1. Data We Collect

We collect information you provide directly: name, email address, date of birth, gender, location, and optional profile photo. We also collect match results, ratings, and gameplay data as part of our core service.

2. How We Use Your Data

Your data is used to: provide and improve our rating service, display leaderboards and player profiles, process payments, send transactional emails, and comply with legal obligations.

3. Data Sharing

We share data with: Clerk (authentication), Stripe (payments), SendGrid (email), Cloudflare (storage), and Google (maps/analytics). Each processor operates under a Data Processing Agreement. We never sell your personal data.

4. Data Retention

Personal data is retained while your account is active. After account deletion, PII is anonymized within 30 days. Match results are preserved with anonymized references. Financial records are retained for 7 years per legal requirements.

5. Your Rights

• Access: Export all your data from Settings
• Deletion: Request account deletion from Settings (30-day grace period)
• Correction: Update your profile information at any time
• Portability: Download your data in JSON format
• Opt-out: Manage cookie preferences and email subscriptions

6. Children's Privacy (COPPA)

Vairified does not knowingly collect data from children under 13. Users must be at least 13 years old to create an account. If we learn that a user is under 13, their account will be deleted immediately.

7. Security

We use industry-standard security measures including encryption in transit (TLS), secure authentication (Clerk), and access controls. All sensitive data is stored in encrypted databases.

8. Contact

For privacy inquiries, contact us at privacy@vairified.com.

9. California Residents (CCPA/CPRA)

California residents have additional rights under the CCPA/CPRA including the right to know what data is collected, the right to delete, and the right to opt-out of data sales. We do not sell personal information.

10. European Residents (GDPR)

European residents have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. Our legal basis for processing is consent and legitimate interest in providing our service.