Privacy Policy for Sportobot

1. Introduction

Sportobot ("Company," "we," "us," "our," or "Sportobot") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when using Sportobot:

• Account Registration: Name, email address, phone number, profile picture, date of birth
• Profile Information: Location, organization/team name, role (organizer, player, referee, spectator)
• Event Information: Event details you create or manage, including name, date, location, participant lists, match results
• Communication: Messages, feedback, and support inquiries you send to us
• Payment Information: If applicable, payment details (processed securely through third-party payment processors; we do not store full credit card information)
• User-Generated Content: Photos, videos, statistics, comments, and other content you post

2.2 Information Collected Automatically

When you access Sportobot, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers, mobile network information
• Usage Data: Features accessed, content viewed, search queries, time and duration of activities, interactions with other users
• Location Information: Precise location data (with your permission) to show nearby events; general location based on IP address
• Log Data: IP address, access times, browser type and version, pages visited, referring URLs
• Cookies and Tracking Technologies: We use cookies, local storage, and similar technologies to enhance your experience and analyze usage patterns

2.3 Information from Third Parties

We may receive information from:

• Social Media Integration: If you link your social media accounts (name, email, profile picture)
• Third-Party Services: Analytics providers, payment processors, hosting providers
• Other Users: When they tag you in photos, mention you in events, or share content with you

3. Legal Basis for Processing (GDPR Compliance)

Where applicable, we process your personal data based on:

• Consent: You have given explicit consent (e.g., marketing communications)
• Contract: Processing is necessary to provide the Service you requested
• Legal Obligation: We are required by law to process your data
• Legitimate Interests: We have a legitimate business interest that doesn't override your rights (e.g., fraud prevention, security)
• Vital Interests: Your data is necessary to protect your life or health

4. How We Use Your Information

We use collected information for:

• Service Provision: Creating and managing your account, delivering features, facilitating event management and communication
• Personalization: Customizing content, recommendations, and experiences
• Communication: Sending transactional emails (confirmations, notifications), responding to inquiries, providing customer support
• Analytics: Understanding usage patterns, improving our Service, conducting research
• Marketing: Sending promotional content (with your consent), newsletters, announcements about new features
• Safety and Security: Preventing fraud, abuse, and unauthorized access; enforcing our Terms of Use
• Legal Compliance: Responding to legal requests, protecting our legal rights, complying with applicable laws
• Aggregate Analysis: Creating anonymized, aggregated data for statistical purposes

5. How We Share Your Information

5.1 Information Shared With Other Users

• Event Details: Participants in events you create or join can see event information, participant lists, match results, and your profile information
• Profile Information: Other users can see your name, profile picture, organization/team, location, and activity history (unless you adjust privacy settings)
• Messaging: Communications between users may be stored and visible to relevant parties

5.2 Third-Party Service Providers

We share information with trusted service providers who assist us:

• Cloud Hosting: Amazon Web Services (AWS), Firebase, or similar providers
• Payment Processing: Stripe, GoPay, Apple Pay, Google Pay (for secure transaction handling)
• Analytics: Google Analytics, Mixpanel, or similar services
• Email Services: Supabase, SendGrid, or similar email delivery platforms
• Customer Support: Help desk and ticketing systems

All service providers are bound by confidentiality agreements and are required to use your data only as necessary to provide services to us.

5.3 Legal Requirements

We may disclose your information when required by law or in response to:

• Court orders or subpoenas
• Government or law enforcement requests
• Investigations into potential violations of our Terms of Use
• Protection of our rights, privacy, safety, or property

5.4 Business Transfers

If Sportobot is acquired, merged, or undergoes restructuring, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5.5 With Your Consent

We will share your information with third parties only with your explicit consent for specific purposes.

6. Data Retention

We retain your personal data for as long as necessary to:

• Provide the Service
• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal obligations
• Resolve disputes

Retention Periods:

• Active Accounts: Data retained while your account is active
• Inactive Accounts: We may delete data 12 months after account inactivity, unless legally required to retain it
• Event Data: Historical event information may be retained for reference (with anonymization where possible)
• Backups: Data may be retained in backup systems for up to 90 days after deletion

You can request deletion of your account and associated data at any time (subject to legal retention requirements).

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 GDPR Rights (EU/UK Users)

• Right to Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Opt out of specific processing activities
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

7.2 CCPA Rights (California Users)

• Right to Know: What personal information is collected and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale/sharing of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Appeal: Appeal our decision regarding your request

7.3 Other Jurisdictions

Similar rights apply under other privacy laws (PIPEDA, LGPD, DPDP, etc.).

