Privacy Policy

This Privacy Policy explains how [Your Company Name] (“we”) collects, uses and protects personal information when you use RallyHub (the “Service”). We act as a processor for the member data your Club enters, and as a controller for your account and billing information.

1. Information we collect

• •Account data: name, email, password (hashed), role, and workspace details.
• •Member/player data your Club enters: names, age group, contact and emergency details, ratings, attendance, and (for minors) parent/guardian links and consent.
• •Usage & security data: log-in times, IP address, device/browser info, and audit logs of key actions.
• •Payment data: handled by Razorpay. We store invoice records and payment references, but not full card numbers.

2. How we use it

• •To provide the Service — accounts, training, tournaments, scoring, rankings, payments and notifications.
• •To send transactional emails (sign-up, invitations, invoices, receipts).
• •To secure the platform, prevent abuse, and keep an audit trail.
• •To improve the Service and provide support.

3. Children & parental consent

Clubs commonly manage minors. Clubs are responsible for obtaining appropriate parental/guardian consent before adding a minor’s data. Parent/guardian accounts can be linked so guardians manage their child’s participation, fees and communications.

4. Sharing

We share personal data only with:

• •Razorpay — to process online payments you initiate.
• •Our hosting/infrastructure provider — to run the Service securely.
• •Email delivery provider — to send transactional messages.
• •Authorities — where required by law.

We do not sell personal data. Data is never shared between different tenants (clubs).

5. Data isolation & security

Every tenant’s data is isolated at the database level using row-level security, so one club can never read another club’s data. Passwords are hashed, connections use TLS, and access is controlled by role-based permissions checked on every request.

6. Retention

We keep data for as long as your account is active and as needed to provide the Service or comply with legal obligations. On account closure you may request export or deletion of tenant data, subject to records we must retain (e.g. financial records).

7. Your rights

• •Access, correct or delete your personal data.
• •Object to or restrict certain processing.
• •Request a copy of your data (portability).
• •Withdraw consent where processing is based on consent.

Members should first contact their Club; account holders can contact us directly.

8. Cookies & sessions

We use a secure, http-only session cookie to keep you signed in. We do not use third-party advertising cookies.

9. Contact

Privacy questions or requests: [privacy@yourdomain.com], [Your Company Name, Address].