Privacy Policy

Draft. This document has not been reviewed by legal counsel and is not yet binding.

This policy explains what personal data Sportra collects, why, and what you can do about it. It covers the Sportra apps, the manager and admin portals, and this website.

Who we are

Sportra operates a sports marketplace for players and venues. If you have a question about this policy or about your data, write to hello@sportra.co.

What we collect

Account details. Your name, email address, phone number, password (stored only as a hash), and your profile photo if you upload one.

Activity. The venues, courts and matches you book or join, the teams you belong to, invitations you send or receive, and the messages you send us through a support or contact form.

Payment records. Amounts, currency, status and timestamps for every booking, wallet transaction and payout. Card details are entered directly with our payment processor and never reach Sportra’s servers.

Venue and business details. For venue partners: the organisation name, city, facilities, tax identifiers and payout account required to operate on the platform.

Technical data. IP address, device type, app version, and approximate location derived from your IP address. We use approximate location to show nearby venues and to apply the right currency and tax rules.

Files you upload. Support ticket attachments and images you add to a profile, team or venue.

Why we use it

To create and secure your account, and to keep you signed in.
To take bookings, run matches, process payments and issue payouts.
To send transactional messages such as confirmations, invitations and password resets.
To answer support requests and partner enquiries.
To detect and prevent fraud, abuse and spam, including rate limiting.
To understand how the product is used so we can improve it.

We do not sell personal data. We share it only with the processors we need to run the service:

Stripe: payment processing and payment method storage.
Cloudflare: file storage (R2), and hosting and protection for this website.
Resend: transactional email delivery.
MaxMind: IP-based approximate location.
PostHog: product analytics.
Sentry: error monitoring.

We also share what is necessary with a venue when you book with them: enough to identify you as the booking holder and to contact you about that booking.

We may disclose data where we are legally required to, or to establish or defend legal claims.

International transfers

Some of the processors above operate outside the country you are in. Where data moves across borders, we rely on the safeguards those providers offer under their own data protection terms.

How long we keep it

Account data is kept while your account exists. Payment and booking records are kept for as long as tax, accounting and anti-fraud obligations require, and are then deleted. Support tickets are kept while they are open and for a period afterwards so we can handle follow-ups.

Security

Passwords are hashed. Sessions use signed tokens held in httpOnly cookies, so scripts on a page cannot read them. Connections use HTTPS. Uploaded files are stored in private buckets and served through short-lived links.

No system is perfectly secure, and we do not claim otherwise.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy in a portable format.

You can delete your account from Settings → Account → Delete account, or write to hello@sportra.co and we will act on your request.

Children

Sportra is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.

Changes

If we change this policy we will update the date at the top of this page.