Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. Email address, display name, and (if provided) profile picture and organisation details.
• Authentication data. Hashed credentials for email/password sign-in, or identity tokens issued by federated providers (Google) when you sign in with them.
• Scouting content. Player records, voice notes, transcripts, scouting reports, ratings, tags, and any other content you create inside Argus.
• Usage and device data. Log data such as IP address, browser type, pages visited, and timestamps, used for security, abuse prevention, and product analytics.

2. Sign in with Google (OAuth)

When you choose to sign in with Google, Argus uses Google’s OAuth 2.0 service to authenticate you. We request the following standard scopes only:

• openid, email, profile — to verify your identity, create or match your Argus account, and personalise the interface with your name and (optionally) profile picture.

We do not request access to Gmail, Google Drive, Google Calendar, Contacts, or any other Google service. We do not read, write, or store any data from those services.

Argus’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information obtained from Google is used solely to provide and improve user-facing features of Argus, is not used for advertising, is not sold, and is not transferred to third parties except as required to provide the service or as required by law.

3. How we use your information

We use collected information to:

• Create and authenticate your account and keep your session secure;
• Provide the scouting features (voice capture, AI report generation, search, sharing within your organisation);
• Send transactional and service-related communications (e.g. password reset, security alerts);
• Detect, prevent, and investigate fraud, abuse, and security incidents;
• Improve product reliability and performance through aggregated analytics;
• Comply with applicable legal obligations.

4. AI processing

Argus uses third-party AI providers (currently Anthropic) to transcribe voice notes and generate structured scouting reports from your input. The minimum content needed to perform the task is sent to the provider over an encrypted channel. We instruct providers not to use your data for model training, and we do not authorise such use. AI output is returned to your account and stored alongside your scouting content.

5. Data storage and security

Your data is stored on managed infrastructure provided by Supabase (PostgreSQL with row-level security) and Vercel. All traffic to and from Argus is encrypted in transit (TLS). Access to production systems is restricted to authorised personnel and protected by strong authentication.

6. Data sharing

We do not sell your personal data. We share data only with: (a) service providers who help us operate Argus (hosting, database, AI inference, error monitoring, email delivery) under contractual confidentiality obligations; (b) members of your own organisation, for content you create within that organisation; and (c) authorities when required by law.

7. Your rights

Depending on where you live, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these rights from inside the app (Settings) or by contacting us at support@argus.football. You can also revoke Argus’ access to your Google account at any time at myaccount.google.com/permissions.

8. Data retention

We keep your data for as long as your account is active. When you delete your account we delete or irreversibly anonymise your personal data within 30 days, except where retention is required by law or necessary to resolve disputes.

9. Cookies

Argus uses strictly necessary cookies to keep you signed in and to keep the service secure. We do not use advertising cookies.

10. Children

Argus is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. International transfers

Argus is operated from the European Union. Where data is transferred to providers outside your country, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are material, notify you in-app or by email.

13. Contact

For privacy enquiries or to exercise your rights, contact us at support@argus.football.