top. For material changes, we will provide additional notice (such as an email notification). We encourage you to review this policy periodically.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection contact at:

  • Business Entity: Hangzhou Xiaojia Network Technology Co., Ltd.
  • Address: Room 4-13, Building 5, No. 1181 Bin'an Road, Changhe Street, Binjiang District, Hangzhou, Zhejiang Province, China
  • Email: [email protected]
  • Website: https://soccermates.app