Privacy Policy

This Privacy Policy explains how FansRevD ("we," "us," "our") collects, uses, stores, and protects your personal data when you use fansrevd.live (the "Service"). We have written this in plain language as required under India's Digital Personal Data Protection Act, 2023 ("DPDPA") and applicable rules.

1. Who We Are

FansRevD is a fan-made sports match rating platform. For the purposes of the DPDPA, FansRevD acts as a "Data Fiduciary" for personal data collected through the Service.

2. What Data We Collect

| Category | Examples | Source | |---|---|---| | Account data | Name, email address, profile photo | Provided by Google when you sign in via Google OAuth | | Public profile data | Username, avatar, member-since date | Auto-generated or set by you | | Activity data | Ratings, written reviews, timestamps | Created by you when using the Service | | Technical data | IP address, browser type, device information, cookies | Automatically collected when you visit the Service |

We do not collect or store your password, since authentication is handled entirely by Google.

3. Why We Collect It (Purpose and Legal Basis)

We process your personal data for the following purposes, consistent with DPDPA's consent-based framework:

• To create and manage your account — your Google name, email, and avatar are used to authenticate you and personalize your experience.
• To operate core features — your ratings and reviews are stored so they can be displayed to you and other users.
• To protect public identity — your real name and email are kept private; only your chosen username and avatar are shown publicly. See Section 5.
• To improve and secure the Service — technical data helps us detect abuse, prevent fraud, and fix bugs.
• To communicate with you — for account-related notices (e.g., password reset flows are not applicable since we use Google OAuth, but we may email you about account status, policy changes, or responses to support requests).

By signing in and using the Service, you consent to this processing for these specified purposes. You can withdraw consent at any time by deleting your account (Section 8), which will stop further processing of your data except where retention is legally required.

4. What We Never Do

• We do not sell your personal data to third parties.
• We do not show your real name or email to other users under any circumstances. Only your username and avatar are public.
• We do not use your data to facilitate betting or gambling services.

5. Public vs. Private Data

FansRevD is designed so your real identity stays private:

• Private (visible only to you and us): your real name, email address, and any data tied directly to your Google account.
• Public (visible to other users): your chosen username, avatar, member-since date, and your ratings/reviews.

We enforce this separation at the database level through a dedicated public-facing data view that excludes private fields.

6. Cookies

We use cookies and similar technologies for:

• Essential functions — keeping you signed in, remembering your light/dark theme preference.
• Basic analytics — understanding aggregate usage patterns to improve the Service (if and when analytics tools are added, this section will be updated and a cookie consent banner will be shown).

You can control cookies through your browser settings, though disabling essential cookies may affect your ability to use the Service.

7. Data Sharing

We share data only with:

• Service providers who help us operate the Service (e.g., Supabase for database hosting, Google for authentication). These providers are bound by their own data protection obligations and only process data on our instructions.
• Legal authorities, where required by law, court order, or to protect the rights, safety, or property of FansRevD, our users, or the public.

We do not share your personal data with advertisers or data brokers.

8. Your Rights

Under the DPDPA, you have the right to:

• Access a summary of the personal data we hold about you.
• Correct inaccurate or incomplete data (e.g., update your username or avatar anytime in account settings).
• Erase your data by requesting account deletion. Deletion requests are processed as follows: your account is deactivated immediately and hidden from other users; you have 30 days to restore it by signing back in; after 30 days, your account and associated ratings are permanently deleted from our active systems, subject to backup retention as described in Section 9.
• Withdraw consent at any time, with the same effect as deletion.
• Grievance redressal — see Section 11 and our Grievance Redressal page.
• Nominate a representative to exercise these rights on your behalf in the event of your death or incapacity, where applicable under DPDPA.

To exercise any of these rights, contact us at support@fansrevd.live. We will respond within a reasonable time and in any event within the timelines required by applicable law.

9. Data Retention

We retain your personal data for as long as your account is active. After account deletion, we retain data in backups for a limited period (not exceeding what is reasonably necessary for security, fraud prevention, or legal compliance) before permanent erasure. Aggregated or anonymized data that can no longer identify you may be retained indefinitely for analytical purposes.

10. Data Security

We use reasonable technical and organizational measures to protect your data, including row-level security policies on our database restricting access to authorized contexts only, and encrypted connections (HTTPS) for all data in transit. No system is completely secure, and we cannot guarantee absolute security.

11. Grievance Redressal

If you have concerns about how your data is handled, contact us at support@fansrevd.live. We aim to acknowledge complaints within 24 hours and resolve them within 15 days, consistent with applicable Indian regulations. You may also lodge a complaint with the Data Protection Board of India if you believe your rights under the DPDPA have not been adequately addressed.

12. Children's Data

Under India's Digital Personal Data Protection Act, 2023, anyone under 18 is legally a "child," and processing a child's personal data requires verifiable parental consent — a verification process we do not currently support. The Service is therefore restricted to users 18 years of age and older. We do not knowingly collect or process personal data from anyone under 18.

If you are a parent or guardian and believe someone under 18 has created an account, please contact us immediately at support@fansrevd.live and we will delete the account and associated data.

Note: self-declared age at sign-up is a starting safeguard, not a complete verification mechanism. As the platform grows, stronger age-verification measures may be required to fully satisfy DPDPA obligations — this is an area to revisit with a qualified lawyer as the user base scales.

13. International Users

FansRevD is operated from India and primarily intended for users in India, though the Service may be accessible globally. If you access the Service from outside India, your data will be processed in accordance with this Policy and may be transferred to and stored in India or other jurisdictions where our service providers operate.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email where appropriate, along with an updated "Last updated" date.

15. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data, contact us at support@fansrevd.live.

---

This document is a draft template for review and is not a substitute for advice from a qualified lawyer licensed in your jurisdiction. Sections in [brackets] need your input before publishing.