Plain English

Data processing terms

For organizers. One page.

Roles

You are in charge of the players’ details (the controller, or business, or data fiduciary in India). We process them for you (the processor).
We act only on your instructions: run your game and send you the report.

Names of players, mobile numbers only if you choose to ask for them, and, if you switch invitations on, who invited whom and what kind of guest.
The final places, as seat numbers without names, and the prize texts you type.

Data is encrypted in transit and at rest. Names and numbers are also sealed (AES-256). From the start of a game, nicknames are also held in plain text for the top-10 list until deleted.
Players never see each other’s data.
Access to your game is limited to you, your co-hosts and your AI assistant, as you choose.

All player data is deleted within 24 hours after the game ends.
A game that did not start (nobody paid) is treated the same way: its player data is deleted 23 hours after it was meant to end.
Its people lists, waiting requests and personal links go too. Its settings stay for 30 days so you can reuse them.
The final places (seat numbers, no names) and the prize texts stay 365 days, then are deleted automatically.
At the end of day 365 everything else about the game is deleted.
We keep billing data for audit and tax reasons.
You can delete a game’s player data any time from your console.

We help you answer a player’s request to see or delete their data. Use your console, or write to us.
If we learn of a breach that affects your game, we tell you without undue delay.

We use the sub-processors on our list. Changes are shown there.
Data may be processed in other countries by these providers, under their own safeguards.