This Privacy Policy explains how Forged Sports, Inc. collects, uses, discloses, and retains information in connection with Forged Sports services, including Forged VMS, hosted account and authentication pages, player profile features, venue operations tools, public booking experiences, APIs, and related software or services (collectively, the "Service").
1. Overview
Forged Sports, Inc. ("Forged Sports," "we," "our," or "us") is responsible for the personal information described in this Privacy Policy when it acts as the controller of that information.
Some parts of the Service are used in connection with a venue, organization, or operator. In those cases, the venue or organization may also have access to certain information or may independently determine how information associated with its operations is handled. Their separate terms, privacy notices, waivers, or house rules may also apply.
We do not sell personal information.
2. Information we collect
We collect information you provide directly, information generated through your use of the Service, information provided by venues or organizations that use the Service, information from customer-enabled integrations, and technical information necessary to operate and secure the Service.
Account and identity information
- name, display name, username, email address, and phone number where provided;
- organization, venue, staff, and role information;
- verification status, account state, and consent records;
- password hashes and verification or recovery artifacts; and
- support or security-related communications tied to your account.
Authentication and security information
- browser session identifiers, browser binding identifiers, CSRF tokens, and related session state;
- IP address, user agent, request metadata, and security logs;
- password reset, verification, and sign-in artifacts; and
- delivery metadata for authentication-related messages.
Venue, booking, player, and operations information
- venue, bay, equipment, schedule, booking, arrival, cancellation, and usage information;
- player profile information, visibility settings, and account-linked venue activity;
- gameplay events, match results, score snapshots, player statistics, and related session data;
- league, waiver, support, and operational workflow records; and
- uploaded or processed media and related metadata.
Integration and connected-system information
- identifiers, settings, status, and event data from customer-enabled simulator, booking, point-of-sale, reservation, or other venue systems;
- records needed to connect, sync, monitor, troubleshoot, and secure those integrations; and
- limited provider metadata needed to support customer-authorized integration workflows.
3. How we use information
We use personal information to:
- create and manage accounts;
- authenticate users through verified email plus password, deliver email verification and password reset flows, and support separately enabled verification workflows when available;
- operate venue command-center, bay, booking, player profile, gameplay, insight, waiver, league, integration, notification, and support features;
- associate accounts with venue or organization operations when applicable;
- connect, monitor, troubleshoot, and secure customer-enabled integrations;
- protect the Service, investigate misuse, enforce our Terms of Use, and detect fraud or abuse;
- maintain logs, audit trails, consent evidence, and operational records;
- troubleshoot, monitor, secure, and improve the Service; and
- comply with legal obligations and respond to lawful requests.
4. Legal bases for processing
Depending on your location, our legal bases for processing may include:
- Contract, where processing is necessary to provide the Service you request;
- Consent, where you provide consent for a specific activity;
- Legitimate interests, such as securing, operating, supporting, and improving the Service; and
- Legal obligation, where processing is necessary to comply with applicable law.
7. Data retention
We retain personal information for as long as needed to provide the Service, maintain security and operational records, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the reason it was collected.
For example, we may retain authentication, consent, booking, support, and security records longer than active session data, and we may retain limited records after account deletion when necessary for legal, fraud-prevention, dispute-resolution, or operational purposes.
8. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. These measures include access controls, encryption in transit, credential and token handling safeguards, monitoring, logging, and operational controls associated with account and venue security.
No security program is perfect, and we cannot guarantee absolute security.
9. Your choices and rights
Depending on your location and subject to applicable law, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing.
You may also:
- update certain account information through the Service when those controls are available;
- request account deletion where supported by the product or by contacting support;
- contact a venue or organization directly about information that it controls; and
- contact us with privacy questions or requests using the information below.
We may need to verify your identity before fulfilling a request, and we may deny or limit a request where permitted by law.
10. International transfers
The Service may be hosted or supported from the United States and other countries where our service providers operate. If you access the Service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions that may not provide the same level of legal protection as your home jurisdiction.
11. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate authorization. If you believe a child has provided personal information to us through the Service in a way that is not permitted, contact us so we can investigate and take appropriate action.
12. Changes and contact information
We may update this Privacy Policy from time to time. If we make material changes, we may provide notice by updating the date on this page, sending an email, or displaying notice in the Service.
Questions or requests about this Privacy Policy may be sent to privacy@forgedsports.co. Product support requests may be sent to help@forgedsports.co.