Privacy Policy

Who is responsible?

ProfitPanda is the data controller for the personal information covered by this policy. In this policy, "we" and "us" mean the operator of ProfitPanda.

Contact hello@profitpanda.co.uk for privacy questions or requests.

Information we use

• Account details: your Discord user ID, username, display name, avatar and membership level. We receive these when you connect Discord or use our membership features.
• Membership and billing: plan, subscription status, payment or order references and relevant billing contact details supplied through our payment platform. Checkout payments are handled by Whop and its payment providers.
• Your activity in our tools: selected bookies, alert preferences, offer progress, recorded bets, stakes, odds and results. The details depend on which features you use.
• Support and AI conversations: messages you send us, relevant conversation history and the account or offer context needed to answer. Don't include passwords, payment details or identity documents in a chat.
• Technical information: IP address, browser and device information, request times, pages requested, security events and error logs generated when you use the service.
• Affiliate information: referral identifiers, membership or transaction references and commission records where you use or join an affiliate programme.

You give us some of this directly. Other information comes from Discord, Whop and the way you interact with our website and bots. Bookies and exchanges handle the bets you place with them under their own privacy policies.

Why we use it

Where we rely on legitimate interests, we consider the impact on your privacy and your right to object. You can withdraw consent for an optional activity without closing your account. Withdrawal does not change whether earlier use was lawful.

Public guides and calculators can be used without a membership account. Features tied to your account need the relevant account details; without them we cannot sign you in or link your membership and saved activity.

Who receives information?

We use other services to operate ProfitPanda:

• Discord provides the community and account connection. Messages you post are visible to people who have access to that channel or thread.
• Supabase supports account and database services, including stored profiles, sessions and activity records.
• Whop and its payment providers handle membership payments and related billing or affiliate services.
• Anthropic processes information sent to the AI help features that use it, including your question and relevant context or conversation history.
• Hosting and delivery providers run the website and infrastructure. The website also loads some fonts and libraries from Google Fonts and jsDelivr; those requests send technical information such as your IP address to those providers.
• Authorised staff, advisers or authorities may receive information needed to provide support, handle a dispute, meet a legal obligation or investigate misuse.

A provider may process information on our instructions or be responsible for its own use. See Discord's privacy policy, Supabase's privacy policy, Whop's privacy policy and Anthropic's business-data information.

We do not sell your personal information. This policy does not give us permission to add a new, unrelated use without telling you and establishing the necessary legal basis.

AI help and automated features

The public homepage chat uses predefined answers in your browser and does not send the question to Anthropic. Some Discord and account AI help features do send your question, relevant recent messages and the account or offer context needed to answer to Anthropic. Records of questions and answers can also be stored in Supabase for support, continuity, safety checks and service evaluation.

AI answers can be wrong. They help explain the tools; they do not place a bet or guarantee a result. Membership checks and alert filters also use automated rules, but they do not place bets. Contact us if an access decision or recorded result looks wrong and a person will review it.

We do not ask you to send medical information or details about gambling harm through AI or support chat. If you disclose that kind of sensitive information unexpectedly, we restrict access and delete or redact it as soon as it is no longer needed to route the immediate support or safety response. We retain or use it only where both a normal UK GDPR lawful basis and an Article 9 condition apply, such as your explicit consent, vital interests in an emergency where consent cannot be given, or the establishment, exercise or defence of legal claims. We record the condition relied on; if none applies, we do not keep the sensitive detail.

Information outside the UK

Discord, Supabase, Whop, Anthropic, Google and jsDelivr operate internationally and may process information outside the UK, including in the EEA and United States. When UK transfer rules apply, we use the protection in the provider arrangement that covers the service, such as UK adequacy regulations or UK-approved contractual terms, with an additional assessment where required. The route depends on the provider, its contracting entity and the processing location. You can ask us which route applies to a particular provider or request available information about the safeguard.

How long we keep information

We keep personal information only while it has a continuing purpose. ProfitPanda does not currently apply one automatic deletion period to every account, tracker, support and AI record. Instead, we review the relevant records when an account closes, a support matter ends or we receive a verified deletion request, and delete or anonymise information that is no longer needed.

• Account and tool records are kept while the account or saved history is in use. After closure, we keep only records still needed for a legal duty, security issue or unresolved dispute.
• Support and AI questions and answers can be held in Discord and Supabase. They are reviewed when the support matter or account is closed and can be deleted or anonymised when no longer needed, subject to a remaining legal, safety or dispute purpose.
• Application logs normally rotate after seven log files and website access and error logs after 14 daily rotations. Relevant entries can be kept longer where a security incident or dispute is being investigated.
• Billing and affiliate records are kept for the period required for payment administration, accounting, tax and disputes. Whop also keeps records under its own policy.
• Browser storage has the separate durations explained in our Cookie Policy.

Your choices and rights

Depending on the circumstances, you can ask for access to your information, correction, deletion, restricted use or a portable copy. You can also object to processing based on legitimate interests and withdraw consent where we rely on it. Some records may need to remain for legal reasons; we will explain if a request cannot be met in full.

Email hello@profitpanda.co.uk with your request, to opt out of direct marketing, or to ask for a human review of an automated access decision. We may need enough information to check that the account is yours. Do not email a password or a full payment-card number. We normally respond within one calendar month. If a lawful extension or identity check is needed, we will explain what happens to the deadline.

You can raise a complaint with the Information Commissioner's Office without first complaining to us. You are also welcome to contact us so we can try to resolve the issue.

Keeping your information secure

We use access controls and security measures to protect stored information. No online service can promise absolute security. Use a secure Discord account, sign out on shared devices and avoid posting private details in public channels.

ProfitPanda is intended for adults aged 18 or over. Contact us if you believe an under-18 has provided personal information to the service.

Changes

We will update this page when our practices change and highlight material changes where appropriate. A new policy does not, by itself, provide consent for a new use of your information.