Privacy Policy

1. Introduction

This Privacy Policy describes how Tourney ("we," "us," or "our") collects, uses, and shares information when you use our tournament management platform ("Platform"), including the Tourney Portal for event organizers and the event registration sites powered by Tourney. By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name, email address, phone number, and organization details when you create an account
• Organization information: club or organization name, branding assets (logos, colors), contact details, and website URLs
• Event information: event details, descriptions, schedules, pricing, and venue information you create or manage
• Financial information: Stripe Connect onboarding details for receiving payouts, including bank account information (processed and stored by Stripe, not by Tourney)
• Attendee data: registration information collected from participants of your events, which you control as data controller
• Communications: messages, support requests, and other content you send to us

2.2 Information Collected Automatically

• Device and browser information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage data (features used, actions taken, performance metrics)
• Cookies and similar technologies for authentication and site functionality

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features
• Process transactions, payouts, and related financial operations
• Facilitate event registration, ticketing, tournament management, and club memberships on your behalf
• Send transactional communications (confirmations, receipts, reminders, waitlist notifications)
• Provide customer support and respond to your inquiries
• Monitor and analyze usage trends to improve the Platform
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations

4. Data Controller and Processor Roles

When you use the Platform as an event organizer, you are the data controller for the personal information of your event attendees and club members. Tourney acts as a data processor on your behalf, processing attendee data solely to provide the Platform services.

As a data controller, you are responsible for ensuring that your collection and use of attendee data complies with applicable data protection laws, including obtaining any necessary consents.

Tourney is the data controller for information related to your organizer account and your use of the Platform itself.

5. Information Sharing

We do not sell your personal information or the personal information of your event attendees. We may share information in the following circumstances:

• Service providers: we use third-party services to operate the Platform, including Stripe (payment processing and payouts), Clerk (authentication), Supabase (data hosting), Resend (email delivery), Vercel (hosting), and Inngest (background job processing). These providers process data on our behalf under contractual obligations
• Event attendees: certain organizer information (organization name, contact details, event details) is displayed to event attendees on your registration sites
• Legal requirements: when required by law, subpoena, or legal process, or to protect our rights, privacy, safety, or property
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

6. Data Security

We implement reasonable technical and organizational measures to protect your information:

• All data is transmitted over HTTPS with TLS encryption
• Financial data is processed by Stripe (PCI DSS Level 1 compliant) and is never stored on our servers
• Database access is protected by row-level security (RLS) policies ensuring strict tenant isolation
• Authentication is managed by Clerk with industry-standard security practices
• Regular security reviews and monitoring for unauthorized access

7. Cookies and Tracking

We use cookies and similar technologies for essential Platform functionality:

• Authentication cookies: to keep you signed in and maintain your session
• Preference cookies: to remember settings such as theme (light/dark mode)
• Functional cookies: to enable core Platform features

We do not use third-party advertising or behavioral tracking cookies. You can control cookies through your browser settings, but disabling them may impair Platform functionality.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict the processing of your data
• Request a portable copy of your data
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@tourney.dev. We will respond to your request within 30 days.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide the Platform services. After account termination, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes such as financial reporting.

Attendee registration data is retained in accordance with the organizer's account lifecycle and applicable data retention laws.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our service providers operate in various jurisdictions. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

11. Children's Privacy

The Platform is intended for use by event organizers and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and where appropriate, sending you an email notification. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

privacy@tourney.dev