Privacy policy

Who is responsible?

Tournix is the data controller for personal data processed through the organizer dashboard, subscription flow and our website.

For questions about this policy or your privacy rights, contact us at info@tournix.app.

Who does this policy apply to?

This policy applies to:

• Organizers who create an account and manage tournaments in the dashboard
• Visitors of our marketing website
• Visitors of public live tournament pages that organizers choose to publish

What data do we process?

Depending on how you use the service, we may process the following categories of personal data:

• Account data: email address, password (stored in hashed form by our authentication provider), and the name you provide in your profile
• Subscription data: subscription status, trial period, billing period and Stripe customer/subscription identifiers when you subscribe (payment card details are processed directly by Stripe, not by us)
• Coupon redemptions: when you redeem an organizer coupon code, we store that you used the code and when
• Tournament data you enter as an organizer: tournament names, dates, locations, team and player names, referee names, match schedules, scores, uploaded logos and background images, and public visibility settings
• Feedback: messages you send via the in-dashboard feedback form, linked to your account
• Technical data: IP address, browser type, device information and server logs collected by our hosting provider for security and operation
• Cookies: authentication session cookies, a language preference cookie, and similar cookies required to run the service

Public live pages

Organizers can optionally publish a tournament at a public URL (for example https://www.tournix.app/live/…). Data shown there is limited to what the organizer has entered and enabled for publication (such as team names, schedules, standings and results).

Visitors to live pages do not need an account. Some preferences (such as a starred team or referee login on a device) may be stored locally in the visitor’s browser via localStorage; that data is not sent to us unless the visitor performs an action that requires it.

If you are a participant and believe your name or other data should not appear on a live page, contact the tournament organizer first. You may also contact us if you need assistance.

Why do we use your data?

We process personal data for the following purposes and legal bases under the GDPR:

• Providing and operating the service, including account management, tournament tools and public live pages (performance of a contract / steps prior to entering a contract)
• Processing subscriptions, trials and coupon access (performance of a contract)
• Securing the platform, preventing abuse and troubleshooting (legitimate interest)
• Complying with legal obligations, such as tax or accounting rules where applicable (legal obligation)
• Responding to your questions or feedback (legitimate interest / contract)

Processors and sharing

We use trusted service providers who process data on our behalf:

• Supabase — authentication, database, file storage and realtime updates
• Stripe — subscription checkout, billing and customer portal
• Vercel — hosting and delivery of the website
• Voetbal.nl / KNVB logo API — when an organizer enters a club code to fetch a logo, that code is sent to the external logo service

International transfers

Some of our processors may process data outside the European Economic Area (for example in the United States). Where required, appropriate safeguards such as Standard Contractual Clauses are used.

Retention

We keep personal data only as long as necessary for the purposes above:

• Account and tournament data: while your account is active and for a reasonable period afterwards so you can export or recover information, unless you request earlier deletion
• Subscription and billing records: as required by applicable law and for dispute handling
• Server logs: for a limited period for security and diagnostics

Security

We apply appropriate technical and organizational measures, including access controls, encrypted connections (HTTPS) and row-level security in our database. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Your rights

Under the GDPR you may have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability where applicable. You may also withdraw consent where processing is based on consent, and lodge a complaint with your local supervisory authority.

To exercise your rights, email info@tournix.app. We may need to verify your identity before responding.

Children

The organizer dashboard is intended for adults organizing tournaments. Public live pages may display participant names entered by organizers. We do not knowingly offer accounts to children under 16.

Changes

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. Material changes will be communicated where appropriate.