Privacy Policy

1. Introduction

ReadyRaider ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use:

• Our website at readyraider.com
• Our Discord bot
• Our mobile applications (iOS and Android)
• All related services (collectively, the "Services")

By using our Services, you consent to the data practices described in this policy. If you do not agree with our policies, please do not use our Services.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide, including:

• Account Information: Email address, username, password (hashed), profile picture
• Profile Data: Display name, bio, gaming handles, social links
• Tournament Data: Tournament names, descriptions, rules, game selections
• Squad Information: Squad names, member lists, roles, descriptions
• Payment Information: Subscription plan selection and billing interval. Payment details (e.g., credit card numbers) are collected and processed directly by our payment provider (PayPal) and are never stored on our servers
• Communications: Support requests, feedback, messages

2.2 Information from Third Parties

When you authenticate using third-party services, we may receive:

• Discord: User ID, username, avatar, email (if authorized), server membership for authorized servers
• Other OAuth Providers: Basic profile information as authorized

2.3 Automatically Collected Information

We automatically collect certain information when you use our Services:

• Device Information: Device type, operating system, browser type, unique device identifiers
• Usage Data: Pages visited, features used, actions taken, time spent
• Log Data: IP address, access times, referring URLs, error logs
• Location Data: Approximate location based on IP address (not precise GPS)

2.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies. See our Cookie Policy for details.

3. How We Use Your Information

We use collected information to:

3.1 Provide Services

• Create and manage your account
• Enable tournament creation and participation
• Facilitate league and squad management
• Process raid signups and attendance
• Display public profiles and tournament information
• Process payments and manage premium subscriptions

3.2 Communications

• Send service-related announcements
• Notify you of tournament updates, match schedules, and results
• Send transactional emails (welcome emails, event invitations, payment confirmations, billing alerts)
• Respond to support inquiries
• Send promotional content (with your consent)

3.3 Improvement and Analytics

• Analyze usage patterns to improve our Services
• Develop new features
• Monitor and prevent fraud or abuse
• Ensure platform stability and security

3.4 Legal and Safety

• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and the safety of users
• Respond to lawful requests from authorities

4. Information Sharing

We may share your information in the following circumstances:

4.1 Public Information

Certain information is publicly visible by design, including:

• Public profile (username, avatar, bio)
• Tournament participation and results
• Squad membership
• League standings

4.2 Service Providers

We share information with third-party service providers who assist in operating our Services:

• Supabase: Cloud hosting and database (for data storage and authentication)
• PayPal: Payment processing (for premium subscriptions). PayPal receives your payment details, subscription ID, and email to process transactions. See PayPal's Privacy Policy
• Resend: Transactional email delivery (for sending account and event-related emails). Resend receives your email address and email content to deliver messages. See Resend's Privacy Policy
• Analytics services (for usage analysis)
• Customer support tools

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes
• Respond to government requests
• Protect our rights and property
• Prevent illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. You will be notified of any such change.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Payment & Subscription Data

When you subscribe to ReadyRaider Premium, we process payment-related data:

8.1 Data Collected

• Subscription Details: Plan type (monthly/annual), subscription status, billing period dates
• PayPal Identifiers: PayPal subscription ID and customer ID (used to link your PayPal account to your ReadyRaider subscription)
• Transaction Records: Payment status (completed, failed, refunded), amounts, and dates

We do not store credit card numbers, bank account details, or other sensitive payment credentials. All payment processing is handled directly by PayPal.

5.2 How Payment Data is Used

• Activate, renew, and manage your premium subscription
• Detect and resolve payment failures
• Send billing-related transactional emails (payment confirmations, failed payment alerts)
• Provide customer support for billing inquiries

5.3 PayPal Webhooks

PayPal sends automated notifications (webhooks) to our servers when subscription events occur (e.g., activation, cancellation, payment completion). These notifications contain subscription and transaction identifiers and are verified using cryptographic signatures before processing.

6. Transactional Emails

We send transactional emails to keep you informed about your account and activity on the platform. These are service-related messages, not marketing communications.

6.1 Types of Emails

• Welcome Email: Sent when you create an account
• Tournament Invitations: Sent when you are invited to participate in a tournament
• League Invitations: Sent when your organization is invited to join a league
• Subscription Confirmation: Sent when your premium subscription is activated
• Payment Alerts: Sent when a subscription payment fails
• Authentication Emails: Password resets and email confirmations

6.2 Email Service Provider

We use Resend to deliver transactional emails. When we send you an email, your email address and the email content are transmitted to Resend for delivery. Resend processes this data solely for email delivery purposes.

6.3 Opting Out

Transactional emails related to account security and billing cannot be opted out of while your account is active, as they are necessary for service operation. You may close your account to stop receiving all emails.

7. API Access & Data

ReadyRaider provides a public API for developers to integrate with our platform.

