Privacy Policy

QUANT-CRO System is operated as a sole trader / individual business. We provide a mathematical football analysis subscription service accessible at quantcro.com.

For privacy-related inquiries, contact us at: quantcro.contact@gmail.com

We collect and process the following categories of personal data:

• Account data — email address, account creation date, subscription status.
• Payment data — billing information is processed and stored by Stripe. We do not store your full card number. We retain records of transaction amounts, dates, and subscription tier.
• Usage data — pages visited, analyses viewed, login timestamps. Used to improve the service and prevent abuse.
• Technical data — IP address, browser type, device type, cookies (see Section 6).

• To create and manage your subscription account.
• To process payments and issue receipts via Stripe.
• To deliver mathematical football analyses as part of the paid service.
• To send transactional emails (account confirmation, password reset, subscription receipts). We do not send marketing emails without your explicit consent.
• To detect and prevent fraud or violations of our Terms of Service.
• To comply with legal obligations.

We process your personal data on the following legal bases under GDPR:

• Contract performance — processing necessary to deliver the subscription service you signed up for.
• Legitimate interests — fraud prevention, service security, product improvement.
• Legal obligation — retaining transaction records for tax and accounting purposes.

We share data with the following trusted third-party processors:

We do not sell your personal data to any third party.

We use cookies solely for authentication purposes:

• Session cookies — set by Supabase Auth to keep you logged in. These are essential for the service to function and cannot be disabled while using QUANT-CRO.
• Affiliate cookies — if you arrive via a referral link, a cookie stores the referral code for 30 days to attribute any subsequent subscription correctly.

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

• Account data is retained for the duration of your subscription and up to 12 months after account deletion, unless a longer retention period is required by law.
• Payment transaction records are retained for 5 years to comply with Polish tax and accounting regulations.
• Usage logs are retained for up to 90 days and then deleted.

Under GDPR and Polish data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email quantcro.contact@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych — uodo.gov.pl).

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS), hashed password storage, and access controls limiting who can access production data.

This Privacy Policy is governed by Polish law (Prawo polskie) and applicable European Union data protection regulations (GDPR — Regulation (EU) 2016/679).

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. The "Last updated" date at the top of this page reflects the most recent revision.