Privacy Policy

Introduction

This Privacy Policy explains how Tobeat collects, uses, shares, and protects personal information when you access Arena, create an account, participate in or manage an Arena, make predictions, receive notifications, or use the service.

Information we collect

We collect only the information needed to provide the service and maintain a secure, functional experience.

• Account data: name, email, language, timezone, role, account status, and basic preferences.
• Authentication data: encrypted password, verification codes or tokens, sessions, password recovery, and, if you choose it, information received from providers such as Google or Apple Sign-In.
• Arena data: Arenas created or managed, access requests, approvals, invitations, roles, codes, and participation settings.
• Participation data: predictions, scores, rankings, live activity, progress, and history associated with each Arena.
• Technical data: IP address, browser, device, session identifiers, cookies, consent preferences, security logs, and usage metrics.
• Limited commercial data: Arena plan, subscription status, and transaction references. Full payment details are handled by external payment providers.

How we use information

We use personal information to operate the platform, protect accounts, and provide a recreational sports participation experience.

• Create accounts, authenticate users, maintain sessions, and enable Arena access.
• Record predictions, calculate points, display rankings, and update live standings.
• Prevent abuse, fraud, unauthorized access, abusive automation, and technical problems.
• Send operational notices, verification emails, password recovery, reminders, and notifications related to Arena activity.
• Measure usage, detect errors, improve performance, understand which features are useful, and develop service improvements.
• Comply with legal obligations, resolve disputes, enforce terms, keep consent records, and respond to user requests.

Legal basis

We process data when it is necessary to provide the requested service, comply with legal obligations, protect legitimate interests in security and product improvement, perform a commercial relationship with organizers or companies, or when you have consented to optional features such as non-essential cookies or push notifications.

Who we share information with

We do not share personal information beyond what is needed to operate Arena, provide technical services, comply with the law, or enable the experience inside an Arena.

• Technical providers that help with hosting, database, email, metrics, security, storage, analytics, or infrastructure.
• Authentication providers when you choose to sign in using external services such as Google.
• Payment and billing providers when an owner purchases an Arena plan.
• Arena managers, who may see information needed to manage participants, requests, rankings, and Arena communications.
• Authorities, advisors, or third parties when required for legal obligations, rights protection, security, or abuse prevention.

We do not sell personal information to third parties.

Cookies and similar technologies

We use necessary cookies for sessions, security, and core functionality. If you accept optional cookies, we may use analytics to understand usage and improve the platform. You can find more detail in the Cookie Policy.

Push notifications and communications

If you enable push notifications, we store the technical subscription required to send notices about deadlines, matches, rankings, Arena activity, or organizer communications. You can revoke permissions from your browser or device.

Data retention

We keep data while your account is active, while needed to operate Arenas, comply with legal obligations, resolve issues, prevent abuse, or maintain reasonable security and consent records. When data is no longer needed, we delete, anonymize, or aggregate it in a reasonable way.

Security

We apply technical and organizational measures to protect information, including encrypted passwords, session controls, access validation, security logs, and reasonable permission separation. No system is completely infallible, but we work to reduce risk and respond to incidents.

Your rights

Depending on applicable law, you may have the right to:

• Request access to your personal data.
• Correct incomplete or inaccurate information.
• Request deletion of data when applicable.
• Object to or restrict certain processing.
• Withdraw optional consent, such as non-essential cookies or notifications.

We may need to verify your identity before responding to a request to protect your account and other participants' information.

Minors

The platform is not directed to minors who cannot validly consent to use the service under applicable law. If we detect an account created without proper authorization, we may limit or delete it.

International transfers

Some technical providers may operate from other countries. When this happens, we seek to work with providers that apply appropriate contractual, technical, and organizational measures to protect information.

Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or service changes. The current version is the one published on this page and takes effect when published unless stated otherwise.

Contact

For any question about privacy or personal data processing, write to: