Privacy policy

The controller of the personal data collected through powerballs-ai.com is Powerball AI, operated by a self-employed individual registered in Belgium.

Company / VAT number: BE0681.682.841
CBE: 0681.682.841
Address: Rue Fernand Stilmant, 6240 Farciennes, Belgium
Contact: contact@powerballs-ai.com

This policy is written to meet the EU General Data Protection Regulation (GDPR) and applies to every visitor, wherever they live. If you are a US resident, the rights described in section 5 are also available to you, and we honor applicable state privacy laws (such as the CCPA/CPRA in California) for the categories of data described below. We never sell your personal data.

Payment data (through Stripe)

When you buy plays or subscribe, Stripe collects on its own behalf your email address, your card details and the transaction amount. Powerball AI never stores or sees your card details; they are processed directly by Stripe. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Subscription data

If you take out a monthly subscription, we additionally keep the customer and subscription IDs assigned by Stripe, the plan you chose, the subscription status, your generation-engine preferences, and the history of deliveries (draw date, plays sent, date sent). This data is used solely to provide the subscribed service (generating and emailing plays before every draw) and to manage your subscription. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Server logs

Hostinger, our hosting provider, automatically records your IP address, browser type and the pages you visit for security and to keep the service running. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: 30 days maximum.

User account

Creating an account involves processing your email address, your name (optional), a password stored in hashed form, and the history of your purchases and generated plays. This data is used to provide the service, secure your account and track your orders. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Emails and newsletters

If you sign up for “AI Insights” or create an account, we use your email address to send our analyses and, occasionally, our offers. Legal basis: consent (Art. 6(1)(a) GDPR) for newsletter subscribers, legitimate interest (Art. 6(1)(f)) for offering similar services to existing customers. Every email contains a one-click unsubscribe link, in line with the US CAN-SPAM Act; open and click statistics are measured to improve our mailings.

Referral program

Linking a referrer and a referred customer, calculating commissions and paying them out involves processing your referral code, your commission history and the payout details you provide. Legal basis: performance of a contract.

Fraud and abuse prevention

We keep the data strictly necessary to prevent fraud (email addresses tied to proven abuse, logs related to promo-code use, payment disputes). Legal basis: legitimate interest (Art. 6(1)(f) GDPR — protecting the service and defending our legal rights).

Analytics and advertising (with your consent)

With the consent you give through the cookie banner, we use Google Analytics 4 (audience statistics) and the Meta pixel together with the Conversions API (measuring the effectiveness of our Facebook/Instagram campaigns). Legal basis: consent(Art. 6(1)(a) GDPR), which you can withdraw at any time through “Manage cookies” in the footer. Without your consent these tools do not set cookies.

Cookies

Details of the cookies we use (essential and consent-based) are given in our cookie policy.

Your data may be shared with the following service providers, strictly for the purpose of providing the service:

• Stripe, Inc. (payment processing) — headquartered in the United States. Transfers from the EU are covered by the EU Standard Contractual Clauses.
• Hostinger International Ltd. (hosting) — Cyprus, European Union.
• LWS (sending and receiving emails for our domain) — France, European Union.
• Google Ireland Ltd. / Google LLC (Google Analytics 4, only with your consent) — transfers covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.
• Meta Platforms Ireland Ltd. / Meta Platforms, Inc. (Meta pixel and Conversions API, only with your consent) — transfers covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.

No personal data is sold, rented or shared for commercial purposes.

• Payment data: 10 years from the transaction, in line with our legal accounting obligations.
• Server logs: 30 days maximum.
• Cookies: the periods stated in the cookie policy (30 minutes to 13 months).
• User account: until the account is deleted (at your request or after prolonged inactivity), then for as long as legal obligations require (invoicing: 10 years) for accounting data.
• Newsletter: until you unsubscribe (link in every email).
• Fraud-prevention data: for as long as needed to protect the service and until legal claims are time-barred.

Under the GDPR (Regulation (EU) 2016/679) and, where applicable, US state privacy laws, you have the following rights over your personal data:

• Right of access: obtain a copy of the data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: ask us to delete your data ("right to be forgotten").
• Right to portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interest.
• Right to restriction: ask us to temporarily suspend processing.
• Right to opt out of sale or sharing: we do not sell personal data, and you can withdraw consent to advertising cookies at any time.

To exercise these rights, contact us at contact@powerballs-ai.com. We reply within 30 days at most. We will never discriminate against you for exercising your privacy rights.

If you believe that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the data protection authority of your country of residence. In Belgium: Data Protection Authority (APD/GBA) — dataprotectionauthority.be. US residents may contact their state attorney general or the Federal Trade Commission (ftc.gov).

The Service is intended for adults only (18+, or 21+ where required). We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, contact us and we will delete it.

We may update this policy at any time to reflect legal developments or changes in our practices. The date of the latest update is shown at the top of this page.

For any question about the protection of your personal data: contact@powerballs-ai.com