In plain English
- We collect the minimum needed to run YourBet.ai.
- We never sell your data.
- Analytics and marketing cookies only fire after you accept them.
- You can delete your account or export your data anytime.
1. Data controller (personuppgiftsansvarig)
Company: Sunyard Invest AB
Org.nr: 559267-2975
Address: Ture Nermans Gränd 4, 112 37 Stockholm, Sweden
Contact for privacy matters: jonas@sunyard.se
We are not required to appoint a Data Protection Officer (DPO) under GDPR Art. 37 because we do not carry out large-scale processing of special-category data or systematic monitoring. Privacy questions go to the address above and are handled by the company's management.
2. What we collect
- Account data: email, display name, sign-in method.
- Product data: your display name and experience level, used to tailor the brief.
- Newsletter: email address, consent timestamp, confirmation timestamp (double opt-in), unsubscribe token.
- Technical: IP address, browser/device, pages visited (only if you accept analytics cookies).
- Consent log: what you accepted/rejected and when — stored in the
consent_logtable with a consent-ID, timestamp and hashed IP (legal requirement under ePrivacy). - AI Coach messages: the questions you send to the AI Coach and its replies are logged with your user ID for up to 90 days. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) for financial-services compliance, fraud/abuse prevention, and safety. Messages flagged as attempts to solicit prohibited advice (buy/sell recommendations, price predictions) may trigger a temporary 24-hour pause of your Coach access. You can request deletion at any time.
We do not hold your money, brokerage credentials, bank details, or trading accounts. YourBet.ai is purely educational.
3. Why we use it (legal basis)
- Contract (GDPR Art. 6(1)(b)): to provide your account and daily brief.
- Consent (Art. 6(1)(a)): for analytics, marketing cookies and the newsletter (double opt-in).
- Legitimate interest (Art. 6(1)(f)): to keep the service secure and detect abuse.
- Legal obligation (Art. 6(1)(c)): to keep consent logs and respond to lawful requests.
Newsletter signups from users under 16 are not accepted, in line with GDPR Art. 8.
4. Subprocessors & Data Processing Agreements (DPAs)
We use a small set of processors who only handle data on our documented instructions. Each of them has a signed DPA with us (GDPR Art. 28):
| Processor | Purpose | Region | DPA |
|---|---|---|---|
| Supabase (backend, auth, functions) | Database, authentication, edge functions | EU (Frankfurt) | Signed (standard DPA) |
| Lovable | Hosting & AI Gateway for the AI Coach | EU | Signed (standard DPA + SCC) |
| Finnhub | Market data (no personal data sent) | US | Not applicable — no personal data |
| Google Analytics 4 (G-WPB914TRS3) | Anonymised web analytics — only with consent | US (SCC + Consent Mode v2) | Google DPA accepted |
We do not sell your data, share it with advertisers, or use it to train AI models.
5. How long we keep it
- Account & product data: until you delete your account.
- Newsletter: until you unsubscribe (one-click link in every email or /unsubscribe).
- Analytics: up to 14 months (anonymised).
- Consent records: 3 years (legal requirement).
6. Your rights
Under GDPR you can at any time:
- Access a copy of your data.
- Correct or delete it.
- Object to or restrict processing.
- Withdraw consent (analytics/marketing) via the Cookie settings button in the footer.
- Lodge a complaint with your national data protection authority — in Sweden that is IMY (Integritetsskyddsmyndigheten).
Email jonas@sunyard.se and we will respond within 30 days.
7. International transfers
Data is stored in the EU. Where a processor is outside the EU (e.g. Google), we rely on the European Commission's Standard Contractual Clauses (SCC) plus additional safeguards (IP anonymisation, Consent Mode v2).
8. No investment advice
YourBet.ai — including the AI Coach, TrendScore, indicators, briefs and lessons — is strictly educational under Swedish law and MiFID II. We do not provide investment advice, individual recommendations, price targets or buy/sell/hold signals. See the full Disclaimer.
9. Children
YourBet.ai is not directed at children under 16. Newsletter signups require an age confirmation. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes
We will post any change here and update the "Last updated" date. Material changes trigger an in-app notice.