Privacy Policy

GDPR-Compliant Privacy Policy

Last updated: December 4, 2025

NBAprediction ("we", "our", "the Service") is committed to protecting your personal data in compliance with the EU General Data Protection Regulation (GDPR) and applicable French regulations.

This Privacy Policy explains what data we collect, how we use it, and your rights as a user.

1. Data Controller

The Service is operated by an individual entrepreneur based in France.
Contact email for privacy matters: privacy@nbaprediction.com

Full legal identification may be provided to competent authorities upon request, in accordance with French law (LCEN). We only disclose identity information to users if legally required under French law.

2. Data Collected

We collect only the information necessary to operate the Service.

2.1. Data you provide

• Email address (account creation)
• Password (hashed and never stored in clear text)
• Subscription information (plan, status, renewal date)

2.2. Payment information

All payment data (card number, billing address, tax information) is processed and stored exclusively by Stripe Payments Europe Ltd.

We never store or access your payment details.

2.3. Automatically collected data

• IP address
• Device and browser information
• Login timestamps
• Anonymized analytics collected via Fathom Analytics (GDPR-compliant)

These are used to secure your account and improve service performance.

3. Purpose of Processing

We process personal data solely for the following purposes:

• Provide access to the subscription service
• Process payments through Stripe
• Authenticate users and secure accounts
• Manage subscriptions and customer support
• Detect misuse or account sharing
• Produce anonymized analytics to improve the platform

We do not perform tracking for advertising.
We do not sell or rent your data.

4. Legal Basis for Processing

Processing is based on:

• Contract performance (providing the subscription service)
• Legitimate interest (security, fraud prevention, analytics)
• Legal obligation (accounting, tax compliance)
• User consent where applicable (newsletter, optional features)

5. Data Retention

We retain personal data only as long as necessary:

• Account data: retained until deletion of the account
• Payment logs: retained as required by financial regulations (up to 10 years)
• Analytics: anonymized or deleted after processing

6. Data Sharing

Data is shared only with essential third parties:

Stripe

For payment processing and fraud prevention.

Hosting provider: OVH (France)

For secure hosting and server operations.

Analytics tools

Tools may process anonymized usage data (e.g., page visits). No personally identifiable data is sold or shared for marketing.

We never transfer data outside of the EU unless covered by GDPR adequacy decisions or protections (e.g., Stripe's EU entities).

7. User Rights (GDPR)

You have the following rights:

• Right of access: see the data we hold about you
• Right to rectification: correct your information
• Right to deletion ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing based on legitimate interest
• Right to lodge a complaint with CNIL (France)

To exercise any right, contact: privacy@nbaprediction.com

8. Cookies

The Service uses only essential cookies for:

• authentication
• session management
• security

No advertising or tracking cookies are used.

If optional analytics cookies are added in the future, users will receive a consent banner.

9. Security Measures

We implement industry-standard measures to protect your data:

• HTTPS encryption
• Hashed passwords (never stored in plain text)
• Firewall and server protection via OVH
• Stripe PCI-DSS compliance
• Rate limiting and bot detection
• We also implement access controls to limit who can access user data internally.

Despite best efforts, no system can guarantee absolute security.

10. Changes to This Policy

We may update this Policy to reflect technical or legal changes.

Users will be notified in case of significant modifications.

Contact

For any privacy-related request:
privacy@nbaprediction.com