7.1 API Key Data

• API Keys: When you generate API keys, we store a hashed version of the key and associated metadata (name, creation date, permissions)
• Usage Logs: We log API request metadata (endpoint, timestamp, response status) for rate limiting and abuse prevention
• Rate Limits: Request counts are tracked per API key to enforce usage limits based on your subscription tier

7.2 Data Accessible via API

The API provides access to public data (tournament brackets, league standings, squad profiles) and private data (organization management) based on API key permissions. API consumers are responsible for handling data in compliance with applicable privacy laws.

8. Discord Bot Data

Our Discord bot collects and processes specific data to provide functionality:

8.1 Data Collected

• Server Information: Server ID, name (for identifying tournaments)
• Channel Information: Channel IDs where bot is used
• User Information: User IDs, usernames (for tournament participants)
• Message Content: Only command messages directed at the bot
• Interaction Data: Button clicks, dropdown selections in bot messages

8.2 How Bot Data is Used

• Process and respond to commands
• Manage tournaments and display brackets
• Track participants and results
• Send notifications and reminders

8.3 Bot Data Retention

Bot data is retained as long as you use our services. When you remove the bot from a server, associated server-specific data may be deleted upon request.

8.4 Discord's Privacy

Our bot operates within Discord's platform. Discord's own privacy policy governs their data collection. We recommend reviewing Discord's Privacy Policy.

9. Mobile Application Data

Our mobile apps may collect additional data specific to mobile devices:

9.1 Data Collected

• Device Identifiers: Advertising ID, device ID (for analytics)
• Push Notification Tokens: For sending notifications
• App Usage: Features used, session duration, crashes
• Device Information: OS version, app version, device model

9.2 Permissions Requested

• Notifications: To send tournament updates and alerts
• Camera (optional): For profile picture uploads
• Storage (optional): For saving and uploading images
• Internet: Required for app functionality

9.3 Analytics SDKs

Our mobile apps may use analytics tools (e.g., Firebase Analytics, Crashlytics) to monitor app performance and usage. These services have their own privacy policies.

10. Data Retention

We retain your data for as long as necessary to:

• Provide our Services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Specific retention periods:

• Account data: Until account deletion request
• Tournament data: Indefinitely (for historical records) unless deletion requested
• Subscription and payment records: For the duration of your subscription plus 7 years (for tax and legal compliance)
• API usage logs: 90 days
• Log data: 90 days
• Analytics data: 26 months

After retention periods expire or upon deletion request, data is permanently deleted or anonymized within 30 days.

11. Data Security

We implement appropriate security measures to protect your data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Access Controls: Limited access to personal data on need-to-know basis
• Password Security: Passwords are hashed using industry-standard algorithms
• Regular Audits: Periodic security assessments and updates
• Incident Response: Procedures for handling data breaches

While we strive to protect your data, no system is completely secure. You are responsible for maintaining the security of your account credentials.

12. Your Rights

Depending on your location, you may have the following rights:

12.1 Access

Request a copy of the personal data we hold about you.

12.2 Correction

Request correction of inaccurate or incomplete data.

12.3 Deletion

Request deletion of your personal data (subject to legal retention requirements).

12.4 Portability

Request your data in a portable, machine-readable format.

12.5 Opt-Out

Opt out of marketing communications at any time via account settings or unsubscribe links.

12.6 Exercising Rights

To exercise these rights, contact us at team@readyraider.com. We will respond within 30 days (or as required by applicable law).

13. Cookies & Tracking

We use cookies and similar technologies for various purposes. For detailed information, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent tool.

14. Children's Privacy

Our Services are not intended for children under 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under this age.

If we discover that we have collected information from a child under the minimum age, we will delete it promptly. If you believe we have collected such information, please contact us immediately.

15. International Data Transfers

Your data may be transferred to and processed in countries other than your own. These countries may have different data protection laws.

When transferring data internationally, we ensure appropriate safeguards through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Contractual protections with service providers

16. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise California rights, contact us at team@readyraider.com with "California Privacy Request" in the subject line.

17. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under the GDPR:

17.1 Legal Basis for Processing

We process your data based on:

• Contract: Necessary to provide our Services
• Consent: Where you have given consent (e.g., marketing)
• Legitimate Interest: For improving services and security
• Legal Obligation: Compliance with laws

17.2 Additional GDPR Rights

• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

17.3 Data Protection Officer

For GDPR-related inquiries, contact our DPO at team@readyraider.com.

18. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be indicated by updating the "Last Updated" date. Material changes will be communicated through:

• Email notification
• Prominent notice on our website
• In-app notification

Continued use after changes constitutes acceptance. We recommend reviewing this policy periodically.

19. Contact Us

For privacy-related questions or to exercise your rights:

We will respond to your inquiry within 30 days (or sooner if required by applicable law).