Privacy Policy

1. Data Controller

TalentraX operates as the data controller for personal data processed through this platform. For all data-related inquiries, contact: talentraxapp@gmail.com

2. Data We Collect

Account Information: Email address, account type (Athlete/Club), registration date, IP address at registration.

Profile Information (Athletes): Name, date of birth, height, weight, gender (optional), country, city, sport, position, dominant side, profile photo, biography.

Gender Information (Optional): Gender information is optional and is used only to help clubs find suitable athletes. We do not discriminate based on gender. You may select "Prefer not to say" at any time.

Profile Data (Clubs): Club name, logo, founding year, active branches, location, region, website URL, social media links, biography.

Content Data: Posts, direct messages, community messages, videos, video titles/descriptions.

Payment Data: Subscription status and transaction history (processed through Lemon Squeezy — we do not store credit card numbers).

Technical Data: IP addresses, device/browser information, session tokens, audit logs of platform actions.

Accounts Under 18: Parent/guardian name and email address (collected under COPPA/GDPR child protection regulations).

3. Legal Basis for Processing

• Contract performance: Processing necessary to provide the TalentraX service you signed up for.
• Legitimate interests: Platform security, fraud prevention, content moderation, service improvement.
• Legal obligation: Tax records, compliance with court orders.
• Consent: Marketing communications (optional, withdraw at any time).

4. How We Use Your Data

• Providing and improving the TalentraX platform
• Authenticating you via passwordless magic links
• Displaying your public profile to other users
• Processing subscription payments via Lemon Squeezy
• Sending transactional emails (magic links, renewal reminders, account alerts)
• Enforcing community standards and content moderation
• Maintaining audit logs for security and legal compliance
• Preventing abuse, spam, and unauthorized access

5. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase/PostgreSQL: Database hosting provider
• Cloudflare: R2 storage, Stream (video), Turnstile (CAPTCHA), CDN
• Lemon Squeezy: Payment processing
• SMTP provider: Transactional email delivery
• Law enforcement: Only when legally required

All third-party providers are bound by data processing agreements consistent with GDPR.

6. Data Processing Partners

We use the following third-party services to provide TalentraX:

• Payment Processing: Lemon Squeezy (USA)
• Video Storage & Delivery: Cloudflare (Global CDN)
• Database Services: Supabase (USA)
• Email Delivery: Google SMTP (USA)

These services process your data according to their own privacy policies. Your data may be transferred to and stored in the United States.

7. Data Retention

• Active accounts: Retained while the account is active
• Deleted accounts: Personal data anonymized within 30 days (audit logs may retain for 1 year)
• Violation archives: Content removed for violations is archived for 1 year as evidence
• Magic link tokens: Automatically expire after 15 minutes
• Payment records: Retained for 7 years for tax/legal compliance

8. Your Rights (GDPR/KVKK)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data (via Profile Settings)
• Erasure ("Right to be Forgotten"): Request deletion of your account and data
• Data portability: Receive your data in a machine-readable format
• Restriction: Limit processing of your data in certain circumstances
• Object: Object to processing based on legitimate interests
• Withdraw consent: At any time for consent-based processing

To exercise these rights, email: talentraxapp@gmail.com. We respond within 30 days.

You have the right to lodge a complaint with your local data protection authority (e.g., the Turkish KVKK Board or EU supervisory authority).

9. Cookies and Tracking

TalentraX uses a session cookie solely to keep you logged in. This cookie:

• Is used for authentication purposes only
• Expires automatically after a period of inactivity
• Does not track your browsing behaviour

We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

10. Data Security

We implement industry-standard security measures to protect your personal data, including:

• Encryption of all data in transit and at rest
• Secure, passwordless authentication
• Access controls limiting who can view your data
• Regular security reviews and audit logging
• Rate limiting to protect against unauthorised access attempts

To report a security concern, contact: talentraxapp@gmail.com

11. Children's Privacy

For users under 18, accounts must be created and managed by a parent or legal guardian, who provides explicit consent for data processing on behalf of the minor. Parents may request deletion of their child's data at any time by contacting support.

12. International Data Transfers

Your data may be processed in the United States and European Union by our service providers (Cloudflare, Supabase, Lemon Squeezy). All transfers are covered by appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

13. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via email or platform notification at least 7 days before taking effect. Continued use after changes constitutes acceptance.

14. Contact

For privacy inquiries or to exercise your rights:

Email: talentraxapp@gmail.com — Usually within 2 business days.