1. Who we are

This Privacy Policy describes how BBStats ("we", "us", "our"), registered at Mashtots 1, Yerevan, Armenia, operates the bbstats.am platform and processes personal data of visitors, registered users, and paying subscribers.

2. What we collect

Account data: name, email, password (stored as a salted hash), time zone, preferred language.
Tenant (league) data: league name, chosen subdomain, branding assets (logos, colors, fonts), and content the league creates on the platform (teams, players, games, statistics, news, rules).
Billing data: when you subscribe to a paid plan we store the plan name, invoice amount, currency, billing period, and transaction identifier returned by our payment provider. We do not store full card numbers or CVV codes — cards are handled entirely by our PCI-DSS certified payment provider.
Technical data: IP address, browser/user-agent, referring URL, device type, and cookie identifiers.
Communication data: support emails, registration confirmation tokens, password reset tokens, and push-notification endpoints.

3. Why we process it

To provide and operate the service (contract performance).
To process payments and issue receipts (legal obligation).
To send service notifications, verification emails, and password resets (legitimate interest & contract).
To detect fraud, abuse, and security threats (legitimate interest).
To comply with applicable laws and respond to lawful requests.

4. Legal basis

We rely on the following legal bases: (a) performance of a contract when you use the service; (b) legitimate interests in operating, securing, and improving the platform; (c) your consent for optional features such as marketing emails and browser push notifications, which you may withdraw at any time; (d) legal obligations related to accounting and anti-fraud.

5. Sharing

We share personal data only with processors strictly necessary to operate the service:

Payment processor — to charge your card and confirm the transaction.
Hosting & infrastructure provider — to run servers and deliver static assets.
Email delivery provider — to send verification and password-reset messages.
Push-notification provider — only if you opt in to follow teams and receive push alerts.
Analytics provider — aggregated traffic data; IP anonymization is enabled where supported.

We do not sell personal data. We may disclose data to public authorities where legally required.

6. International transfers

Some processors listed above may be located outside the Republic of Armenia and outside the European Economic Area. Where this is the case, we rely on the provider’s own legally approved transfer mechanisms (such as Standard Contractual Clauses) or on your explicit consent.

7. Retention

Account data is kept while your account is active and for up to 12 months after account closure. Billing records are kept for the period required by applicable accounting law (typically 5–10 years). Soft-deleted tenants are permanently purged 30 days after deletion unless restored. Backups are rotated on a short cycle.

8. Your rights

You have the right to access, correct, export, restrict, or delete your personal data, to object to processing based on legitimate interests, and to lodge a complaint with the supervisory authority of your country of residence. To exercise these rights contact us at [email protected].

9. Cookies

We use strictly necessary cookies to keep you signed in, a preference cookie to remember your cookie-consent choice, and optional analytics cookies when you accept them. See our Cookie Policy for the full list.

10. Security

The service is served only over HTTPS. Passwords are hashed with bcrypt. Card data is transmitted directly from your browser to our PCI-DSS certified payment provider and is never stored on our servers. Access to production data is restricted and audit-logged.

11. Children

The service is not directed at children under 16. If you believe a child has provided personal data to us without parental consent, contact us and we will delete it.

12. Changes

We may update this policy. The current version and the "Last updated" date are always available on this page. Material changes will be announced on the platform.

13. Contact

BBStats
Mashtots 1, Yerevan, Armenia
Email: [email protected]
Phone: +37495133300