Privacy Policy

1. Data Controller

Data Controller: Adam Nagy, Entrepreneur Individuel (sole proprietor) operating under the business name Stellune.

SIREN: 943 063 677 Address: 30 rue Durand, 31200 Toulouse, France Email: support@axiascore.com

For any privacy-related inquiries, contact us at support@axiascore.com.

2. Data We Collect

We collect the following personal data:

- Email address (required for account creation) - Display name (optional) - Preferred language (EN, FR, or HU) - Subscription status and billing history

Payment data (card numbers, billing address) is processed directly by Stripe and is never stored on our servers. We only receive a Stripe customer ID and subscription status.

3. How We Use Your Data

Your data is used exclusively to:

- Provide access to the Axiascore platform and its features - Manage your subscription and process payments via Stripe - Send essential account-related communications (subscription confirmations, password resets) - Improve the service based on aggregated, anonymized usage patterns

We do NOT use your data for advertising, profiling, or marketing purposes. We do NOT sell, rent, or share your personal data with third parties for their own purposes.

4. Cookies & Tracking

Axiascore uses only essential technical cookies required for authentication (Supabase session tokens). We do NOT use advertising cookies, social media trackers, or any third-party tracking scripts.

For anonymous usage analytics, we use Plausible Analytics — a privacy-friendly, cookie-free analytics tool that is fully GDPR compliant. Plausible does not collect any personal data and does not use cookies.

5. Data Hosting & Transfers

Your data is processed by the following services:

- Supabase (database & authentication) — hosted on AWS in the EU region - Vercel (website hosting) — edge network with EU presence - Vercel Speed Insights — collects anonymous Core Web Vitals (LCP, INP, CLS, TTFB) for performance monitoring. No cookies, no personal data, aggregated per route. - Stripe (payment processing) — headquartered in the USA, operating under EU Standard Contractual Clauses (SCCs) for data transfers - Plausible Analytics — EU-based, no personal data transferred

All data transfers outside the EU are covered by appropriate safeguards in compliance with GDPR.

6. Data Retention

Account data is retained for as long as your account is active. If you delete your account, all associated personal data will be permanently deleted within 30 days. Anonymized, aggregated analytics data may be retained indefinitely as it cannot be linked to any individual.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

- Right of access: request a copy of all personal data we hold about you - Right to rectification: correct inaccurate or incomplete data - Right to erasure: request deletion of your personal data - Right to data portability: receive your data in a structured, machine-readable format - Right to object: object to data processing in certain circumstances - Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at support@axiascore.com. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), encrypted database connections, and access controls limited to authorized personnel.

9. Children

Axiascore is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform at least 14 days before taking effect.

11. Contact & Complaints

For any questions or complaints regarding this Privacy Policy or the handling of your data, contact us at support@axiascore.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.