Privacy Policy

The data controller for your personal data is SB Software & Automation, Elisabeth van Loonstraat 7, 3271 BB Mijnsheerenland, Netherlands. For any privacy matter, contact info@photonodds.com.

We collect the following categories of personal data:

• Account data — name, email address, and credentials you provide when you register (authentication handled via our identity provider).
• Billing data — your subscription, plan, and payment status. Card details are processed directly by Stripe; we do not store full card numbers.
• Usage and technical data — IP address, device and browser information, pages viewed, and API usage, collected automatically when you use the Service.
• Cookies and similar technologies — strictly necessary auth/session cookies set by Clerk and cookieless analytics via Umami (see "Cookies").

We use personal data to:

• Provide, operate, and secure the Service and your account
• Process subscriptions, payments, and renewals
• Provide customer support and respond to your enquiries
• Monitor usage, enforce rate limits, and prevent abuse
• Improve the Service and understand aggregate usage trends
• Comply with our legal and tax obligations

We rely on the following legal bases:

• Performance of a contract — to provide the Service and process your subscription
• Legitimate interests — to secure the Service, prevent abuse, and improve our product, balanced against your rights
• Legal obligation — to meet accounting, tax, and other statutory requirements
• Consent — for non-essential cookies or analytics where required; you may withdraw consent at any time

We share personal data only with service providers ("sub-processors") who process it on our behalf under appropriate data-processing agreements:

• Clerk — authentication and waitlist management (names, email addresses)
• Cloudflare — DNS, CDN, and web application firewall (IP addresses, request metadata)
• Vercel — hosting and serving the application (IP addresses, request logs)
• Umami — cookieless website analytics (no personal data collected)
• Stripe — payment processing (activated at commercial launch)

Where a sub-processor processes data outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected.

We keep account and billing data for as long as you have an account and thereafter as required to meet legal, tax, and accounting obligations (generally up to 7 years for financial records under Dutch law). Usage and analytics data are retained only as long as needed for the purposes described above, then deleted or anonymised.

Under the GDPR you have the right to:

• Access — obtain a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — ask us to delete your data where applicable
• Restriction — limit how we process your data
• Portability — receive your data in a portable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time where processing is based on consent

Clerk sets strictly necessary cookies for authentication and session management. Umami, our analytics provider, is cookieless and collects no personal data. No consent banner is required while analytics remain cookieless. You can control cookies through your browser settings.

To exercise your rights or ask a privacy question, email info@photonodds.com. We will respond within the timeframes required by the GDPR.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or your local EU data protection authority.