Privacy Policy
Last updated: 9 October 2026
This Privacy Policy explains how Wari360 collects, uses, and protects your personal information in compliance with the UK and EU General Data Protection Regulation (GDPR). Please read it carefully.
1. Who We Are
Wari360 ("we", "us", "our") operates an online platform connecting football players, scouts, and clubs. For the purpose of GDPR, Wari360 is the data controller for personal data you provide through our platform.
2. Data We Collect
We collect information you provide directly (name, email, date of birth, football profile, and identity documents if you choose to complete KYC verification), data generated by your use of our platform (videos, video analysis results, scouting reports, messages), technical data (IP address, browser type, device identifiers), and with your consent, analytics and marketing data. Match footage you upload may include other people; only upload footage you have the right to share.
3. Legal Bases for Processing
We process your data on the following legal bases: (a) Contract performance, to deliver our service; (b) Legitimate interests, to prevent fraud, ensure security, and improve our platform; (c) Consent, for analytics and marketing cookies; (d) Legal obligation, for KYC/AML compliance and audit logs.
4. How We Use Your Data
Your data is used to: operate and improve the Wari360 platform; match players with scouts and clubs; generate AI-powered scouting reports; process payments via Stripe; send service communications; comply with legal obligations. We do not sell your personal data to third parties.
5. Data Sharing
We share data with service providers who process it on our behalf: cloud and database providers (AWS, Vercel, Railway, Supabase, Neon) for hosting and storage; Mux for video hosting and streaming; Modal for automated video analysis; Google and OpenAI for AI report generation; Stripe for billing; Resend for transactional email; Sentry for error monitoring; PostHog (EU region) for product analytics, which runs only while you have granted analytics consent and stops the moment you withdraw it. All processors are bound by data processing agreements. Your profile, videos, and reports are visible to scouts and clubs on the platform as part of the service.
6. Data Retention
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Sign-in session records (the type of browser and device, and when you signed in and were last active; not your IP address) are kept while the session is active and deleted 30 days after it ends, so we can investigate suspicious sign-ins. Audit logs and billing records are retained for 7 years to meet legal obligations.
7. Your Rights (GDPR)
Under GDPR you have the right to: access your data (Article 15); rectify inaccurate data (Article 16); erasure / "right to be forgotten" (Article 17); restrict processing (Article 18); data portability (Article 20); object to processing (Article 21); and withdraw consent at any time where processing is based on consent (Article 7). Exercise these rights via Settings → Privacy, or by emailing [email protected]. We respond to requests within one month.
8. Children and Minors
Wari360 is a talent-discovery platform and some players are under 18. You must be at least 13 to have a player account, and we do not knowingly collect data from anyone younger; if we learn that we have, we delete it. Every player under 18 needs the consent of a parent or guardian when they register. We apply this to all under-18s, which meets or exceeds the age of digital consent in every country we serve (13 to 16 under GDPR Article 8, and under 18 in some countries). The parent or guardian may exercise all privacy rights on the minor's behalf via [email protected]. Scouts and clubs cannot contact a player under 18 directly; their interest is sent to the parent or guardian. We do not use minors' data for marketing.
9. AI and Automated Processing
Our AI analyses the match footage you upload (tracking movement and detecting key moments) and generates scouting reports with attribute scores. These reports are informational tools for you, scouts, and clubs. No decision producing legal or similarly significant effects is made about you solely by automated means. Scouts and clubs make their own human judgements, and you can regenerate or delete your reports at any time.
10. Cookies
We use strictly necessary cookies for authentication, including a secure sign-in cookie that keeps your session (until you close the browser, or for up to 30 days if you choose "Keep me signed in"). With your consent we use analytics cookies (platform improvements) and functional cookies (preferences). You can change or withdraw your choices at any time, with or without an account. Using the "Cookie preferences" link at the foot of any page, or at the bottom of this one. Account holders can also use Settings → Privacy. Withdrawing takes effect immediately.
11. International Transfers
Some processors operate outside the EEA. Where this occurs we rely on Standard Contractual Clauses (SCCs) or adequacy decisions to ensure equivalent protection.
12. Contact & Complaints
Data Protection contact: [email protected]. You have the right to lodge a complaint with your national supervisory authority (e.g., the ICO in the UK at ico.org.uk).
Exercise Your Rights
Download all your data or permanently delete your account from your account settings.