Privacy Policy
Last updated: June 11, 2026
World Cup MCP is operated by Team-GPT Ltd., the company behind Juma— the data controller for the processing described here. This page describes what personal data we collect, why, and who processes it. The short version: an email address and payment records — we collect the minimum needed to sell and operate access keys, and we don't sell or share your data for advertising.
What we collect
- Account data — your email address, optional name, and (if you sign in with Google) your Google profile picture. If you sign up with a password, we store a salted hash, never the password itself.
- Purchase records — the Paddle transaction reference, what was bought, and the access period. Card details never reach us: payments are processed by Paddle as merchant of record, and Paddle acts as a separate data controller for checkout (see Paddle's privacy policy).
- Access key metadata— key label, creation time, and last-used time. Keys are stored only as cryptographic hashes. We do not log the content of your agents' queries for profiling; request handling is limited to operating and protecting the Service.
- Cookies — strictly necessary session cookies to keep you signed in. No advertising or cross-site tracking cookies.
Why we process it
To provide what you signed up for (account, payment, access keys), to secure the Service (abuse prevention, key verification), and to meet legal obligations (accounting records for purchases). We don't send marketing emails unless you explicitly opt in to something that says so.
Who processes it for us
- Paddle — payments, taxes, receipts (merchant of record)
- Google— only if you choose "Sign in with Google"
- Vercel — hosting
- Neon — database hosting
Retention and your rights
Account data is kept while your account exists; purchase records are kept as long as accounting rules require. You can ask us to access, correct, export, or delete your data at humans@juma.ai — deletion requests are honored except where we must retain records by law. You can revoke your access key yourself at any time in your account.
Children
The Service is not directed at children under 16, and we do not knowingly collect their data.
Changes and contact
Material changes to this policy will appear on this page with a new date. Privacy questions: humans@juma.ai. See also our terms of service.