How we handle personal information when you visit MySportAI or use its private administration portal.
Effective and last updated:
KELASH SPORTS SOFTWARE LIMITED (company number 17152167), trading as MySportAI / My Sport AI, at 167–169 Great Portland Street, London, England, W1W 5PF is the controller of the personal information described in this policy. It covers mysportai.com, our private administration portal and correspondence with us. For privacy enquiries, contact support@mysportai.com or write to the registered office above.
When you visit the public website, our hosting and security systems may process your IP address, request time, requested URL, browser or device information and technical error or security events. The public enquiry form prepares a brief in your browser: submitting that form does not send its contents to us. If you email us, we process the contact details and information you choose to send.
Access to the private portal is by invitation, not public registration. For authorised users we process account name and email, password verification data, multi-factor authentication and recovery data, session records, access permissions, security events and an audit trail of administrative actions. Authorised administrators may enter business configuration, including exchange-account credentials; these are stored encrypted and are not displayed again in the ordinary account interface. We do not need you to provide special-category information through the website or portal.
We use technical and security data to deliver and protect the site and portal, diagnose faults and prevent misuse. Our lawful basis is our legitimate interest in operating a secure service. We use invited-user account data to grant and administer access, authenticate users, maintain records of changes and protect the service; our lawful basis is legitimate interests and, where applicable, performance of our agreement with the relevant organisation. We use correspondence to respond to enquiries and manage a potential or existing business relationship, relying on legitimate interests or steps requested before a contract. We may also process information where necessary to comply with a legal obligation.
We do not use the public website enquiry form to collect submissions, and do not use website visitors' personal data for automated decisions with legal or similarly significant effects.
The public website has no deployed advertising, marketing or analytics cookies or tracking pixels. If you change the motion setting, the site stores that preference in your browser's session storage for that browser session. The private portal uses strictly necessary, secure HTTP-only authentication/session cookies and related security mechanisms so invited users can sign in and stay protected. These are not used for advertising. You can clear browser storage and cookies, although doing so may end a portal session or reset your motion preference.
We use Amazon Web Services (AWS) to host the site and portal and provide infrastructure including application delivery, storage, databases, encryption, security monitoring and, for portal invitations or account messages, Amazon Simple Email Service (SES). Our business email is delivered through Google Workspace. These providers process the information relevant to their services under applicable terms. We may disclose information to professional advisers or authorities where reasonably necessary or legally required. We do not sell personal information.
Our current application infrastructure is deployed in the AWS Europe (London) region. AWS support and service operations may involve access from other locations; any restricted international transfer must have an appropriate legal basis and safeguard. Portal access is restricted, authentication is protected by multi-factor controls, and sensitive exchange credentials are encrypted. No internet service is entirely risk-free.
We keep information only as long as needed for the purposes above. In deciding how long, we consider the life of an account or relationship, operational and security needs, applicable legal duties, and the need to resolve disputes. Sessions expire or may be revoked; some security and audit records may be retained after an account is disabled to preserve accountability. You may ask us about the retention relevant to your information.
Subject to legal conditions and exemptions, you may request access to, correction or erasure of your personal information, restriction of or objection to processing, and data portability where applicable. You may complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. Please contact us first if you would like us to address a concern. Where processing relies on consent, you can withdraw it at any time; the activities described above do not depend on optional website tracking consent.
We may update this policy as the service changes. The effective and last-updated date at the top identifies the current version. Material changes will be made available here and, where appropriate, communicated to affected portal users. Contact support@mysportai.com with privacy questions or rights requests.