gpunt.ai
Back to gpunt.ai

Privacy Policy

Effective date: 21 March 2026 · Last updated: 21 March 2026

1. The short version

We collect the minimum data needed to run the service. We do not sell your data. We do not share it with advertisers. We do not use tracking cookies. That is the whole story, but the law requires us to say it in more detail, so here we go.

2. Who we are

This Privacy Policy should be read alongside our Terms of Service.

gpunt.ai ("we", "us", "our") is the data controller (within the meaning of the EU General Data Protection Regulation) and APP entity (within the meaning of the Australian Privacy Act 1988 (Cth)) for the personal information described in this policy.

Contact: info@gpunt.ai

3. What we collect and why

We believe in collecting only what we actually need. Here is a complete list of the personal information we collect, why we collect it, and how long we keep it:

Data Why we collect it How long we keep it
Email address Account creation, subscription management, service communications Until you delete your account, plus 30 days
Telegram username Delivering predictions to the correct Telegram channels Until you delete your account, plus 30 days
Payment information Processing subscription payments (handled entirely by Stripe -- see Section 6) We do not store payment card details. Stripe retains data per their own policy.
Subscription status Managing access to paid features, determining which tier you are on Until you delete your account, plus 30 days
IP address Website security, abuse prevention (via Cloudflare) We do not log IP addresses ourselves. Cloudflare retains logs per their own policy (typically 72 hours).

That is it. That is the list. We do not collect:

  • Your real name (unless you choose to provide it)
  • Your physical address
  • Your phone number
  • Your betting history, bankroll, or bookmaker account details
  • Demographic or profiling data
  • Any information about your device, browser, or operating system beyond what Cloudflare processes for security

4. Legal bases for processing

For users in jurisdictions that require a legal basis for data processing (including under the GDPR and the Australian Privacy Act), we process your personal information on the following bases:

  • Contract performance: Processing your email, Telegram username, and subscription status is necessary to provide you with the service you have subscribed to.
  • Legitimate interest: Processing IP addresses via Cloudflare for website security and abuse prevention.
  • Legal obligation: We may retain certain data to comply with applicable tax, accounting, or legal requirements.

5. Cookies and tracking

We do not use analytics cookies, advertising cookies, social media tracking pixels, or any other form of user tracking.

The only cookies that may be set when you visit gpunt.ai are essential Cloudflare cookies required for security and performance (such as the __cf_bm bot management cookie). These are strictly necessary for the website to function and cannot be opted out of.

We do not use Google Analytics, Facebook Pixel, Hotjar, or any similar service. We do not track your behaviour across the internet. We do not build advertising profiles. We genuinely do not care what other websites you visit.

6. Third-party services

We use a small number of third-party services to operate gpunt.ai. Each has access only to the data they need:

6.1 Stripe (payment processing)

Stripe processes all subscription payments. When you subscribe, your payment card details are sent directly to Stripe -- they never pass through our servers. Stripe is a PCI DSS Level 1 certified payment processor. Their privacy policy is available at stripe.com/privacy.

6.2 Telegram (prediction delivery)

Predictions and alerts are delivered via Telegram. Your Telegram username is used to manage channel access. Telegram's privacy policy is available at telegram.org/privacy.

6.3 Cloudflare (hosting and security)

Our website is hosted via Cloudflare Pages and protected by Cloudflare's security services. Cloudflare may process IP addresses and set essential security cookies. Their privacy policy is available at cloudflare.com/privacypolicy.

6.4 Google Cloud Platform (infrastructure)

Our backend infrastructure is hosted on Google Cloud Platform (GCP) in the Singapore (asia-southeast1) region. GCP acts as a data processor on our behalf. Subscriber data (including email addresses and Telegram usernames) may be stored and processed on GCP infrastructure. Google Cloud's privacy commitments and data processing terms are available at cloud.google.com/privacy.

We do not share your personal information with any other third parties. We do not sell your data. We will not sell your data. There is no scenario under which we sell your data.

