1. Introduction
InfinityD&T takes the protection of its users' personal data seriously. This privacy policy informs you of how we collect, use, store and protect your data when you use the LiveFootAI service.
Your personal data is processed in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
2. Data controller
- Controller: InfinityD&T
- Contact: privacy@infinity-dt.be
- Country: Belgium (Kingdom of Belgium)
3. Data collected
3.1. Registration data
- Email address
- Encrypted password (bcrypt hash)
- Account creation date
3.2. Usage data
- AI session history (duration, consumed minutes)
- Generated betting tickets (for history)
- Anonymised usage statistics (via Google Analytics)
3.3. Payment data
Payment data (credit card, billing address) is never stored on our servers. It is handled directly by Stripe, a PCI-DSS Level 1 certified processor.
3.4. Technical data
- IP address (for security and fraud prevention)
- Browser and OS type
- Session cookies (strictly necessary)
4. Purposes of processing
- Service provision: account creation, authentication, access to AI features
- Payment management: purchase, invoicing, refund of credits
- Security: fraud detection, abuse prevention, account protection
- User support: responding to enquiries
- Service improvement: aggregated usage analytics
- Legal compliance: invoice retention, regulatory obligations
5. Legal basis
Processing is based on:
- Performance of contract (GDPR Art. 6.1.b): to provide the Service you requested
- Legitimate interest (GDPR Art. 6.1.f): for security and fraud prevention
- Legal obligation (GDPR Art. 6.1.c): retention of accounting records
- Consent (GDPR Art. 6.1.a): for non-essential cookies and marketing communications
6. Data processors and recipients
We use the following processors:
- Stripe — payments (USA, adequacy decision + SCCs)
- Google Cloud — AI & hosting (EU / Belgium)
- Google Analytics 4 — anonymised analytics (with IP anonymisation)
- Our host — hosting in EU data centre
Each processor has signed a data processing agreement (DPA) compliant with GDPR Art. 28.
7. Retention periods
- Active accounts: as long as account is active
- Inactive accounts: deleted after 3 years of inactivity
- Accounting data: 7 years (Belgian legal obligation)
- Technical logs: 12 months maximum
- Session cookies: 30 days
8. Your rights
Under GDPR, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: request deletion ("right to be forgotten")
- Portability: receive your data in a structured format
- Objection: to processing based on legitimate interest
- Restriction: temporarily limit processing
- Withdrawal of consent: at any time, without affecting prior processing
To exercise these rights: privacy@infinity-dt.be. Response within 30 days maximum.
9. Cookies
We use the following categories of cookies:
- Essential cookies (no consent required): authentication session, security
- Analytics cookies (consent required): Google Analytics (anonymised)
You can manage your preferences via your browser or our cookie banner.
10. Security
We implement the following security measures:
- HTTPS/TLS 1.3 encryption for all communications
- Bcrypt password hashing
- Strict access controls to the database
- Automated encrypted backups
- Regular security audits
11. International transfers
Some data may be transferred outside the EU (notably Stripe in the USA). These transfers are secured by Standard Contractual Clauses (SCCs) approved by the European Commission.
12. Minors
The Service is strictly reserved for adults (18+). We do not knowingly collect data from minors. If we discover that data has been collected from a minor, we will delete it immediately.
13. Complaints
If you consider that your rights are not being respected, you may file a complaint with:
- Belgian Data Protection Authority: dataprotectionauthority.be
- Or with the DPA of your country of residence within the EU
14. Policy changes
This policy may be updated. Users will be informed by email of any substantive changes. The "Last updated" date at the top of the page indicates the last revision.
15. Contact
- Data protection: privacy@infinity-dt.be
- General support: support@infinity-dt.be
- Postal address: InfinityD&T, Belgium