Privacy Policy

For purposes of this Policy, the following terms have the meanings set forth below:

• "Company," "we," "us," or "our" refers to Ridha Tech.
• "Service" means Valo and all related platforms, including the WhatsApp Interface, website, and any associated applications.
• "User" or "you" refers to any individual who accesses or uses the Service.
• "Personal Data" means any information that identifies, relates to, or could reasonably be linked to you as an individual.
• "WhatsApp Interface" means our WhatsApp Business integration, operated through Twilio's WhatsApp Business API.
• "Predictions" means the probability assessments, expected value calculations, and sports analytics generated by our AI systems.

1.1 Information You Provide Directly

When you register for the Service, subscribe to a plan, or contact us, you provide certain Personal Data directly. This includes your phone number (required for WhatsApp delivery), name, and email address if provided during signup. If you subscribe to a paid plan, our payment processor Flutterwave collects billing information—including payment card details and billing address—on our behalf; we receive only a transaction reference and confirmation of payment status, not your full payment credentials.

Messages you send through the WhatsApp Interface are processed to understand your queries and deliver relevant Predictions. We retain message content as described in Section 4 below.

1.2 Information Collected Automatically

When you access our website, standard technical data is logged: your IP address, browser type and version, device identifiers, operating system, referring URLs, pages visited, and timestamps. This data helps us understand how Users interact with the Service, diagnose technical issues, and prevent abuse.

Location data is inferred from your IP address at a general level (country or region) to ensure compliance with jurisdictional requirements. We do not collect precise GPS coordinates unless you explicitly grant such permission in a future feature release.

1.3 Information from Third Parties

We receive sports statistics, odds data, and match information from third-party APIs (Football-Data.org, The Odds API, TheSportsDB) to generate Predictions. These providers supply sports event data, not Personal Data about you. Twilio provides message delivery status and metadata for WhatsApp communications. Meta/WhatsApp may transmit read receipts and delivery confirmations through the WhatsApp Business Platform.

We use the Personal Data we collect to operate and improve the Service. Specifically:

Service Delivery: Your phone number is essential—without it, we cannot send Predictions via WhatsApp. Your messages are processed by our AI systems (powered by Anthropic's Claude models via AWS Bedrock) to interpret your queries and generate relevant responses.

Subscription Management: We use your contact information to process payments through Flutterwave, send subscription confirmations, and notify you of billing events or plan changes.

Service Improvement: Aggregated and anonymized usage patterns help us identify which features Users find valuable, optimize our AI models, and plan future development.

Security and Compliance: Technical data enables fraud detection, abuse prevention, and legal compliance. We may retain certain data to respond to legal process or protect our rights.

To be explicit about our data practices:

• We do NOT sell your Personal Data. Under no circumstances do we sell, rent, or trade your information to data brokers, advertisers, or any third parties for their own commercial purposes.
• We do NOT share your data with unrelated third parties for marketing. We do not provide your contact information to third parties for their promotional campaigns.
• We do NOT retain WhatsApp message content indefinitely. Message content is retained for 90 days to support customer service inquiries and improve our AI responses, then deleted unless required for legal purposes. [LEGAL REVIEW: Confirm 90-day retention period is appropriate]
• We do NOT use Personal Data for purposes beyond those disclosed. Any new use case would require updating this Policy and, where legally required, obtaining your consent.
• We do NOT target Users under 18. The Service is intended for adults. If we discover that a minor has provided Personal Data, we will delete it promptly.

We retain Personal Data only as long as necessary for the purposes described in this Policy, or as required by law:

• Account Information: Retained for the duration of your subscription and for 6 months following account closure to allow for reactivation. [LEGAL REVIEW: Confirm 6-month post-closure retention]
• WhatsApp Messages: Message content retained for 90 days; metadata (timestamps, delivery status) may be retained longer for analytics.
• Transaction Records: Payment records retained for 7 years as required for tax and financial compliance obligations.
• Technical Logs: Server logs and security data retained for 12 months, then deleted or anonymized.

When retention periods expire, data is either deleted or anonymized so it can no longer be linked to you.

We engage specific third parties to operate the Service. Each is contractually bound to protect your data and use it only for the purposes we specify:

• Payment Processing: Flutterwave handles subscription payments. Flutterwave is PCI-DSS compliant and processes payment data according to their privacy policy.
• Messaging Platform: Twilio provides the WhatsApp Business API integration. Messages transit through Twilio's infrastructure and Meta's WhatsApp platform.
• Cloud Infrastructure: Amazon Web Services (AWS) hosts our systems. Data is stored in AWS data centers with SOC 2 Type II compliance.
• AI Processing: Anthropic's Claude models (accessed via AWS Bedrock) process your messages to generate Predictions. Anthropic does not retain prompts or responses from API calls.
• Analytics: We use privacy-respecting analytics tools to understand site usage patterns. [LEGAL REVIEW: Confirm specific analytics tools and their data practices]

Ridha Tech operates globally and serves Users in multiple jurisdictions. Your Personal Data may be transferred to, stored in, and processed in countries other than your own—including the United States, where our primary AWS infrastructure is located.

When you use the WhatsApp Interface, your messages necessarily transit through Meta's global infrastructure. By using WhatsApp to interact with the Service, you acknowledge this data flow.

For Users in the European Economic Area, United Kingdom, or Switzerland: we implement appropriate safeguards for cross-border transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission, and we maintain Data Processing Agreements with all processors handling Personal Data. [LEGAL REVIEW: Confirm SCCs are in place with all processors]

Depending on your jurisdiction, you may have certain rights regarding your Personal Data. We honor these rights regardless of where you reside, to the extent feasible:

• Access: Request a copy of the Personal Data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your Personal Data, subject to legal retention requirements.
• Portability: Receive your data in a structured, machine-readable format.
• Objection/Restriction: Object to certain processing activities or request restriction of processing.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, email privacy@ridhatech.com with your request. We will respond within 30 days. We may require verification of your identity before processing certain requests.

European Economic Area, UK, and Switzerland (GDPR)

Under the General Data Protection Regulation, our legal bases for processing include: performance of a contract (to provide the Service you subscribed to), legitimate interests (to improve the Service and prevent fraud), and consent (for marketing communications, where applicable). You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your rights have been violated.

California (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act. You may request disclosure of the categories and specific pieces of Personal Data we have collected, the sources and purposes of collection, and any third parties with whom we share data. You may request deletion and opt out of the sale of Personal Data—though we do not sell Personal Data, so there is nothing from which to opt out. To exercise these rights, contact privacy@ridhatech.com.

We implement technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, multi-factor authentication for administrative access, and continuous monitoring for security threats.

No system is completely secure. If you discover a security vulnerability affecting the Service, please report it to security@ridhatech.com. We commit to investigating and addressing valid reports promptly.

Our website uses cookies—small text files stored on your device—for several purposes:

• Essential Cookies: Required for site functionality, such as maintaining your logged-in session.
• Analytics Cookies: Help us understand how Users navigate and interact with the site.
• Preference Cookies: Remember settings such as language or display preferences.

You can control cookie settings through your browser. Disabling essential cookies may impair site functionality.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, for active Users, send notification via WhatsApp or email at least 30 days before changes take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

For questions, concerns, or requests regarding this Privacy Policy or our data practices: