Privacy Policy

We collect the following data, depending on how you use the Service:

• Account data- name, email address, and password (stored encrypted) when you register; or name, email, and profile photo from your Google account if you sign up via "Sign in with Google".
• Event and participant data- when you (as an organizer) create an event, club, team, or participant, we store the data you enter, such as a participant's name, identification number, email, phone number, photo, gender, and a club or team's contact name/email.
• Public registration forms- when someone registers for an event through a public form, we store the registrant's name, contact details (email/phone), roster member data, and the submitter's IP address to help prevent abuse.
• Quick Bracket (no account)- participant names you enter into a bracket, and the bracket creator's IP address.
• Subscription data - when you activate an Event Management license, we store the subscription status and activation identifiers exchanged with Berlanggan (berlanggan.web.id), our payment-processing partner; we do not store your card or payment method details - that is handled entirely by Berlanggan.
• Technical data - IP address, device/browser type, and pages visited, collected automatically for security and analytics purposes (see the Cookies & Analytics section).

• Providing and operating the Service's features (events, brackets, schedules, match results, public standings).
• Authenticating accounts and keeping the Service secure.
• Processing and validating Event Management subscription status.
• Communicating with you about your account, support, or policy changes.
• Preventing abuse, fraud, and violations of the Terms of Service.
• Analyzing site usage in aggregate to improve the Service.

We do not sell your personal data. We share data as necessary with:

• Berlanggan (berlanggan.web.id) - for payment processing and Event Management license activation, we send an account identifier (not your password) to validate subscription status.
• Google- if you choose "Sign in with Google", Google processes your authentication under its own privacy policy.
• Hosting and infrastructure providers - the servers and databases that run the Service.
• Data you choose to make public- participant names, brackets, schedules, and match results you publish on your event's public pages can be viewed by anyone who accesses that link - this is a core function of the Service (public tournament pages), not sharing with an unrelated third party beyond that.

We may disclose data where required by applicable law, or to protect the rights, safety, and property of InTourney or its users.

Data is stored in databases we manage and protected with reasonable security practices (encrypted passwords, role-based access control). However, no system is completely risk -free; we cannot guarantee absolute security of data transmitted over the internet. Data is retained for as long as the related account or event remains active, or as needed to meet legal obligations.

Under the PDP Law, you have the right to:

• Request access to and a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and personal data, except data we are required to retain for legal compliance.
• Withdraw your consent to certain processing, to the extent it is not otherwise legally required.

To exercise these rights, contact us at privacy@intourney.id. If you are a participant whose data was entered by an event organizer (rather than an account holder yourself), please contact the relevant organizer first, or contact us and we will help follow up.

The Service is not intended for children under 13 to hold an account. We recognize that participant data entered by organizers may include data about minors (for example, school-age sports competitors) - in that case, the event organizer is responsible for ensuring valid parental/guardian consent has been obtained before entering that data into the Service, as set out under "Content and Data You Enter" in our Terms of Service.

We use necessary session cookies to keep you signed in. Where enabled, we also use Google Analytics to understand aggregate site usage (for example, the most-visited pages) - we do not use this data to identify you individually. You can configure your browser to reject cookies, though some features of the Service may not work correctly without them.

We may update this Privacy Policy from time to time. Changes take effect as of the updated "Effective date" above. We encourage you to review this page periodically.

Privacy-related questions or requests can be sent to privacy@intourney.id. See also Contact Us for other channels.