Privacy Policy

1. Who we are

Sportflow ("we", "us") is a cricket club operations platform at https://sportflow.uk. This policy explains what personal data we process when you use the website, dashboard, Help Centre, livestream overlays, and connected messaging or social channels.

Contact: hello@sportflow.uk

2. Data we collect

• Account data — email address, name or display name, authentication identifiers, and profile details you provide.
• Club and membership data — club and team associations, roles (Member, Club Admin, or Owner), and settings configured by your club.
• Product usage data — fixtures, overlay configuration, notification preferences, connector configuration, and similar operational records needed to run the service.
• Technical data — IP address, device/browser information, logs, and diagnostics used for security, reliability, and support.
• Third-party connector data— when a club connects an integration (for example Play-Cricket credentials, WhatsApp group messaging, or a Facebook Page), we store the configuration and tokens required to operate that connection on the club's behalf.

3. How we use data

• Provide, secure, and improve Sportflow for your club.
• Authenticate users and enforce role-based access.
• Sync and display cricket fixture and club data from connected data sources where configured.
• Deliver club-configured notifications (for example WhatsApp group messages or Facebook Page posts) through the Notification Engine.
• Provide livestream overlay URLs and related club branding for OBS/browser sources.
• Respond to support requests and investigate incidents.
• Comply with legal obligations.

We do not sell personal data. We do not use Facebook or WhatsApp data to build advertising profiles for sale to third parties.

4. Facebook Pages

If a club connects Facebook Pages, Sportflow uses Facebook Login (or Facebook Login for Business) so an authorised club administrator can grant permission to manage Pages they already administer.

• We request only the permissions needed to list Pages the user manages and to publish content on the selected Page (and related Page information required for that).
• We store encrypted Page access tokens and related connection metadata (for example Page ID and Page name) so the club can publish fixture, match, and announcement updates according to its notification policies.
• Club administrators can reconnect or disconnect Facebook from Sportflow. Disconnecting removes stored Page tokens from our systems for that connector.
• Content published to Facebook is also subject to Meta's terms and the Page admin's own Facebook settings.

5. WhatsApp and other connectors

Where a club enables WhatsApp (or another communication connector), Sportflow uses that channel only to deliver messages the club has configured (for example match updates, squads, and match updates). Session and group connection details are stored as needed to operate and monitor delivery health.

6. Legal bases (UK GDPR)

Depending on the activity, we process personal data on the basis of: performance of a contract (providing the service you signed up for); legitimate interests (securing and improving the platform, preventing abuse); consent (where required, including certain third-party OAuth connections initiated by a club admin); and legal obligation where applicable.

7. Sharing

We may share data with:

• Infrastructure and service providers that host or operate the platform (for example database, authentication, and logging providers), under contractual safeguards.
• Third-party platforms you or your club connect (Play-Cricket, Meta/Facebook, WhatsApp infrastructure) to the extent needed for that integration.
• Club administrators and other authorised members of your club within Sportflow.
• Authorities when required by law.

8. Retention

We retain account, club, and operational data for as long as needed to provide the service and for reasonable backup, audit, and legal retention periods. Connector tokens and secrets are removed or invalidated when a connector is disconnected or an account is deleted, subject to residual logs needed for security and dispute handling.

9. Security

We use access controls, encryption in transit, and encryption of sensitive connector secrets at rest where implemented. No method of transmission or storage is completely secure; please use strong passwords and keep club admin access limited to trusted people.

10. Your rights

Depending on applicable law (including UK GDPR), you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. To exercise these rights, contact hello@sportflow.uk. Club-controlled data may require coordination with your club administrator.

11. Children

Sportflow is intended for adult club administrators and authorised members. It is not directed at children. Clubs remain responsible for how they handle junior player information in line with their own safeguarding policies.

12. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of Sportflow after an update constitutes acceptance of the revised policy where permitted by law.

13. Contact

Questions about privacy: hello@sportflow.uk. See also our Terms of Service. To remove Facebook Pages connector data, see Facebook data deletion.