Privacy Policy

This policy explains what personal information Erepoo collects, how we use it, and the choices you have. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy laws.

1. What we collect

• Account info: your name, email, phone number, and authentication identifiers (managed by Clerk).
• Game info you create or join: title, location, date, price, and roster.
• Payment info: handled entirely by Stripe — we never see your card number. We do receive identifiers for the payment, the amount, and the payout status.
• Identity verification (organisers only): Stripe collects the information needed to comply with anti-money-laundering rules. Erepoo can see the verification status but does not store the underlying documents.
• Usage data: standard server logs, including IP address and browser, kept for security and debugging.

2. How we use it

• To run the platform — host games, take payments, send payouts.
• To send transactional emails (receipts, game confirmations, cancellation notices) via Resend.
• To detect and prevent fraud or abuse.
• To comply with our legal obligations.

3. Who we share it with

We share the minimum data needed with these service providers:

• Stripe — payments and identity verification.
• Clerk — authentication.
• Neon — managed Postgres database (data hosted in the United States, AWS US East, N. Virginia).
• Resend — transactional email delivery.
• Vercel — application hosting and server logs.

We do not sell your personal information. We may disclose it to comply with legal orders or to protect our rights and the safety of others.

4. Where it lives

Some of our service providers (Stripe, Clerk, Vercel, Resend) operate servers outside Canada, including in the United States and the European Union. By using Erepoo you consent to this cross-border processing.

5. How long we keep it

We retain payment and transaction records for 7 years to meet Canadian tax and accounting obligations (CRA). When you close your account, we delete your profile and game data within 30 days, except for records we are legally required to keep.

6. Your rights

Under PIPEDA you have the right to access the personal information we hold about you, ask for corrections, and withdraw consent. To make a request, email support@erepoo.app. We'll respond within 30 days.

You can close your account at any time from your settings page; closing an account deletes your profile and removes your future visibility on the platform, but we may retain transaction records as long as required by law.

7. Security

We use encryption in transit (HTTPS) and rely on industry-standard providers for storage. No system is perfectly secure; report vulnerabilities to support@erepoo.app.

8. Children

Erepoo is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we'll delete it.

9. Changes

We may update this policy. Material changes will be announced in-app or by email. The “Last updated” date at the top reflects the most recent revision.

10. Contact our Privacy Officer

Jenrolaoluwa Saheed Fehintoluwa Lasisi, Privacy Officer — email support@erepoo.app.