To Exercise Your Rights: Contact us at info@sportobot.com with your request, including proof of identity. We will respond within 30 days (or as required by law).

8. Security Measures

We implement comprehensive security measures:

• Encryption: Data in transit uses HTTPS/TLS encryption; sensitive data at rest is encrypted
• Authentication: Password protection, optional two-factor authentication (2FA)
• Access Controls: Restricted access to personal data; employees sign confidentiality agreements
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Procedures to detect, investigate, and respond to security breaches

However, no security measure is 100% effective. We cannot guarantee absolute security and are not liable for unauthorized access due to circumstances beyond our reasonable control.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

• Essential Cookies: Required for app functionality (authentication, session management)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Track usage patterns and performance (Google Analytics)
• Marketing Cookies: Used for targeted advertising and campaign measurement

9.2 Your Cookie Choices

• Browser Settings: Most browsers allow you to refuse cookies or alert you when cookies are being sent
• App Settings: You can manage notification and tracking preferences in Sportobot settings
• Opt-Out: Third-party analytics providers offer opt-out options

Note: Disabling essential cookies may prevent the app from functioning properly.

10. Children's Privacy

Sportobot is not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children under 13.

If we become aware that we've collected data from a child under 13, we will promptly delete it and terminate the child's account.

For Ages 13-18 (Minors):

• Parents/guardians have the right to review, delete, or restrict data collection
• We provide age-appropriate privacy controls
• We do not sell or share minor data for marketing purposes (CCPA compliance)

Contact us at info@sportobot.com if you believe a child's data has been collected.

11. Third-Party Links and Services

Sportobot may contain links to third-party websites and services (e.g., social media, external event platforms). We are not responsible for:

• The availability, accuracy, or content of third-party services
• Privacy practices, terms of service, or conduct of third parties
• Any transactions or interactions with third parties

Third-party integrations (Apple Sign-In, Google Sign-In, social media logins) are governed by their respective privacy policies.

12. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including countries that may not have the same data protection laws as your home country.

By using Sportobot, you consent to the transfer of your information to countries outside your country of residence, which may include countries without equivalent privacy protections.

We take steps to ensure appropriate safeguards, including:

• Standard Contractual Clauses (for EU/UK transfers)
• Adequacy decisions where recognized
• Your explicit consent

13. Marketing and Communications

13.1 Email Communications

• Transactional Emails: We send necessary notifications (confirmations, alerts) regardless of preferences
• Promotional Emails: We send marketing content only with your consent (via opt-in)
• Unsubscribe: All marketing emails include an unsubscribe link

13.2 Push Notifications

You can enable/disable push notifications in your app settings.

13.3 SMS (If Applicable)

SMS communications require your explicit consent. You can opt out by replying STOP or through account settings.

14. California Consumer Privacy Act (CCPA) Specifics

If you are a California resident, you have additional rights:

• Right to Know: We disclose the categories and specific personal information we collect, our purposes for collection, and categories of third parties
• Right to Delete: You can request deletion (subject to exceptions)
• Right to Opt-Out: You can opt out of the "sale" or "sharing" of personal information (Sportobot does not currently sell data, but may share with marketing partners)
• Right to Correct: You can request correction of inaccurate information
• Right to Limit Use: You can limit our use of sensitive personal information

Non-Discrimination: We do not discriminate against users who exercise their CCPA rights.

To submit a request, email info@sportobot.com with "CCPA Request" in the subject line.

15. Do Not Track

Some browsers include a "Do Not Track" feature. Currently, there is no industry standard for recognizing DNT signals. Sportobot does not currently respond to DNT requests, but you can manage tracking through browser settings and app preferences.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

Notice of Changes:

• Material changes will be announced via email notification
• The "Last Updated" date at the top will be revised
• Your continued use of Sportobot following publication of updates constitutes acceptance

We encourage you to review this policy regularly.

17. Data Protection Officer and Contact Information

For Privacy Inquiries:

For EU Users (GDPR):

If you have concerns about our privacy practices, you have the right to lodge a complaint with your local data protection authority:

• Czech Republic: Office for Personal Data Protection (https://www.uoou.cz/)
• EU Member States: Your national supervisory authority
• UK: Information Commissioner's Office (ICO) (https://ico.org.uk/)

18. Compliance and Legal Basis

This Privacy Policy complies with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA/CPRA)
• California Online Privacy Protection Act (CalOPPA)
• Children's Online Privacy Protection Act (COPPA)
• PIPEDA (Canada)
• And other applicable data protection laws

19. Entire Agreement

This Privacy Policy, together with our Terms of Use, constitutes the entire agreement regarding your use of Sportobot and supersedes all prior agreements and understandings.