Privacy Policy

Data controller

The platform is operated by Bestplay Studio. For any privacy request, write to hello@bestplay.ai.

Data we collect

We only collect what is needed to run the service:

• Account data: full name, email address, password (stored only as a secure hash), language preference
• Organization profile: club/organization/athlete details, brand assets, logo and brand colors
• Brief contents: the goals, budgets and descriptions you enter when requesting a deliverable
• Generated outputs: the strategies, reports, decks and visuals the platform produces for you
• Contract texts: content you upload or paste into the Sports Lawyer module
• Payment data: payments run through Stripe; your card details are never stored on our servers
• Usage records: credit movements, generation history, session and security logs
• Cookies: the limited cookie set described in the Cookie Policy

Purposes of processing

We process your data to:

• Create your account, manage your session and provide the service
• Produce the deliverables you request from your briefs
• Send generation status, account and billing notifications
• Manage your subscription and credit balance, and process payments
• Keep the platform secure and prevent abuse
• Meet our legal obligations

AI processing

To produce your deliverables, your brief content and the relevant parts of your profile are transmitted to our AI providers (Anthropic for text and strategy, Higgsfield for visuals). This transmission happens only to produce the output you requested and under our contractual terms with those providers. Market data embedded in outputs is gathered in real time from publicly available sources, and sources are indicated wherever available.

Service providers and transfers

Your data is shared with the following providers only to the extent required to run the service:

• Supabase (database and authentication; data hosted in the EU, eu-central-1)
• Vercel (application hosting)
• Anthropic (AI text generation)
• Higgsfield (AI visual generation)
• Stripe (payment processing)
• Cloudflare (bot protection, Turnstile)
• Resend (transactional email)

Retention

We keep your data while your account is active and for as long as our legal retention duties require. When you delete your account, personal data other than records we must keep by law (such as invoicing records) is deleted or anonymized within 30 days.

Your rights

You have the right to:

• Access your data and request a copy
• Request correction of inaccurate or incomplete data
• Request deletion of your data (including account deletion)
• Object to or restrict processing
• Receive your data in a portable format

Account deletion and requests

For account deletion, data access and any other request, write to hello@bestplay.ai from your registered email address. Requests are resolved within 30 days at the latest and you are informed of the outcome.

Changes

Material changes to this policy are published on this page and, where required, notified to you by email. The date at the top shows the latest revision.