Vega Sports Intelligence

LEGAL

Privacy Policy

Effective September 8, 2026

This Privacy Policy explains how Vega Sports Intelligence collects, uses, discloses and safeguards information in connection with our website (vegasports.ai) and the Vega Sports Intelligence platform (the “Service”). It applies to visitors to our website, to the individuals whose information our business customers submit to the Service, and to our customers’ own personnel who use the Service.

This policy describes our practices in plain terms. Where a customer has entered into a Data Processing Agreement (“DPA”) with Vega governing Customer Personal Data, that DPA governs in the event of any conflict with this policy for the processing it covers.

Which Vega entity is responsible for your information

Vega Sports Intelligence operates through two group companies, and which one is responsible for your information depends on where you or your organization are based:

Vega Sports Intelligence Ltd., a private company limited by shares incorporated in England and Wales (company number 16737403), registered office at 19 Circus Road West, Ambrose House 906, London, United Kingdom, SW11 8EL — responsible for visitors and customers based in the United Kingdom or the European Economic Area. Vega Sports Intelligence, Inc., a corporation incorporated in the State of Delaware, United States, registered office at Corporation Trust Center, 1209 Orange Street, Wilmington, Delaware 19801, United States — responsible for visitors and customers based in the United States, Canada, or elsewhere outside the United Kingdom and European Economic Area.

References to “Vega,” “we,” “us” or “our” in this policy mean whichever of these two companies is responsible for your information as described above. For a business customer with a signed order or agreement, the contracting entity named in that agreement controls.

Information we collect

We refer to information submitted by our business customers and their authorized users in connection with the Service as “Customer Data.” Where Customer Data includes personal information about identifiable individuals, we process it on behalf of, and under the instructions of, the customer that submitted it.

How we use information

Vega does not use Customer Data to train AI models

Vega does not use Customer Data to train, fine-tune or improve any artificial intelligence or machine learning model made available to any person or organization other than the customer whose data it is. Customer Data is supplied to the underlying AI models described below as context at the time a request is made, in order to generate a response for that customer — it is not retained by Vega or by our sub-processors to train, fine-tune or improve those models for any other customer or purpose. We impose the same restriction on every sub-processor described below by contract.

AI features and sub-processors

The Service uses a number of third-party providers (“sub-processors”) to deliver its functionality, including the AI-assisted features described in our product materials. The list below reflects the sub-processors engaged as of the date of this policy. A current, versioned list — including the specific international transfer safeguard relied on for each, where applicable — is maintained in our Sub-processor List, available to customers with a signed DPA and on request to privacy@vegasports.ai.

Vega’s image-generation feature reaches a Google image-generation model through OpenRouter, Inc., which selects and calls the underlying model provider on Vega’s behalf. OpenRouter does not retain submitted prompts or generated content by default. Text analysis, drafting and content-generation features are provided directly by Anthropic, PBC.

We are also evaluating an expanded catalogue of image and video generation providers for an in-development feature (“Preview”). No such expanded provider is enabled in production today, and none will be enabled for a customer’s data until it has been added to our Sub-processor List, covered by a data processing agreement no less protective than our own, and, where applicable, confirmed to have a valid international transfer mechanism in place.

Personnel of whichever Vega group company is not the contracting entity for a given customer may access Customer Data to provide engineering, support and service delivery, under a written intra-group data processing agreement and, where required, an international transfer safeguard. That entity is treated as a sub-processor for the purposes of this policy and any applicable DPA.

International data transfers

For customers and individuals in the United Kingdom or European Economic Area, Vega Sports Intelligence Ltd. is the exporter of personal data to the sub-processors listed above, each of which is located in the United States. Each such transfer relies on one of the following safeguards, confirmed on a per-provider basis: the template UK Addendum to the EU Standard Contractual Clauses issued by the UK Information Commissioner under section 119A(1) of the Data Protection Act 2018; the UK International Data Transfer Agreement issued under the same authority; or, where the provider participates in it, the UK Extension to the EU–U.S. Data Privacy Framework. Details of which safeguard applies to which sub-processor are set out in our Sub-processor List.

For customers and individuals in the United States or Canada, Vega Sports Intelligence, Inc. processes information primarily within the United States, subject to the protections described in our DPA.

How long we keep information

We retain Customer Data for as long as the customer’s account is active or as needed to provide the Service. Following termination of a customer’s agreement with Vega, or a customer’s request, Vega deletes or de-identifies Customer Data held in active production systems within thirty (30) days, and residual copies held in encrypted backups or disaster-recovery archives within ninety (90) days, except where a longer period is required by law or by a legal hold. Sub-processor-specific retention practices are described in our DPA and Sub-processor List.

We retain account and business contact information for as long as needed to maintain the business relationship, and other information for as long as needed for the purposes described in this policy or as required by law.

Your rights and choices

Depending on where you are located, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing — for example under the UK and EU General Data Protection Regulation, the California Consumer Privacy Act, or Canada’s Personal Information Protection and Electronic Documents Act. If your organization is a Vega customer, we will generally direct individual requests to that customer where it is the controller of the information, consistent with our DPA. You can otherwise reach us using the contact details below.

We do not sell personal information, and we do not use information obtained through Google APIs for advertising purposes, consistent with Google’s Limited Use requirements.

Cookies and similar technologies

Our website and Service use cookies and similar technologies to keep you signed in, remember your preferences, and understand how our website and Service are used, so that we can improve them. You can control cookies through your browser settings; disabling some cookies may affect how our website and Service function.

Children’s privacy

The Service is a business tool intended for use by working professionals and is not directed to, and should not be used by, children. We do not knowingly collect personal information from children.

Security

Vega maintains administrative, technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration and destruction, consistent with our internal security policies. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. We will post the updated policy on our website with a new effective date, and where a change is material, we will provide additional notice as required by law or by our agreement with a customer.

Google user data

Some features use Google APIs. We request the minimum scopes required and only after you grant permission:

Limited Use. Vega’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not allow humans to read it except with your explicit consent, for security or legal reasons, or where the data has been aggregated and anonymized.

Contact us

Questions about this policy or our privacy practices can be directed to privacy@vegasports.ai, or in writing to whichever Vega entity is responsible for your information as described above.