Privacy Policy

When your workspace installs or uses Office Rivals, we may collect and store:

• ▸Workspace and team identifiers, company name, and the channel selected for the pool
• ▸Platform user IDs and display names of players in that channel
• ▸Timezone offset and profile title where the platform provides them, so prediction DMs arrive at a sensible hour
• ▸Selected or inferred department
• ▸Match predictions, season picks, points, and prediction counts
• ▸Company and individual leaderboard visibility preferences, used only for cross-company tournament events
• ▸Pass purchases and Stripe transaction references (we never store card details)
• ▸Email addresses submitted through our website
• ▸Basic advertising attribution — the campaign or link an install came from

• ▸We don't read your channel or DM content outside direct interactions with the Office Rivals bot
• ▸We don't store payment card details — all payments are processed by Stripe
• ▸We don't sell, rent, or trade personal data to third parties

We run advertising campaigns and use the Meta Pixel on this website to measure which campaigns lead to installs. This involves cookies and similar technologies set by Meta, and page-view and install-click events sent to Meta. We do not send Meta the contents of your workspace, your predictions, or your colleagues' names. You can limit this through your browser settings or your Meta ad preferences.

• ▸Contract performance — processing needed to run the prediction pool your workspace signed up for (Article 6(1)(b))
• ▸Legitimate interests — improving the service, preventing fraud and abuse, measuring advertising, and displaying aggregated leaderboards (Article 6(1)(f))
• ▸Legal obligation — retaining billing records and responding to lawful requests (Article 6(1)(c))
• ▸Consent — optional features such as appearing on a public individual leaderboard during a cross-company tournament event, withdrawable at any time (Article 6(1)(a))

To onboard players, send prediction DMs, score matches, build leaderboards, activate and manage season passes, provide support, prevent abuse, measure advertising, and meet legal obligations.

League-season pools, such as the Premier League and Champions League, are private to your workspace. Their standings are shown only inside the workspace that installed the app. They are not published on any public page and are not combined with other companies.

Public, cross-company leaderboards run only during tournament events such as the World Cup. During such an event, and only where the company or the player has opted in, public pages may show display name, company name (or a private label if configured), points, prediction counts, and tournament picks. Individual participation is opt-in and can be withdrawn from the bot or by contacting us, after which your entry is removed from public pages.

• ▸Messaging platforms — Slack (Salesforce), and Google Chat (Google) where the app is made available there
• ▸Database and hosting — Supabase, Railway, Vercel
• ▸Payments — Stripe
• ▸Match data — football-data.org for fixtures, scores, and league tables
• ▸Advertising — Meta Platforms, for campaign measurement

Each processes data only as needed to deliver its service, under its own privacy terms.

Your data may be processed in countries outside your own, including the United States and the European Union. Where data leaves the UK or EEA we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or a provider's participation in a recognised transfer framework.

We take reasonable technical and organisational measures, including encryption of platform tokens at rest using AES-256-GCM, database-level row security, HTTPS in transit, and restricted access to production systems. No system is perfectly secure, and we do not claim otherwise.

If a personal data breach is likely to create a risk to your rights and freedoms, we will notify affected workspace administrators as soon as reasonably practicable and, where the law requires it, notify the relevant supervisory authority within 72 hours of becoming aware.

Where Office Rivals is used through Google Chat, our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace API data for advertising.

Gameplay data is retained for the season it belongs to and for up to 90 days after that season's final match, so leaderboards stay readable. Workspace records, pass purchases, and Stripe references may be kept for up to 6 years for accounting, tax, security, and legal purposes. Website email addresses are kept until you unsubscribe or ask us to delete them.

Office Rivals is a workplace tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.

Depending on where you live, you may have the right to:

• ▸Access — get a copy of the data we hold about you
• ▸Rectification — have inaccurate data corrected
• ▸Erasure — have your personal data deleted
• ▸Restriction — limit how we process your data
• ▸Portability — receive your data in a machine-readable format
• ▸Objection — object to processing based on legitimate interests
• ▸Withdraw consent — for anything you opted into

Email hello@officerivals.com to exercise any of these. We respond within 30 days. You can also complain to your local data protection authority — in the UK, the Information Commissioner's Office.

Uninstalling the app removes the bot's access to your workspace. It does not automatically delete historical gameplay or billing records — ask us if you want those gone too.

We may update this policy. For material changes we will notify affected workspaces at least 7 days before they take effect, unless the change is required for legal compliance or security, in which case it may take effect immediately.

The data controller for Office Rivals is Ioan Djambov. For privacy questions or data requests, contact hello@officerivals.com.