← VisiBasket

Privacy policy

Last updated: September 22, 2026

VisiBasket is aimed at users located in France, the rest of Europe and the United States. This policy explains what data is collected, why, and how users can access or delete it.

1. Data controller

Lucas Large, site publisher (see the legal notice, contact: vaera.entreprise@gmail.com.

2. Data collected

  • Account : email address, password (encrypted) or Google identifier, account creation date.
  • Subscription : plan subscribed to; payment information (card, billing) is processed directly by Whop, not by VisiBasket.
  • Service usage : matches analyzed and questions asked to the AI assistant, kept to apply each plan's usage limits and display account history.
  • Technical : the site uses browser local storage to maintain the session and a few display preferences; no advertising cookie is used. With your consent (cookie banner), audience measurement (Vercel Analytics and an internal analytics tool) may be enabled — see the cookie policy.
  • Emails : account-related emails are sent via Resend; news emails about upcoming matches are only sent to users who explicitly checked the corresponding box at signup, with one-click unsubscribe.

3. Purposes and legal basis

This data is used to provide the service (account creation and management, applying plan usage limits, answering AI questions), on the basis of the performance of the contract with the user, and to respond to support requests, on the basis of the publisher's legitimate interest.

4. Recipients and processors

Data is hosted and processed by the following providers, as part of the service:

  • Supabase (accounts, passwords, history);
  • Vercel (site hosting);
  • Whop (payment and subscription management);
  • Anthropic (generating the AI assistant's answers from match data and the question asked — the email address and account identity are not shared with this provider);
  • Google, only if the user chooses to sign in with a Google account;
  • Resend (sending account-related emails and, with separate consent, news emails);
  • Vercel Analytics site audience measurement, enabled only with your consent (see the cookie policy).

Some of these providers are located outside the European Union (United States, Singapore). Data transfers to these countries rely on the safeguards these providers put in place (standard contractual clauses or equivalent mechanisms).

5. Retention period

Account data is kept for as long as the account exists. Analysis and AI question history is kept under the same conditions, to allow it to be viewed again. This data is deleted when the account is deleted.

6. User rights

In accordance with the General Data Protection Regulation (GDPR) for European users, anyone can request access to, correction or deletion of their data, or object to its processing, by writing to vaera.entreprise@gmail.com. Deleting the account, possible directly from the "My account" page, erases the account and associated data.

Users residing in certain US states may have similar rights under local data protection laws; the same contact details allow them to exercise them.

If you believe your rights are not being respected, you may also lodge a complaint with the French data protection authority (CNIL): cnil.fr/fr/plaintes.

7. Minors

The service is reserved for people aged at least 16.

8. Changes to this policy

This policy may be updated; the date at the top of the page shows the last revision.

This document is a template written to cover the service's current operation; it has not been reviewed by a legal professional and should be before large-scale commercial use, particularly for users located outside France.