Privacy Policy

When your workspace installs or uses Office Rivals, we may collect and store:

• ▸Workspace and team identifiers, company name, and the channel selected for each pool
• ▸Platform user IDs and display names of players in the relevant pool channel
• ▸Timezone offset and profile title where the platform provides them, so prediction DMs arrive at a sensible hour
• ▸Selected or inferred department
• ▸Match predictions, season picks, points, and prediction counts
• ▸Optional favorite-team choices, which stay private and do not affect scoring
• ▸For an NFL company leaderboard opt-in: the company display name, country code, consent status, joined week, and company-level aggregate scores
• ▸Leaderboard visibility preferences collected during past tournament events, such as World Cup 2026, and retained with those results
• ▸Pass purchases and Stripe transaction references (we never store card details)
• ▸Email addresses submitted through our website
• ▸Basic advertising attribution: the campaign or link an install came from

• ▸We don't read your channel or DM content outside direct interactions with the Office Rivals bot
• ▸We don't store payment card details. All payments are processed by Stripe
• ▸We don't sell, rent, or trade personal data to third parties

One advertising tool runs on this website: the Meta Pixel, which tells us which advertising campaigns lead to installs. In the EEA, the UK and Switzerland it is set only if you allow itvia the cookie banner. Until you do, no advertising cookie exists. Everywhere else it runs by default and you can switch it off at any time via "Cookie choices" in the footer, which we remember. Declining leaves only the strictly necessary items: your currency, your cookie choice, and, if you followed one of our ads or links, the campaign label that credits the install to it. If you allow it, Meta sets cookies and receives page-view, page-content, install-click and waitlist-signup events (the topic you signed up for, never your email address). We never send Meta the contents of your workspace, your predictions, or your colleagues' names. You can change your mind any time via "Cookie choices" in the footer, your browser settings, or your Meta ad preferences.

Separately, our host Vercel counts page views so we know which pages people read. It sets no cookies, stores nothing on your device and builds no profile. The counts are anonymous and aggregate, so there is nothing to consent to or withdraw.

• ▸Contract performance: processing needed to run the prediction pool your workspace signed up for (Article 6(1)(b))
• ▸Legitimate interests: improving the service, preventing fraud and abuse, measuring advertising, and displaying aggregated leaderboards (Article 6(1)(f))
• ▸Legal obligation: retaining billing records and responding to lawful requests (Article 6(1)(c))
• ▸Consent: optional public leaderboard features, including an administrator choosing to publish their company's NFL aggregate, withdrawable at any time (Article 6(1)(a))

To onboard players, send prediction DMs, score matches, build leaderboards, activate and manage season passes, provide support, prevent abuse, measure advertising, and meet legal obligations.

League-season pools, such as the Premier League and Champions League, are private to your workspace. Their standings are shown only inside the workspace that installed the app. They are not published on any public page and are not combined with other companies.

The NFL company leaderboard is optional and requires a fresh, competition-specific opt-in from the workspace or space administrator. A company is published only after at least five people are in its locked weekly cohort. The public table contains the company display name, country flag, joined week, accuracy, correct picks, opportunities, weeks played, average points and cohort size. It never publishes individual names, picks, messaging-platform identifiers or favorite teams. Opting out hides the company while retaining its private cohort and score history so it can rejoin without rewriting past results.

Public cross-company and individual leaderboards also ran during tournament events such as Office World Cup 2026. Those tables remain in that archive under the consent collected for that event. Historical preferences and archive entries can be removed by contacting us.

• ▸Messaging platforms: Slack (Salesforce), and Google Chat (Google) where the app is made available there
• ▸Database and hosting: Supabase, Railway, Vercel (Vercel also provides the cookieless page-view counts)
• ▸Payments: Stripe
• ▸Sports data: football-data.org for football, and API-Sports for NFL and Formula 1 schedules and results
• ▸Advertising: Meta Platforms, for campaign measurement

Each processes data only as needed to deliver its service, under its own privacy terms.

Your data may be processed in countries outside your own, including the United States and the European Union. Where data leaves the UK or EEA we rely on appropriate safeguards such as standard contractual clauses, adequacy decisions, or a provider's participation in a recognised transfer framework.

We take reasonable technical and organisational measures, including encryption of platform tokens at rest using AES-256-GCM, database-level row security, HTTPS in transit, and restricted access to production systems. No system is perfectly secure, and we do not claim otherwise.

If a personal data breach is likely to create a risk to your rights and freedoms, we will notify affected workspace administrators as soon as reasonably practicable and, where the law requires it, notify the relevant supervisory authority within 72 hours of becoming aware.

Where Office Rivals is used through Google Chat, our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace API data for advertising.

Gameplay data is retained for as long as it is needed to run the product: standings are season-long, past seasons remain part of your workspace's history, and a workspace can carry its record into a following season, so gameplay data is not deleted on a fixed schedule. You can request deletion at any time (see below). Workspace records, pass purchases, and Stripe references may be kept for up to 6 years for accounting, tax, security, and legal purposes. Website email addresses are kept until you unsubscribe or ask us to delete them.

Office Rivals is a workplace tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.

Depending on where you live, you may have the right to:

• ▸Access: get a copy of the data we hold about you
• ▸Rectification: have inaccurate data corrected
• ▸Erasure: have your personal data deleted
• ▸Restriction: limit how we process your data
• ▸Portability: receive your data in a machine-readable format
• ▸Objection: object to processing based on legitimate interests
• ▸Withdraw consent: for anything you opted into

Email hello@officerivals.com to exercise any of these. We respond within 30 days. You can also complain to your local data protection authority. In the UK, the Information Commissioner's Office.

Uninstalling the app removes the bot's access to your workspace. It does not automatically delete historical gameplay or billing records. Ask us if you want those gone too.

We may update this policy. For material changes we will notify affected workspaces at least 7 days before they take effect, unless the change is required for legal compliance or security, in which case it may take effect immediately.

The data controller for Office Rivals is Ioan Djambov. For privacy questions or data requests, contact hello@officerivals.com.