Privacy Policy

Matchex LLC (“we,” “us,” or “our”) operates matchex.io (the “Platform”), a market data and analytics platform for sports-linked public companies. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By accessing or using matchex, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.

Account Information

When you create an account, we collect your email address and authentication credentials. If you sign in via Google or Apple, we receive your name and email from those providers.

Usage Data

We automatically collect information about how you interact with the Platform, including pages visited, features used, search queries, watchlist activity, and timestamps.

Payment Information

If you subscribe to a paid plan, payment processing is handled by Stripe, Inc. We do not store your credit card number. We receive your Stripe customer ID, subscription status, and billing history from Stripe.

Device & Browser Data

We collect standard technical data including IP address, browser type, operating system, device type, and referring URLs through server logs and analytics.

• Provide, maintain, and improve the Platform
• Process subscriptions and manage billing
• Send transactional emails (account confirmation, password reset, billing receipts)
• Deliver product updates and service announcements
• Analyze usage patterns to improve features and performance
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations

Lawful Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process personal data under the following lawful bases:

• Contract performance — To provide the Platform and fulfill our subscription agreements
• Legitimate interests — To improve our services, prevent fraud, and ensure security
• Consent — For marketing communications (which you may withdraw at any time)
• Legal obligation — To comply with applicable laws and regulations

We use the following third-party services that may process your data:

• Supabase — Database hosting and authentication (stores account data, usage data)
• Stripe — Payment processing (processes payment information)
• Vercel — Application hosting and CDN (processes server logs, IP addresses)
• Loops — Email delivery (processes email addresses for transactional and marketing emails)
• EODHD, FMP, Finnhub — Financial data providers (no user data shared; used for market data ingestion only)
• Anthropic (Claude API) — AI summarization of news articles (no user data shared; article text only)

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

We use essential cookies and browser local storage for authentication session management. We do not use third-party advertising or tracking cookies. Analytics data is collected server-side.

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required for legal compliance, dispute resolution, or enforcement of our agreements. Anonymized usage data may be retained indefinitely for analytics purposes.

We implement industry-standard security measures including encrypted data transmission (TLS), secure authentication via Supabase Auth, row-level security policies on all database tables, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach, in accordance with applicable law (including GDPR Article 33). Notification will include a description of the breach, the data affected, and the measures being taken. We will also notify the relevant supervisory authority where required.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at hello@matchex.io.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know — You may request that we disclose the categories and specific pieces of personal information we have collected about you
• Right to Delete — You may request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights
• Right to Opt-Out of Sale — We do not sell personal information to third parties

To exercise your CCPA rights, contact us at hello@matchex.io. We will verify your identity and respond within 45 days.

We may send you marketing emails about product updates, new features, and promotions. You may opt out of marketing communications at any time by:

• Clicking the “unsubscribe” link in any marketing email
• Emailing us at hello@matchex.io with the subject “Unsubscribe”

Opting out of marketing emails does not affect transactional emails (e.g., billing receipts, password resets, security alerts), which are necessary for service operation.

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

Your data may be transferred to and processed in the United States and other countries where our service providers operate. By using the Platform, you consent to such transfers. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or sending an email. Your continued use after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at: