Privacy Policy

1. Who we are

PitLeague is operated by OXI Websites & Marketing Digital, responsible for the processing of your personal data in accordance with this Privacy Policy and applicable data protection laws.

Data controller contact: contato@pitleague.com.br

2. Data we collect

We collect the following personal data:

• Registration data: name, email address, profile picture (when signing up via Google)
• Software usage data: predictions made, scores, group participation history
• Payment data: transaction history, software subscription status. We do not store credit card data — this data is processed exclusively by Asaas (BR) or Stripe (international)
• Technical data: IP address, device type, access logs

3. How we use your data

Your data is used to:

• Create and manage your platform account
• Process software subscription payments
• Calculate scores and maintain rankings
• Send platform notifications (new events, results)
• Improve user experience
• Comply with legal obligations

4. Data sharing

Your data may be shared with:

• Asaas / Stripe: payment processors, for software subscription billing
• Supabase: database and authentication provider
• Group administrators: your name and scores are visible to the administrator of the group you participate in
• Authorities: when required by law or court order

We do not sell your personal data to third parties.

5. Your rights

Under applicable data protection laws, you have the right to:

• Confirm the existence of data processing
• Access your personal data
• Correct incomplete or outdated data
• Request anonymization, blocking, or deletion of unnecessary data
• Request data portability
• Withdraw consent at any time

To exercise your rights, contact us at contato@pitleague.com.br. We will respond within 15 business days.

6. Data retention

We retain your data for as long as necessary to provide the software service and comply with legal obligations. After account closure, your identifiable personal data is anonymized or deleted within 90 days, except when retention is required by law.

7. Security

We adopt technical and organizational measures to protect your data, including:

• SSL/TLS encryption for all communications
• Secure authentication via Supabase Auth
• Payment data processed exclusively by certified partners (PCI DSS)
• Role-based and need-based data access restrictions
• Audit logs for sensitive actions

8. Cookies

We use essential cookies for software functionality, such as login session management. We do not use tracking or advertising cookies.

9. Minors

PitLeague is not intended for users under 18 years of age. We do not intentionally collect data from minors. If we identify that a minor has registered on the platform, the account will be terminated immediately.

10. Contact

To exercise your rights or clarify questions about this policy:

• Email: contato@pitleague.com.br
• Company: OXI Websites & Marketing Digital
• Data Protection Officer (DPO): contato@pitleague.com.br