1. Data controller
BrainStats – Pontus Kaosén Stockholm, Sweden Email: support@brainstats.eu Website: brainstats.eu
BrainStats (brainstats.eu) is the data controller for personal data processed in connection with the service.
Privacy contact: support@brainstats.eu
2. Data we collect
- •Account data: email address and authentication data via Supabase.
- •Subscription data: plan, payment status and Stripe customer ID.
- •Usage data: analyses you create, dashboard history and daily AI slips.
- •Technical data: IP address, device, browser and security logs.
- •Analysis input: matches, markets and text you submit for AI analysis.
- •Language preference stored locally in the browser (localStorage).
3. Why we process data (legal basis)
- •Provide and improve the service (contract, GDPR Art. 6(1)(b)).
- •Manage login, account and premium (contract).
- •Payments and billing via Stripe (contract / legal obligation).
- •Security, debugging and abuse prevention (legitimate interest, Art. 6(1)(f)).
- •Anonymous visit statistics via Vercel Analytics (legitimate interest / consent where ePrivacy requires it).
4. AI and subprocessors
We use trusted providers to deliver the service:
Data may be processed outside the EU/EEA where required by providers. We rely on appropriate safeguards such as standard contractual clauses where needed.
- •Supabase – authentication and database.
- •Stripe – payments and subscriptions.
- •OpenAI – AI-generated analyses based on match data you request.
- •API-Football – match, team and statistics data.
- •Vercel – hosting and anonymous analytics.
5. Retention
- •Account data is kept until you delete your account or request deletion.
- •Analysis history is stored to power dashboard and reports.
- •Payment records follow Stripe policies and legal requirements.
- •Technical logs are kept for a limited period.
6. Your rights
To exercise your rights, contact support@brainstats.eu.
- •Access your personal data.
- •Request correction of inaccurate data.
- •Request deletion (subject to legal requirements).
- •Request restriction of processing.
- •Object to certain processing based on legitimate interest.
- •Data portability where applicable.
- •Lodge a complaint with your supervisory authority.
7. Security
We use technical and organisational measures to protect your data, including HTTPS encryption, access controls and limited production access.
8. Children
BrainStats is not directed at anyone under 18 and we do not knowingly collect data from children.
9. Changes
We may update this policy. The latest version is always published on the website with an updated date.