Privacy Policy
Last updated: July 28, 2026
1. Who controls your data
FantasyIQ is operated by André Mota and Liam Hudson, based in Portugal, who act as joint data controllers. Contact us about anything in this policy at support@iqfantasy.com.
2. Data we collect
You provide: name, email address, password (stored hashed), billing address and country (collected via Stripe), and fantasy platform connection details — depending on the platform, a username, league ID, OAuth tokens, or session credentials.
Automatically: usage and interaction events (pages viewed, features used, decisions viewed and acted on), session identifiers, device and browser information, IP address, approximate location derived from IP, and timezone.
From third parties: roster, league, matchup, scoring settings, transaction history, and standings imported from platforms you connect; payment status, subscription state, and card metadata (brand, last four digits, expiry) from Stripe.
We never receive or store your full card number or CVC.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Providing the service — syncing leagues, generating projections and insights | Performance of contract |
| Account creation, authentication, support | Performance of contract |
| Processing payments, subscriptions, invoicing | Performance of contract / legal obligation |
| Transactional and service emails (digests, alerts, billing notices) | Performance of contract / legitimate interests |
| Product analytics and improvement | Legitimate interests |
| Marketing emails | Consent (withdrawable at any time) |
| Fraud prevention, abuse detection, security | Legitimate interests |
| Tax and accounting record retention | Legal obligation |
5. International transfers
Some providers process data outside the EEA, including in the United States. Such transfers rely on appropriate safeguards, including Standard Contractual Clauses or equivalent mechanisms.
6. Retention
Account and league data: retained while your account is active. Analytics events: retained in aggregated form. Payment and invoice records: retained for the statutory period required by Portuguese tax law, even after account deletion, in anonymized form. Email logs: retained for a limited period for deliverability and compliance.
7. Your rights
You have the right to access, rectify, erase, restrict processing of, and port your data; to object to processing based on legitimate interests; to withdraw consent at any time; and to lodge a complaint with a supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).
Exercise these rights at support@iqfantasy.com, or directly in the app: notification preferences in settings, and account deletion in /settings/account, which removes your personal data and cancels any active subscription (payment records are retained anonymized, as above).
8. Security
We use encryption in transit, hashed passwords, encrypted storage of platform credentials and OAuth tokens, role-based access controls, and server-side enforcement of access rights. No system is perfectly secure; we will notify you and the relevant authority of a qualifying breach as required by law.
10. Third-party fantasy platforms
When you connect a platform, we access it read-only using the credentials or authorization you provide. Your use of those platforms is governed by their own terms and privacy policies, which we do not control. You may disconnect a league at any time in settings, which removes the stored credentials.
11. Children
FantasyIQ is not directed at anyone under 18 and we do not knowingly collect their data. If we learn we have, we will delete it. Contact support@iqfantasy.com if you believe a minor has registered.
12. Changes
We may update this policy. Material changes will be notified by email or in-app before taking effect.
13. Contact
support@iqfantasy.com