Privacy Policy

Introduction

This Privacy Policy explains how Tobeat collects, uses, shares, and protects personal information when you access the platform, create an account, participate in leagues, make predictions, receive notifications, or use any service feature.

Information we collect

We collect only the information needed to provide the service and maintain a secure, functional experience.

• Account data: name, email, language, timezone, role, account status, and basic preferences.
• Authentication data: encrypted password, verification codes or tokens, sessions, password recovery, and, if you choose it, information received from providers such as Google Sign-In.
• League data: leagues created or managed, access requests, approvals, invitations, roles, league codes, and participation settings.
• Game data: predictions, scores, rankings, live movements, progress, participation history, and activity associated with each league.
• Technical data: IP address, browser, device, session identifiers, cookies, consent preferences, security logs, and usage metrics.
• Limited commercial data: plan, license, payment status, and transaction references when an organization purchases a license. Full payment details are handled by external payment providers.

How we use information

We use personal information to operate the platform, protect accounts, and provide a recreational sports participation experience.

• Create accounts, authenticate users, maintain sessions, and enable league access.
• Record predictions, calculate points, display rankings, and update live standings.
• Prevent abuse, fraud, unauthorized access, abusive automation, and technical problems.
• Send operational notices, verification emails, password recovery, reminders, and notifications related to league activity.
• Measure usage, detect errors, improve performance, understand which features are useful, and develop service improvements.
• Comply with legal obligations, resolve disputes, enforce terms, keep consent records, and respond to user requests.

Legal basis

We process data when it is necessary to provide the requested service, comply with legal obligations, protect legitimate interests in security and product improvement, perform a commercial relationship with organizers or companies, or when you have consented to optional features such as non-essential cookies or push notifications.

Who we share information with

We do not share personal information beyond what is needed to operate the platform, provide technical services, comply with the law, or enable the experience inside a league.

• Technical providers that help with hosting, database, email, metrics, security, storage, analytics, or infrastructure.
• Authentication providers when you choose to sign in using external services such as Google.
• Payment and billing providers when an organization purchases a license or plan.
• League organizers and administrators, who may see information needed to manage participants, requests, rankings, and internal communications.
• Authorities, advisors, or third parties when required for legal obligations, rights protection, security, or abuse prevention.

We do not sell personal information to third parties.

Cookies and similar technologies

We use necessary cookies for sessions, security, and core functionality. If you accept optional cookies, we may use analytics to understand usage and improve the platform. You can find more detail in the Cookie Policy.

Push notifications and communications

If you enable push notifications, we store the technical subscription required to send notices about deadlines, matches, rankings, league activity, or organizer communications. You can revoke permissions from your browser or device.

Data retention

We keep data while your account is active, while needed to operate leagues, comply with legal obligations, resolve issues, prevent abuse, or maintain reasonable security and consent records. When data is no longer needed, we delete, anonymize, or aggregate it in a reasonable way.

Security

We apply technical and organizational measures to protect information, including encrypted passwords, session controls, access validation, security logs, and reasonable permission separation. No system is completely infallible, but we work to reduce risk and respond to incidents.

Your rights

Depending on applicable law, you may have the right to:

• Request access to your personal data.
• Correct incomplete or inaccurate information.
• Request deletion of data when applicable.
• Object to or restrict certain processing.
• Withdraw optional consent, such as non-essential cookies or notifications.

We may need to verify your identity before responding to a request to protect your account and other participants' information.

Minors

The platform is not directed to minors who cannot validly consent to use the service under applicable law. If we detect an account created without proper authorization, we may limit or delete it.

International transfers

Some technical providers may operate from other countries. When this happens, we seek to work with providers that apply appropriate contractual, technical, and organizational measures to protect information.

Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or service changes. The current version is the one published on this page and takes effect when published unless stated otherwise.

Contact

For any question about privacy or personal data processing, write to: