Plain English

Data processing terms

For organizers. One page.

Roles

You are in charge of the players’ details (the controller, or business, or data fiduciary in India). We process them for you (the processor).
We act only on your instructions: run your game and send you the report.

Names of players, mobile numbers only if you choose to ask for them, and, if you switch invitations on, who invited whom and what kind of guest.
Winners’ prize hand-over details, which winners confirm on their own phone.

Names and numbers are sealed (AES-256) in our database and are also encrypted in transit and at rest.
Players never see each other’s data.
Access to your game is limited to you, your co-hosts and your AI assistant, as you choose.

All player data is deleted within 24 hours after the game ends. Backups clear within 7 days.
A game that did not start (nobody paid) is treated the same way: its player data is deleted 23 hours after it was meant to end.
Its people lists, waiting requests and personal links go too. Its settings stay for 30 days so you can reuse them.
Winners’ prize details and the winners record stay 365 days, then are deleted automatically.
At the end of day 365 everything else about the game is deleted.
Only these stay, as tax and accounting need them: payment and invoice records, the organizer’s details on the invoice (name, e-mail, mobile), and who paid.
You can delete a game’s player data any time from your console.

We help you answer a player’s request to see or delete their data. Use your console, or write to us.
If we learn of a breach that affects your game, we tell you without undue delay.

We use the sub-processors on our list. Changes are shown there.
Data may be processed in other countries by these providers, under their own safeguards.