Privacy policy
Last updated 10 November 2026
Velox Web v/ Willads Gorm Pedersen ("we", "us", "BetTrack") is the data controller for the processing of your personal data. We process your data in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Danish Data Protection Act.
1. Data controller
Velox Web v/ Willads Gorm Pedersen, CVR 46285999, Kildebjerg Skovvej 45, 8680 Ry, Denmark. Phone +45 71 78 59 51. Email willads@veloxweb.dk.
2. What data we collect
- Account data: name (optional), email address and password (stored hashed by Supabase Auth — we never have access to your plain-text password).
- Settings you choose: language, number format, currency and time zone.
- Data you enter yourself: the betting sites you create and the transactions, bets, bonuses and notes you register. This data is entered by you and belongs to you.
- Screenshots you upload for import (only if you use the feature): the image is placed temporarily in private storage at Supabase and sent to Google (Vertex AI) to read the coupon's fields. The image is deleted when the analysis finishes or when you discard the import. If the analysis fails or you do not finish the import, the image is cleaned up by an automatic job that runs once a day after the import has expired (two days after upload). If the deletion itself fails, we give no guarantee of when the image is gone. We keep the extracted result and a hash (a digital fingerprint) of the image for up to 60 days after last use so the same image is not analysed repeatedly. The image itself is not kept. If you correct which betting site a coupon belongs to, we store the correction (the text read from the coupon and the site you chose) for later imports until you delete your account.
- Payment data: handled by Stripe. We never see full card numbers. We store a Stripe customer ID and subscription ID. (Paid plans are not yet open for purchase.)
- Technical data: login times, IP address (logged briefly by our infrastructure providers) and browser type, used for security and operation.
3. Why we process your data and our legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Running your account and providing the service | 6(1)(b) — performance of a contract |
| Payment and bookkeeping | 6(1)(b) and 6(1)(c) — contract and legal obligation |
| Customer support | 6(1)(f) — legitimate interest |
| Login emails: confirming your email address and resetting your password | 6(1)(b) — performance of a contract |
| Emails from the service (receipts and the reminders, reports and notifications you turn on) | 6(1)(b) — performance of a contract |
| Reading uploaded coupon screenshots (only if you use import) | 6(1)(b) — performance of a contract |
| Security and abuse prevention | 6(1)(f) — legitimate interest |
| Website statistics (Google Analytics and Vercel Web Analytics; page address without query parameters and fragment, referrer and technical browser information, and only with your consent) | 6(1)(a) — consent |
4. Who we share data with
| Provider | Role | Location |
|---|---|---|
| Supabase Inc. | Database, authentication and temporary storage of import screenshots. Triggers login emails (confirmation, password reset), which are sent through Resend | EU (Ireland, AWS eu-west-1) |
| Vercel Inc. | Hosting and CDN; page-view measurement (Vercel Web Analytics), only with your consent | EU (Dublin) for server functions; USA/global for the CDN (standard contractual clauses) |
| Stripe | Payments (paid plans are not yet open for purchase) | EU/USA (standard contractual clauses, EU-US Data Privacy Framework) |
| Resend | Email delivery: emails from the service (receipts, reports, reminders, notifications) and login emails from Supabase Auth (confirmation, password reset) | USA/EU (standard contractual clauses) |
| Google Cloud (Vertex AI) | Reading coupon screenshots, only if you use import | EU (europe-west1, Belgium) |
| Google Ireland Limited (Google Analytics) | Website statistics, only with your consent. We only send the path of the page opened | EU/USA (standard contractual clauses, EU-US Data Privacy Framework) |
We never sell your personal data.
5. How long we keep data
| Category | Retention |
|---|---|
| Account data and data you entered | Deleted immediately and permanently from our active systems (the database) when you delete your account under Settings. Copies in the database provider's backups are not deleted individually but expire after the provider's own backup retention period |
| Uploaded import screenshots | Deleted when the analysis finishes or the import is discarded. Otherwise cleaned up by an automatic job that runs once a day after the import has expired (two days after upload). We give no guarantee of a deadline if the deletion fails |
| Pending import drafts (extracted result before you save or discard) | Deleted when you save or discard them. After two days they are no longer shown. We state no fixed deletion deadline for expired drafts; they are deleted at the latest together with the account |
| Hash and extracted result from earlier imports (to avoid repeated analysis) | Deleted 60 days after last use |
| Bookkeeping records (receipts, invoices) | 5 years from the end of the financial year (Danish Bookkeeping Act) |
| Technical log data | Up to 30 days |
6. Your rights
- Access (art. 15): a copy of the personal data we process about you.
- Rectification (art. 16): correction of inaccurate data.
- Erasure (art. 17): deletion of your data in the cases provided by law.
- Restriction (art. 18) of processing in certain circumstances.
- Data portability (art. 20): receive your data in a machine-readable format.
- Objection (art. 21) to processing based on legitimate interest.
- Withdrawal of consent (art. 7) at any time, where processing is based on consent.
To exercise your rights, contact us at willads@veloxweb.dk. We reply within 30 days. You can also complain to the Danish Data Protection Agency (Datatilsynet): datatilsynet.dk, dt@datatilsynet.dk, phone +45 33 19 32 00, Carl Jacobsens Vej 35, 2500 Valby, Denmark.
8. Changes
We update this policy if our practices change. The date at the top shows when it was last updated. Significant changes are announced by email.