Privacy policy
Last updated: August 31, 2026
1. Data Controller
The data controller for this processing is Keystep Technologies LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA, which operates the BetSynq service.
Contact for data protection matters: info@betsynq.com
2. What Data We Process
- Account details: name, email address, password (stored as a cryptographic hash — we can never read it).
- Membership: chosen tier, start and end dates, trial period, payment status.
- Payment details: handled entirely by Stripe. We never store card numbers — only a Stripe customer ID and the payment status.
- Content you create: forum posts, support tickets, your own notes in Bet Tracker.
- Technical data: IP address, browser type, and timestamps in security and server logs.
- Age verification: timestamp confirming you've certified that you're 18 or older.
- Usage statistics: aggregated and anonymous visitor analytics without cookies.
3. Purpose and Legal Basis
| Purpose | Legal basis |
|---|---|
| Providing your account and membership | Performance of contract |
| Managing payments and billing | Performance of contract |
| Transactional emails | Performance of contract |
| Newsletter and offers | Consent — can be withdrawn at any time |
| Security, logs, and abuse prevention | Legitimate interest |
| Age verification (18 years) | Legal obligation |
| Bookkeeping for completed purchases | Legal obligation |
4. Data Processors
We never sell your data. To run the service, we use the following providers, all bound by data processing agreements:
- Supabase — database and login. Data is stored within the EU.
- Netlify — web hosting and server functions. USA.
- Stripe — payments. Stripe is an independent data controller for payment data. USA/Ireland.
- Resend — sending emails. USA.
- Plausible Analytics — visitor analytics without cookies. EU.
- Trustpilot — invitation to leave a review after purchase. EU.
5. Transfers to Third Countries
Some of the providers above process data in the USA. Such transfers rely on the European Commission's Standard Contractual Clauses (SCCs) and, where the provider is certified, the EU–U.S. Data Privacy Framework. The providers also apply encryption both in transit and at rest.
If you'd like details of the safeguards that apply to a specific transfer, contact us and we'll send the documentation.
6. How Long We Retain Data
- Account and membership: as long as the account is active, then 12 months before deletion.
- Records of completed purchases: seven years, as required by the Swedish Bookkeeping Act. We cannot shorten this period, even on request.
- Support tickets: 24 months.
- Security logs: 90 days.
- Age verification: for as long as the account exists.
- Newsletter: until you unsubscribe.
7. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access the data we process about you (a data extract).
- Have incorrect data corrected.
- Have your data deleted — the "right to be forgotten."
- Restrict the processing of your data.
- Object to processing based on legitimate interest.
- Receive your data in a machine-readable format (data portability).
- Withdraw consent you've given, without affecting processing that has already taken place.
You can also contact info@betsynq.com. We respond within 30 days.
8. Cookies
We use necessary cookies for login and to remember your choices. Our visitor analytics runs without cookies and without identifying individual visitors. You can block cookies in your browser, but then login won't work.
9. Personal Data Breaches
In the event of an incident that poses a risk to your rights, we report it to the Swedish Authority for Privacy Protection within 72 hours and inform you directly whenever the requirements for that are met.
10. Complaints
If you're unhappy with how we process your data, we want to hear from you first. You always have the right to contact the supervisory authority: Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, imy.se.