Version 2026-10-08 · Updated 8 October 2026
Privacy Policy
We collect as little as we need to run the service. This page explains what, why, who sees it and how to exercise your rights under UK data protection law.
1. Who is responsible for your data
Emma Visser, a sole trader trading as ProphetAI, 7 Oakdene Crescent, Marple, Stockport, SK6 6NZ, United Kingdom, is the controller of your personal data. Contact us through emma.visser23@gmail.com or Whop support (Open your Whop account, choose ProphetAI and use Support), or write to Emma Visser, 7 Oakdene Crescent, Marple, Stockport, SK6 6NZ, United Kingdom for anything in this policy.
2. What we collect and why
| Data | Why we use it | Lawful basis (UK GDPR) |
|---|---|---|
| Whop sign-in details: Whop user ID, name, username, email, profile picture | Create and secure your account, work out which plan you have, contact you about your service | Contract (Art. 6(1)(b)) |
| Subscription status and plan (from Whop). We never see your card number. | Give you the right access, handle cancellations and refunds, keep accounting records | Contract; legal obligation (Art. 6(1)(c)) for tax and accounting records |
| Discord user ID and username (when you claim Legacy access, confirmed by signing in with Discord; we ask only for your ID and username, never your email, messages or servers, and the sign-in is revoked straight away) | Give you member-only access, run the founding-member migration, remove members who have not converted | Contract; legitimate interests (Art. 6(1)(f)) in protecting paid content |
| Discord server membership list: user ID, username, join date and roles (everyone in the server, whether or not you have an account here) | Check founding-member claims against who was in the server before the paid launch, send migration reminders by Discord message, and apply the end-of-window removal | Legitimate interests (Art. 6(1)(f)): running a members-only community fairly. You can object at any time. |
| Bet Builder data you enter: bankroll, slips, stakes, bookmaker names, notes | Show you your own tracking, staking and stats | Contract |
| API key records (hashed key, label, last used) | Authenticate API requests and enforce rate limits | Contract; legitimate interests in security |
| Technical data: IP address, browser, pages requested, error logs | Operate, secure and debug the website; prevent abuse | Legitimate interests |
| Analytics cookie data (Google Analytics), only if you accept | Understand which pages are useful | Consent (Art. 6(1)(a)); you can withdraw it any time |
| Messages you send us (email, Whop support, Discord) | Answer you and keep a record of what was agreed | Contract; legitimate interests |
We do not ask for special category data. We do not sell your personal data. We do not use it to train AI models.
3. AI assistants you choose to use
The Bet Builder can build a text prompt about your slip for you to paste into an AI assistant. That prompt is created in your browser session and handed to you; we do not send it to any AI provider. Once you paste it elsewhere, that provider's privacy policy applies.
4. Who we share data with
We use these providers, only to provide the service:
- Whop — sign-in, payments (cards, and Apple Pay or Google Pay where you use them), subscription management, tax. Whop also sends us notices when a subscription starts, changes, cancels or fails to renew; they are logged briefly for debugging and used to keep your access correct.
- Discord — the members-only server and role management.
- Vercel — website hosting and request logs.
- Upstash — database for your account data, bets and API keys. Our customer database is hosted in the United States (AWS us-east-1), alongside our Vercel servers; daily backups are kept by Upstash and a periodic private copy by us.
- Google Analytics — analytics, only with your consent.
Whop and Discord are also independent controllers of the data you give them directly (for example payment details and your Discord account), under their own privacy policies. We never receive your card number.
We may also share data where the law requires it, to protect our rights, or with professional advisers under confidentiality.
5. International transfers
Some providers are based in or access data from the United States. Where personal data leaves the UK we rely on the UK–US data bridge, the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses, or another safeguard permitted by UK GDPR.
6. How long we keep data
- Account and Bet Builder data: while your account is active and for 12 months after you last use it, then deleted or anonymised, unless you ask us to delete it sooner.
- Payment and tax records: held by Whop and by us for up to 6 years as the law requires.
- Support messages: up to 24 months.
- Server logs: typically up to 30 days.
7. Automated removal from Discord
A bot checks whether Discord members hold an active plan or Legacy access and removes those who do not once the migration window in our Terms has closed. This is a simple status check, not profiling, and it does not affect your legal rights. If you think a removal was a mistake, contact us and a person will review it.
8. Your rights
You have the right to:
- be told about and get a copy of the personal data we hold about you;
- have inaccurate data corrected and, in some cases, erased;
- restrict or object to our use of your data, including where we rely on legitimate interests;
- receive your data in a portable format where we use it under a contract;
- withdraw consent at any time (for example, reject analytics cookies).
Contact us through emma.visser23@gmail.com or Whop support (Open your Whop account, choose ProphetAI and use Support), or write to Emma Visser, 7 Oakdene Crescent, Marple, Stockport, SK6 6NZ, United Kingdom. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), though we would appreciate the chance to put things right first.
9. Cookies
See our Cookie Policy.
10. Security
Sessions use encrypted, HTTP-only cookies. API keys are stored hashed. Access to our systems is limited to what is needed. No system is perfectly secure; if a breach is likely to risk your rights we will tell you and the ICO as the law requires.
11. Children
The service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18; contact us and we will delete it.
12. Changes
We will update this page when our use of data changes and show the version date at the top. For material changes we will also tell you by email, on the site or in Discord.
ProphetAI is operated by Emma Visser, a sole trader, 7 Oakdene Crescent, Marple, Stockport, SK6 6NZ, United Kingdom. Contact us at emma.visser23@gmail.com or through Whop support.