Privacy Policy

Last updated: 14 September 2026

Who we are

CalledIt (calledit.bet, app.calledit.bet, and the Telegram bot @calleditbet_bot) is operated by Abrudan Ventures S.R.L., a Romanian limited liability company, CUI 53017100, trade registry no. J2025093115002, registered office at Strada Liszt Ferenc Nr. 44A, Oradea, Bihor, Romania ("we", "us"). We are the data controller for the processing described here. Contact: stefan@calledit.bet.

What CalledIt is, in one line

CalledIt compares betting prices and, if you connect your own account at a venue, places bets on that account when you tap Place. We never hold your money and we take no payments, so we hold no card, bank, or identity-document data at all. That shapes everything below.

Data we collect

• Your chat identity. On Telegram, your Telegram user id and, if you have one, your username. On the web, the identifier you sign in with through our authentication provider Privy (Telegram or email) and your Privy user id.
• Your settings. The country you tell us, the fact and time that you confirmed you are 18 or over, your per-bet and daily caps, your staking currency, and whether you have paused placement.
• A venue API key, if you connect one. Stored encrypted with AES-256-GCM, together with the venue name and whether the last call using it succeeded. On Telegram we delete the message containing the key once it is stored.
• Your bets. Bets we place for you and bets you tell us you placed elsewhere: the selection, stake, price, currency, venue, timestamps, and the result once settled.
• Your messages. What you write to the bot, so it can answer. See the next section.
• Technical data. Server logs and basic device or browser information, kept for security and debugging.

Your messages and the language model

To understand a question like "arsenal v coventry tonight, best price on arsenal?", the bot sends your message, recent turns of the conversation for context, and a short running summary of older turns, to a language model. The request goes through OpenRouter (OpenRouter, Inc., United States), which forwards it to one of the model providers we have configured: currently DeepSeek, NVIDIA and Nex AGI, in that order of preference. Every request carries OpenRouter's "no data collection" setting, so it is only ever routed to a provider whose policy is not to store your messages or train on them; a provider that cannot honour that is skipped. If none of them can answer, the message goes to Google (Gemini) as a last resort. Google's free-tier terms allow it to use such messages to improve its services, which is why it is last and rarely used. The provider processes your message only to generate the reply; we keep the reply and your message in your conversation history as described above. Please do not send the bot anything sensitive that you would not want processed this way. The bot is built to answer questions about markets and prices, and nothing more. When we change the provider list, we update this section and the date at the top of this page.

What we deliberately do not collect

We take no payments, so there is no card number, bank detail, or billing address anywhere in our systems. We run no identity verification, so we hold no passport, ID, or proof of address. We create no wallet for you and hold no balance. Any identity checks and any funding of your account happen at your venue, under its own policies, with no involvement from us.

Why we process your data

• To provide the service (answer your questions, quote prices, place a bet you tapped, show your bets and results): performance of a contract, Art. 6(1)(b) GDPR.
• To keep placement lawful and safe (the 18+ confirmation, the country check a venue requires, caps and pause): legal obligation and legitimate interest, Art. 6(1)(c) and 6(1)(f).
• Security and abuse prevention (rate limiting, logs): legitimate interest, Art. 6(1)(f).
• Website audience measurement (aggregate visit counts for calledit.bet, see Cookies and website analytics below): legitimate interest, Art. 6(1)(f).
• Legal obligations (accounting, responding to lawful requests): Art. 6(1)(c).

We do not sell personal data and we do not use it for third-party advertising.

Who receives data

• Telegram, the messaging platform the bot runs on, as an independent controller under its own policy.
• OpenRouter and, through it, DeepSeek, NVIDIA or Nex AGI, for the language model that reads your messages, under a no-data-collection routing setting; Google (Gemini) as the fallback. See "Your messages and the language model" above.
• Cloudbet and any other venue you connect or we link you to, which receives the bet itself under its own terms and privacy policy.
• Privy, authentication on the web.
• Fly.io (application hosting, European region), Vercel (web hosting) and GitHub Pages (this website).
• Plausible, which counts visits to this website. It is cookieless, stores no personal data and never fingerprints or tracks you across sites.

Some providers process data outside the EEA, including in the United States; transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

Retention and deletion

Send disconnect and your stored venue API key is deleted. Ask us at the address above to delete your account and we remove your settings, your key, and your bet records, keeping only what accounting or other law requires. You can revoke an API key directly in your venue account at any time, which takes effect immediately whether or not you tell us. Server logs are kept briefly for security.

Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Write to stefan@calledit.bet. You can also complain to the Romanian supervisory authority, ANSPDCP, or your local EU authority.

Cookies and website analytics

The web app uses only the storage strictly necessary for signing you in and keeping your session. No advertising or cross-site tracking cookies.

This website (calledit.bet) sets no cookies at all. We measure how many people visit it using Plausible, which is cookieless and privacy-first. For each page view it records the page, the referrer, the country, region and city derived from your IP address, and your device type, browser and operating system. Your IP address is used in the moment to work out that location and to generate an identifier that is rotated and discarded every 24 hours. It is never stored, no persistent identifier is created, no profile is built, and you are not followed from one site to the next.

Because nothing is stored on or read from your device, no cookie consent is required, which is why you see no banner here. The processing itself relies on our legitimate interest in understanding how the site is used, Art. 6(1)(f) GDPR.

Age

CalledIt is for adults. You must be at least 18 (or the higher age your jurisdiction requires) to use it; we do not knowingly process children's data.

Changes

We will post any changes on this page and update the date above. Material changes will be flagged in the product.