1. Our Commitment to Your Privacy
At PodiumControl ("we", "our", "us"), we build sports event results, scoring, and podium management software. We treat privacy and security as core foundational pillars. This Privacy Policy explains what information we collect when you use our platform, how it is used, and how organizers and participants maintain control over their data.
2. Information We Collect
We collect only the minimum data required to power event registrations, live leaderboards, scoring, and podium generation:
- Organizer Account Information: Email address, encrypted authentication credentials, organization name, and billing details processed securely through Stripe.
- Event & Participant Data: Event names, dates, categories, athlete names, bib numbers, scores, completion statuses, accompanying guests (if enabled), and optional contact info (email/phone) provided during registration.
- Transaction & Billing Data: Payment histories, credit purchase logs, and subscription statuses. Credit card numbers are processed directly by Stripe and are never stored on our servers.
- Technical & Usage Data: Anonymized usage metrics, device information, and essential session cookies to keep you securely signed in and preserve language preferences.
3. How Information is Used
Your data is used exclusively to operate and improve the PodiumControl platform:
Managing athlete rosters, bib assignments, category score calculations, and generating instant live podiums.
Exposing public leaderboards, participant lists, and official event sponsors only as configured by the event organizer.
Processing payment checkouts, account security, transactional notifications, and customer support.
We never sell, rent, or monetize personal information or athlete registration lists to third-party advertisers.
4. Granular Privacy Controls for Organizers
Event organizers retain granular control over what information is made public on the event board:
- Toggle overall result visibility (make results live or keep them internal).
- Show or hide scores in the public participants list.
- Show or hide total participant counts in the public header.
- Control participant deletion requests and accompanying guest settings.
5. Security, Row-Level Security (RLS) & Storage
We enforce strict Row-Level Security (RLS) protocols at the database layer. Organizers can only view and manage events they own or administer. All network traffic is encrypted in transit via SSL/TLS, and authentication passwords are managed through secure cryptographic hashing.
6. Trash Retention & Participant Deletion Requests
30-Day Trash Retention: Deleted events are moved to a secure Trash state for 30 days before permanent deletion, allowing organizers to recover accidentally removed events easily.
Participant Deletion: Participants can request cancellation/deletion of their registration directly through the public event portal. Event organizers review and approve these requests in their dashboard.
7. Third-Party Service Providers
We work with trusted industry-standard infrastructure providers:
- Stripe: Payment processing and subscription billing compliance.
- Supabase: Cloud database, authentication, and secure edge execution.