🔐 Privacy Policy

1. Introduction

BallPredictor ("we", "the service", "the site") is located at https://ballpredictor.eu and provides AI-powered football analysis and predictions. We respect your privacy and process personal data in full compliance with Regulation (EU) 2016/679 (GDPR) and Bulgarian legislation.

By using the service, you accept the terms of this policy.

2. What data we collect

BallPredictor collects the minimum amount of data necessary for the service to function.

2.1 Automatically collected data

• IP address (anonymized via Google Analytics)
• Device and browser information
• Usage data (behavior, visited pages)
• Cookies (see our Cookie Policy)
• Events for app installation (if PWA is installed)

2.2 Payment data (Pro Plan)

If you purchase the Pro Plan via Stripe:

• Last 4 digits of your card
• Card type
• Transaction status
• Billing email

2.3 Data we DO NOT collect

• ❌ Names or personal identification
• ❌ Physical addresses
• ❌ Identity documents
• ❌ Sensitive personal data
• ❌ Social media data

3. Legal basis, purposes and retention periods

Legal bases:

• Automatically collected data (analytics and functionality) – legitimate interest (Art. 6(1)(f) GDPR)
• Payment data – performance of contract (Art. 6(1)(b) GDPR) and legal obligations

Retention periods:

• Analytics data (Google Analytics) – maximum 26 months
• Transaction and invoice data – 10 years (per Bulgarian tax law)

4. Data recipients

• Stripe Inc. (USA) – protected via Standard Contractual Clauses (SCC) and Data Processing Agreement
• Google LLC (USA) – protected via SCC and DPA
• EU-based hosting provider (e.g., Hetzner Online GmbH)
• Government authorities upon legal obligation

5. Cookies

For detailed information about cookies used, please see our Cookie Policy.

6. Data security

• HTTPS (SSL/TLS) encryption across the entire site
• Servers located in the European Union
• IP address anonymization in Google Analytics
• Regular security updates and monitoring

7. Your GDPR rights

Under GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Object to processing
• Lodge a complaint with the Bulgarian Data Protection Commission

8. Contact and Data Controller