Privacy Policy

1. Who is responsible

BetsPlug, established in the Netherlands, is the data controller for the personal data described below. Reach us at privacy@betsplug.com.

2. What we collect

• Account data — email address, hashed password, chosen username, language preference.
• Subscription data — Stripe customer ID, subscription tier and billing cycle. Card details stay with Stripe; we never see them.
• Usage data — pages viewed, predictions opened, IP-derived country, browser and device type. Used for product improvement and abuse detection.
• Communication data — emails you send us, support tickets, Telegram channel membership status (Platinum tier).

3. Why we use it

• To run your account and deliver the predictions you subscribed to.
• To process payments via Stripe and prevent fraud.
• To improve the engine and the user interface based on aggregate usage patterns.
• To answer your support requests.
• To comply with legal obligations (tax, AML, consumer-protection law).

4. Legal basis (GDPR)

We process personal data on the basis of (a) the contract you enter into when you sign up, (b) your consent for non-essential cookies and marketing emails, and (c) our legitimate interest in keeping the platform secure and improving it. You can withdraw consent at any time without affecting prior processing.

5. Sharing

We share data with a small number of processors:

• Stripe — payment processing.
• Vercel + Railway — hosting infrastructure.
• Sanity — content management for the blog.
• Resend / Postmark — transactional email.

We do not sell your data and we do not share it with advertising networks.

6. International transfers

Some processors operate outside the EU/EEA. Where that's the case we rely on Standard Contractual Clauses approved by the European Commission to safeguard the transfer.

7. Retention

Account data is kept for as long as your account is active and for 12 months after deletion (legal hold). Anonymous prediction-history data is kept indefinitely as part of the public track record.

8. Your rights

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — delete your account and personal data ("right to be forgotten").
• Portability — get your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Complaint — file with your national supervisory authority (in NL: Autoriteit Persoonsgegevens).

9. Security

Passwords are stored hashed. Connections are TLS-encrypted. Access to production data is restricted to a small team under audit logging. We run automated security scans and patch dependencies weekly.

10. Cookies

See our cookie page for the full breakdown.

11. Contact

Privacy questions or data-rights requests: privacy@betsplug.com. We respond within 30 days.