Privacy Policy
Information about how your personal data is processed.
1. Who we are
MatchScan is a football betting analysis service operated by the operator of AIBG Picks, based in Spain. For privacy queries write to [email protected].
2. Data we collect
- Account data: email, password hash (bcrypt), display name (optional), Google account ID if you sign in with Google.
- Billing data: handled entirely by Stripe. We store only your Stripe customer ID, subscription status and current period end. We never see or store payment-card details. Purchases made in the MatchScan Android app are processed by Google Play: we store the order ID, the purchase token, the product, its status and its expiry date.
- Usage data: AI analyses you run, picks you log, language preference, IP address (briefly, for abuse prevention and rate-limiting), basic browser metadata.
- Communication data: emails we send (welcome, billing receipts, weekly digests), and any reply you send us.
3. Why we process your data
- To run the service (legal basis: contract): auth, AI quota tracking, bet register.
- To bill you (contract): process payments via Stripe, send invoices.
- To improve the product (legitimate interest): aggregated, non-identifying usage analytics.
- To send service emails (contract): receipts, password resets, security alerts. Marketing emails are opt-in only.
- To meet legal obligations (legal obligation): keep transactional records for required periods.
4. Who we share data with
- Stripe: payment processing (PCI-DSS compliant). stripe.com/privacy
- Google: only if you sign in with Google (we receive your email and Google ID). policies.google.com/privacy
- Google Play: payments made inside the MatchScan Android app (Google Play Billing). Refunds and management of those purchases follow Google Play's rules.
- Cloudflare: DNS, CDN and DDoS protection. Sees IP address and request metadata. cloudflare.com/privacypolicy
- Anthropic: when you run AI analysis, the match data we send to its AI model includes only public team/league info, never your personal data. anthropic.com/privacy
We never sell your data. We never share it for third-party advertising.
5. How long we keep data
- Account data: until you delete your account, plus 30 days for backup.
- Billing records: 7 years (Spanish tax law).
- Access logs (time, page requested, response code and size, browser type, and your IP address with the last part removed): 30 days, then deleted. They are kept on our server only, to investigate misuse and security incidents.
- Email log: 12 months.
6. Your rights (GDPR)
You can:
- Access your data: view it on /me or email us.
- Correct it: change your email, name and password from /me/settings.
- Delete it: from /me/settings («Delete my account», also inside the app), or without signing in at matchscan.co/en/delete-account (we email you a confirmation link). Deletion is immediate, except for suspended accounts, which we review manually within 30 days. Billing records are kept pseudonymised (without your email) for 7 years, as required by Spanish tax law. Server technical logs, which can include your email address, rotate automatically and are overwritten within a few weeks. You can also email [email protected].
- Port it: request a JSON export of your account data.
- Object to processing or restrict it.
- Lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Cookies
We use a small number of strictly-functional cookies:
ms_session: your login session (httpOnly, sameSite=lax, 30-day expiry).ms_lang: language preference.
We do not use third-party tracking cookies, advertising cookies or cross-site tracking.
8. Security
Passwords are hashed with bcrypt (cost factor 12). Payments are PCI-DSS compliant via Stripe. The site uses HTTPS with HSTS. Internal admin endpoints are bearer-token protected. Database backups are encrypted at rest.
9. Children
MatchScan is for users 18 and over only. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.
10. Responsible gambling
MatchScan provides analysis, not betting advice. If you have concerns about your gambling, free help is available: Juego Responsable (Spain), GambleAware (UK), Gambling Therapy (international).
11. Changes to this policy
We will notify subscribers of material changes by email at least 30 days before they take effect. Minor changes are posted here.
12. Contact
All channels reach the same operator:
- Email: [email protected]
- Telegram: @AIBG126 (channel) · @Soccerratingtipsbot (DM)
- X / Twitter: @AIBGPicks