Privacy Policy

Last updated: 29 August 2026

This policy explains what personal data Cricket Organizer collects, why, and what you can do about it. It applies wherever you are.

Cricket Organizer is operated by Upwise Labs, a company registered in India. We are the data controller for the account data of organizers who sign up with us. Where an organizer uses the platform to collect data about their own players, that organizer is the controller of that data and we act as their processor.

Information We Collect

Personal Information

  • Name, email address, and phone number
  • Tournament registration details
  • Payment information (processed via Razorpay)
  • Profile photos and player registration responses

Technical Information

  • IP address and device information
  • Browser type and operating system
  • Usage data and analytics
  • Cookies and tracking technologies

How We Use Your Information

  • Facilitate tournament registrations and auctions
  • Process plan payments through Razorpay
  • Send service updates and notifications
  • Improve platform features and performance

Data Security

We use technical and access controls to protect your data:

  • HTTPS protects data sent between your browser and the service
  • Razorpay processes plan payments; we do not store full card details
  • Authentication and organizer permissions restrict account access
  • Database access policies separate organizer and public data

Data Sharing

We do not sell your personal information. We may share data only in these cases:

  • With tournament organizers (name and contact for tournaments you join)
  • With service providers such as Razorpay and email providers
  • When required by law or to protect rights and safety

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request deletion of your data (subject to legal obligations)
  • Opt out of marketing communications

To exercise your rights, contact us at contact@upwiselabs.com

Cookies

We use cookies that are necessary to run the site, and optional analytics cookies that help us see which features get used. In the UK and the EEA, where prior consent is required, analytics stay off until you turn them on. Elsewhere you can switch them off at any time. Full detail, including every cookie we set and who sets it, is in our Cookie Policy.

Data Retention

We keep your data while your account is active and for as long as we need it to provide the service. When you delete your account we delete your personal data, except where we are required to keep records for longer. That is principally financial and tax records, which Indian law requires us to retain for up to eight years from the end of the relevant financial year, and any records we need to keep in order to resolve a dispute or enforce our agreements. Retained records are limited to what the obligation requires.

Children's Privacy

Accounts are for adults: you must be 18 or over to register as an organizer. Junior cricket exists, so an organizer may register players who are minors. Where they do, that organizer is responsible for obtaining any consent their own law requires (for example verifiable parental consent under India’s DPDP Act for those under 18, under the GDPR for those under the age set by their member state, which is between 13 and 16, and under COPPA for those under 13 in the United States). We do not knowingly collect data directly from children. If you believe we hold data about a child that should not be here, contact us and we will remove it.

Where Your Data Is Processed

Cricket Organizer is used by organizers in many countries, and your data is processed outside the country you are in. Our infrastructure and sub-processors are:

  • Supabase: database, authentication and file storage
  • Cloudflare: website and application hosting, and content delivery
  • Razorpay: payment processing for plan purchases
  • Resend: transactional email
  • PostHog and Google Analytics: product analytics, optional and consent-based
  • Sentry: error monitoring

Where we transfer personal data out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses (2021 modules) and the UK Addendum, together with an assessment of the laws of the destination country. You can ask us for a copy of the safeguards that apply to a specific transfer.

Your Rights, By Region

The rights listed above are available to everyone who uses Cricket Organizer, whatever the law where you live. Some regions add specific rights on top:

EEA and United Kingdom (GDPR / UK GDPR)

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right not to be subject to solely automated decisions with legal effect (we make none). Our legal bases are: performance of a contract for running your tournaments and taking payment; consent for optional analytics and marketing email; legitimate interests for security, fraud prevention and keeping the service working; and legal obligation for financial records. Where we rely on consent you can withdraw it at any time, which does not affect processing already carried out. You can also complain to your local supervisory authority, or to the ICO in the UK.

India (DPDP Act, 2023)

You have the right to access a summary of your personal data and our processing, to correction and erasure, to nominate someone to exercise your rights if you die or become incapacitated, and to a grievance redressal process. Write to the address below and we will respond; if you are not satisfied you may escalate to the Data Protection Board of India.

United States

Residents of California and other states with comprehensive privacy laws have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell personal data and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of on that front. We will not discriminate against you for exercising any right.

Australia, New Zealand, South Africa and elsewhere

We handle requests under the Australian Privacy Principles, the New Zealand Privacy Act 2020, South Africa’s POPIA and comparable laws on the same terms. Contact us and tell us which law you are relying on, and we will deal with your request under it.

Security Incidents

If a breach affects your personal data we will notify the relevant regulator within the deadline that applies. That is 72 hours under the GDPR and the UK GDPR, and the period set out in the DPDP Rules in India. We will also tell you directly where the breach is likely to result in a high risk to you.

Updates

We may update this policy periodically. Material changes will be communicated via email. Continued use constitutes acceptance.

Questions?

For privacy-related questions or data requests, contact us at contact@upwiselabs.com

Response time: Within 72 hours