Privacy Policy

1. Who We Are

GrpStage ("we," "us," "our") operates the GrpStage prediction league platform at grpstage.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. If you have questions, contact us at hello@grpstage.com.

2. Information We Collect

We collect the following information when you use GrpStage:

• ·Account information: Your email address and display name, provided when you create an account.
• ·Prediction data: Your match predictions and scores within leagues you participate in.
• ·Payment information: We do not store card numbers or bank details. Payments are handled entirely by Stripe, Inc. We receive confirmation of payment and a Stripe customer identifier.
• ·Payout information: If you win a prize, you provide payout details (e.g. PayPal email or bank information) to receive your winnings. This information is used solely to process your payout and is not stored after disbursement.
• ·Usage data: Standard server logs including IP address, browser type, and pages visited. Used for security and performance monitoring.

3. How We Use Your Information

• ·To operate the platform — manage your account, leagues, predictions, and payouts
• ·To process payments and disburse winnings
• ·To communicate with you about your account, leagues, or support requests
• ·To detect and prevent fraud or abuse
• ·To comply with legal obligations

We do not sell your personal information. We do not use your data for advertising or share it with third-party marketers.

4. Third-Party Services

We rely on the following third-party services to operate GrpStage:

• ·Supabase: Hosts our database and authentication. Your account data and predictions are stored on Supabase infrastructure. See supabase.com/privacy.
• ·Stripe: Processes all payments. Stripe collects and stores your payment card information under their own privacy policy. See stripe.com/privacy.
• ·Vercel: Hosts the GrpStage web application. Standard access logs may be retained by Vercel. See vercel.com/legal/privacy-policy.

5. Data Retention

We retain your account data for as long as your account is active. Prediction and league data is retained for the duration of the tournament and for up to 12 months afterward for record-keeping. If you request account deletion, we will remove your personal data within 30 days, subject to any legal obligations to retain records.

6. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed authentication tokens, and role-based access controls on our database. We never store payment card details on our servers. No system is completely secure; use GrpStage at your own risk and contact us immediately if you suspect unauthorized access to your account.

7. Cookies & Sessions

We use session cookies to keep you logged in. These are strictly necessary for the Service to function and are not used for tracking or advertising. We do not use third-party analytics cookies or tracking pixels.

8. Your Rights

Depending on your location, you may have the right to:

• ·Access the personal data we hold about you
• ·Request correction of inaccurate data
• ·Request deletion of your account and personal data
• ·Object to or restrict how we process your data

To exercise any of these rights, email hello@grpstage.com. We will respond within 30 days.

9. Children's Privacy

GrpStage is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will terminate their account and delete their data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or via a notice in the app. Continued use of GrpStage after changes are posted constitutes your acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, contact us at hello@grpstage.com.