Privacy Policy

1. Who We Are

CaptainXI (captainxi.com) is a cricket tournament management platform that provides live auction software, player registration, and team management tools for local cricket organizers across India. We are operated as an independent platform based in India.

2. Information We Collect

We collect the following types of information:

• Registration data: Name, mobile number, cricket role, T-shirt size and jersey details provided when registering for a tournament.
• Payment data: Registration fees processed via Razorpay. We do not store card numbers or banking credentials — Razorpay handles all payment processing.
• Photo: Player profile photo uploaded voluntarily during registration, stored securely on Supabase cloud storage.
• Account data: Email address and password for organiser accounts only (players do not create accounts).
• Usage data: Bidding activity, auction interactions, and session data collected during live auctions.
• Device data: Browser type, IP address, and device information collected automatically for security and debugging.

3. How We Use Your Information

We use the information we collect to:

• Register you as a player or captain in a cricket tournament
• Process your registration fee securely through Razorpay
• Allow tournament organisers to manage their auction and player lists
• Send OTP verification codes to your mobile number for secure login
• Share the live auction viewer link with registered participants
• Generate player certificates and team summaries after the auction
• Improve our platform based on usage patterns

4. How We Share Your Information

We do not sell your personal data. We share information only in the following cases:

• Tournament Organiser: Your name, mobile, role, and registration details are visible to the organiser who created the tournament you registered for. This is necessary to run the auction.
• Other Participants: Your name, role, and photo are visible to other captains and viewers during the live auction.
• Razorpay: Payment details are processed by Razorpay in accordance with their privacy policy. We receive only a payment ID and status.
• Supabase: Our database and file storage provider. Data is stored securely on their infrastructure.
• MSG91: Your mobile number is shared to deliver OTP messages for login and verification.
• Legal requirements: We may disclose data if required by law or to protect our rights.

5. Data Storage and Security

Your data is stored on Supabase cloud infrastructure with industry-standard encryption. Uploaded photos are stored in secure cloud storage. Payment transactions are handled entirely by Razorpay — we never store card or bank details on our servers.

We use row-level security policies in our database to ensure organisers can only access data belonging to their own tournaments.

6. Data Retention

We retain your registration data for the duration of the tournament and up to 12 months after it ends, to allow certificate generation and dispute resolution. You may request deletion of your data at any time by contacting us.

7. Your Rights

You have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your registration and associated data
• Withdraw consent for data processing where applicable
• Raise a complaint with the relevant data protection authority

To exercise any of these rights, contact us at the details below.

8. Cookies

CaptainXI uses minimal browser storage (localStorage) to maintain your session during a live auction. We do not use third-party advertising cookies or tracking pixels. Supabase may set cookies for authentication purposes.

9. Children's Privacy

CaptainXI is not intended for use by persons under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. Continued use of the platform after changes constitutes acceptance of the updated policy.