7. Data security

We take reasonable measures to protect your personal information, including:

  • All website traffic is encrypted via HTTPS (TLS)
  • Payment processing is handled by Stripe's PCI-certified infrastructure
  • Access to subscriber data is restricted to authorised operators of gpunt.ai
  • Our infrastructure uses hardened services with resource limits and automated monitoring

No system is perfectly secure. While we take data security seriously, we cannot guarantee absolute security. If we become aware of a data breach that is likely to result in a risk to your rights and freedoms, we will:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required under the GDPR;
  • Notify the Office of the Australian Information Commissioner as soon as practicable, where required under the Australian Notifiable Data Breaches (NDB) scheme;
  • Notify affected individuals without undue delay, providing a description of the breach, the likely consequences, and the measures we are taking to address it.

8. International data transfers

Our infrastructure is hosted in Singapore (Google Cloud Platform) and the United States (Cloudflare, Stripe). If you are located outside these regions, your personal information will be transferred to and processed in these jurisdictions.

For users in the European Economic Area (EEA) or the United Kingdom, these transfers are made on the basis of Standard Contractual Clauses or adequacy decisions as implemented by our third-party service providers.

For users in Australia, data handling complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). In accordance with APP 8, before disclosing personal information to an overseas recipient (including our infrastructure and service providers listed in Section 6), we take reasonable steps to ensure that the overseas recipient does not breach the APPs in relation to that information.

9. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information (subject to any legal retention obligations).
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing of your personal information based on legitimate interest.
  • Restriction: Request that we restrict processing of your personal information in certain circumstances.
  • Withdraw consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, email us at info@gpunt.ai. We will respond within 30 days. We will not charge you for exercising your rights. In exceptional circumstances -- for example, if the same request is made repeatedly without reasonable basis, or if a request is clearly made in bad faith -- we may charge a reasonable administrative fee or decline the request, but we will explain our reasons if we do so.

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority:

  • Australia: Office of the Australian Information Commissioner (OAIC)
  • United Kingdom: Information Commissioner's Office (ICO)
  • EU: Your national data protection authority

10. Data retention

We retain your personal information only for as long as necessary to provide the Service and fulfil the purposes described in this policy. Specifically:

  • Active accounts: Data is retained for the duration of your subscription.
  • Cancelled accounts: Data is retained for 30 days after cancellation, then permanently deleted.
  • Financial records: Transaction records may be retained for up to 7 years to comply with tax and accounting obligations.

You can request deletion of your account and associated data at any time by emailing info@gpunt.ai.

11. Children

The Service is not directed at anyone under the age of 18 (or the legal gambling age in their jurisdiction, whichever is higher). We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

12. Automated decision-making

Our machine learning models analyse publicly available data about sporting events (such as team statistics, historical results, and bookmaker odds) to generate predictions. These models analyse sporting events, not individuals. We do not use your personal information for profiling, automated individual decision-making, or any process that produces legal effects concerning you or similarly significantly affects you.

No decisions about your account, subscription, or access to the Service are made by automated systems without human oversight.

13. Data Protection Officer

As a small-scale data controller, we are not required to appoint a Data Protection Officer (DPO) under the GDPR. However, all data protection enquiries -- including questions, complaints, and requests to exercise your rights -- can be directed to info@gpunt.ai and will be handled promptly.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service at least 14 days before the changes take effect.

The "Last updated" date at the top of this page indicates when the policy was most recently revised.

15. Contact us

If you have questions about this Privacy Policy, or if you want to exercise any of your data rights, contact us at:

gpunt.ai
Email: info@gpunt.ai
Website: gpunt.ai

We are committed to responding to all enquiries within 30 days. If a matter is complex and requires additional time, we will notify you within that 30-day period with an explanation and an estimated timeframe for our full response.

gpunt.ai
Home Terms of Service Privacy Policy Gambling Help (AU) BeGambleAware (UK) Gambling Helpline (US) Gamblers Anonymous info@gpunt.ai
© 2026 gpunt.ai — All rights reserved