Privacy Policy
PLYAI is a sports league management platform used by handball federations and associations to manage competitions, games, teams, people, live broadcasting and related administration. This policy explains which personal data the PLYAI platform processes, why, and what choices you have. PLYAI is a product of and is operated by SIA "MADA SOLUTIONS" (registration no. 40203587361, Zaļā iela 36 - 19, Dobele, Dobeles nov., LV-3701, Latvia) ("we", "us"). Contact details are at the end of this policy.
1. Data we process
- User accounts - name, email address, password (stored only as a secure hash), language, roles and the federations/organizations the account belongs to.
- Sports data - information about players, officials, referees and other people involved in competitions, such as name, date of birth, nationality, photo, licence details, team memberships, game rosters, game events and statistics, as provided by the federations and clubs.
- Administrative and financial data - invoicing details of organizations and people (legal name, registration number, address, bank account/IBAN) needed for invoices and payments.
- Google account data - if you choose "Sign in with Google" or connect a YouTube channel (see section 3).
- Technical data - log records of actions in the admin panel (audit trail), pages visited while signed in, IP address, browser information and error reports needed to keep the service secure and working.
- Approximate country - derived from your IP address with a database stored on our own servers (no IP address is sent to a third party for this). It is used to show the sign-in page in your language and is recorded with sign-ins to help detect unauthorized access.
2. Why we process it
- to provide the platform: organizing competitions, publishing schedules, results, statistics and live coverage on behalf of the federations;
- to let you sign in securely and to control who can access what;
- to issue invoices and prepare payments;
- to keep the service secure, investigate errors and prevent misuse.
Processing is based on the performance of the service agreed with the federations and their members, the legitimate interests of the federations in organizing their competitions, legal obligations (e.g. accounting), and - where required - your consent. Public competition data (schedules, rosters, results, statistics) is published as part of organizing the sport.
3. Google Sign-In and YouTube
Using Google with PLYAI is optional. We only request Google data when you start one of these actions yourself:
-
Sign in with Google - we receive your Google account ID, email address, name and profile
picture (scopes
openid,email,profile). They are used only to find your existing PLYAI account by its verified email address, sign you in and show the linked account on your profile page. Google Sign-In never creates new accounts. -
Connect a YouTube channel (administrators only) - with your permission
(scope
https://www.googleapis.com/auth/youtube) we read the identity of the chosen channel and its live stream keys, and create scheduled live broadcasts on it when you click "Create live event" for a game. The broadcast title, description and start time come from the game; the resulting video link and the stream key you picked are saved on that game so the live production can use them. We do not read, change or delete your other videos, comments, subscriptions or channel settings.
OAuth access and refresh tokens are stored encrypted and are used only to perform the actions above, on your request. We do not use Google user data for advertising, do not sell it, and do not transfer it to others except as needed to provide these features, for security, or to comply with the law.
PLYAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. YouTube features use the YouTube API Services: by connecting a channel you also agree to the YouTube Terms of Service, and Google's processing is described in the Google Privacy Policy.
You can remove the Google sign-in link or a connected YouTube channel at any time on your PLYAI profile page, which also revokes our access at Google. You can also revoke PLYAI's access in your Google account under Security → Third-party apps with account access. Stored tokens are deleted when the link or channel is removed.
4. Who we share data with
- the federation, association or organization you act for, and - for public competition data - the public;
- service providers that host and support the platform on our behalf (servers, email delivery, error monitoring in the EU), bound by confidentiality and data processing terms;
- Google/YouTube, when you use the features in section 3;
- authorities, where required by law.
5. Retention
Account data is kept while the account is active. Sports records are kept as part of the competition history of the federations. Financial records are kept for the periods required by accounting law. Technical logs and error reports are kept only as long as needed for security and troubleshooting. Google tokens are kept until you remove the link or channel, or revoke access.
6. Security
Access is limited by role, connections are encrypted (HTTPS), passwords are hashed and OAuth tokens are encrypted at rest. No system is perfectly secure, but we work to protect your data and fix issues promptly.
7. Your rights
Under the GDPR you can request access to, correction or deletion of your personal data, restriction of or objection to processing, and data portability, and you can withdraw consent at any time. You may also lodge a complaint with your data protection authority. For data about you in a competition, the federation that runs it is usually the controller - contact them or us and we will help.
8. Cookies
We use only the cookies needed for the platform to work, such as the session cookie that keeps you signed in, security (CSRF) cookies and a cookie that remembers your language. We do not use advertising cookies.
9. Changes and contact
We may update this policy; the effective date above shows the latest version. Questions or requests: [email protected].