Privacy Policy

1. Introduction and Data Controller

Amateam ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you use our amateur sports team management platform.

Data Controller: Amateam Ltd.
Contact: [email protected]
Data Protection Officer: [email protected]

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Name, email address, phone number, password
• Profile Information: Sports preferences, skill level, availability, photo
• Team Information: Team name, sport, location, member roles
• Event Information: Event details, attendance, performance data
• Payment Information: Billing details (processed securely by Stripe)
• Communications: Messages, notifications preferences, support requests

2.2 Information We Collect Automatically

• Usage Data: How you interact with our service, features used, time spent
• Device Information: Device type, operating system, browser type
• Log Data: IP address, access times, pages visited, referral URLs
• Location Data: Approximate location for venue suggestions (with consent)

2.3 Information from Third Parties

• Authentication Services: Google, Facebook login information (if used)
• Payment Processors: Stripe payment confirmation data
• Communication Services: Twilio (SMS), Resend (Email) delivery status

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

3.1 Consent (Article 6(1)(a) GDPR)

• Marketing communications
• Optional location services
• Non-essential notifications
• Cookies and tracking (where required)

3.2 Contract Performance (Article 6(1)(b) GDPR)

• Account creation and management
• Providing core platform services
• Processing payments
• Essential service communications

3.3 Legitimate Interests (Article 6(1)(f) GDPR)

• Service improvement and analytics
• Security and fraud prevention
• Customer support
• System administration

3.4 Legal Obligation (Article 6(1)(c) GDPR)

• Tax and accounting records
• Regulatory compliance
• Law enforcement requests

4. How We Use Your Information

4.1 Core Service Functionality

• Create and manage your account
• Enable team creation and membership management
• Facilitate event organization and scheduling
• Process payments and manage bookings
• Send essential service notifications

4.2 Communication and Notifications

• Send event reminders and updates
• Deliver important service announcements
• Respond to support requests
• Send marketing communications (with consent)

4.3 Service Improvement

• Analyze usage patterns to improve features
• Troubleshoot technical issues
• Develop new functionality
• Ensure platform security and integrity

5. Data Sharing and Disclosure

5.1 We Share Data With:

• Team Members: Your profile and activity data within your teams
• Service Providers: Supabase (hosting), Stripe (payments), Twilio (SMS), Resend (email)
• Legal Authorities: When required by law or to protect rights and safety

5.2 We Do NOT:

• Sell your personal data to third parties
• Share data for advertising purposes without consent
• Transfer data to countries without adequate protection

6. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Until account deletion + 30 days for recovery
• Financial Records: 7 years for tax and legal compliance
• Communication Logs: 2 years for support and legal purposes
• Analytics Data: 26 months in aggregated, anonymized form

7. Your Privacy Rights (GDPR)

7.1 How to Exercise Your Rights

Contact us at [email protected] or use the privacy controls in your account settings. We will respond within 30 days.

7.2 Right to Withdraw Consent

You can withdraw consent at any time where processing is based on consent. This won't affect the lawfulness of processing before withdrawal.

7.3 Right to Complain

You have the right to lodge a complaint with your local data protection authority if you believe we've violated your privacy rights.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

9. International Data Transfers

Your data may be processed in countries outside the European Economic Area. When we transfer data internationally, we ensure adequate protection through:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes

10. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Authentication, security, basic functionality
• Analytics Cookies: Usage statistics and service improvement (with consent)
• Preference Cookies: Remember your settings and choices

You can manage cookie preferences in your browser settings or through our cookie consent banner.

11. Children's Privacy

Our service is designed for users 13 and older. For users under 18, parental consent is required for team participation. We take special care with minors' data and follow applicable laws like COPPA.

12. Third-Party Services

Our platform integrates with third-party services:

• Supabase: Database and authentication (EU-based)
• Stripe: Payment processing (GDPR compliant)
• Twilio: SMS notifications (Privacy Shield certified)
• Resend: Email delivery (GDPR compliant)

Each service has its own privacy policy governing their data practices.

13. Data Breach Notification

In case of a data breach affecting your personal data, we will:

• Notify the relevant supervisory authority within 72 hours
• Inform affected users without undue delay if there's high risk
• Take immediate steps to contain and remedy the breach
• Provide clear information about the breach and protective measures

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will:

• Notify users of material changes via email or in-app notification
• Post the updated policy with a new effective date
• Maintain previous versions for reference
• Obtain consent for changes requiring it under applicable law

15. Contact Information