Privacy Policy | Gameplan

1. Controller and scope

Edisonlab L.L.C-FZ, trading as Gameplan, controls personal data used to operate the Gameplan Service unless a checkout, connected service, or separate notice identifies another controller. This Policy covers our website, athlete profiles, accounts, communities, courses, subscriptions, payments, support, integrations, and AI athlete manager.

2. Data we collect

Account and identity: name, email, authentication identifiers, role, country, account status, and security events. Authentication providers handle passwords and sign-in credentials.
Athlete profile and business: biography, photos, sport, career information, social links, offers, rate cards, preferences, sponsors, contacts, and business history.
Purchases and payouts: product, amount, currency, Stripe customer and transaction identifiers, payment status, refunds, disputes, fees, entitlements, payout records, and billing contact details. Gameplan does not store full card numbers or card security codes.
Content and community: posts, messages, comments, files, course progress, video and playback records, reports, and moderation actions.
Communications and integrations: support requests, inbound and outbound email, Telegram messages and identifiers, connected inbox configuration, public social handles, ManyChat campaign attribution, and integration status.
AI data: prompts, instructions, approved preferences, agent memory, retrieved business context, drafts, outputs, tool actions, and approval or rejection records.
Device and service data: IP address, browser and device information, profile and feature use, referral and campaign tags, logs, errors, and security signals.

3. Sources

We receive data from you; athletes and authorized team members; fans; Stripe and connected payment accounts; authentication providers; email and Telegram integrations; public sources used for athlete or brand research; service providers; and the device or browser used to access Gameplan. If you provide another person's data, you must have authority to do so.

4. Why we use data

We use data to create and secure accounts; display athlete profiles; deliver communities, courses, content, and AI manager features; process and reconcile payments; provide support; communicate about the Service; prevent fraud and abuse; moderate content; measure reliability and product use; improve the Service; keep financial and operational records; and comply with law.

Where data-protection law requires a lawful basis, we rely on performing our contract, legitimate interests in operating and securing the Service, consent for optional analytics or a connected feature where required, and compliance with legal obligations. We assess additional consent or notice requirements for sensitive data and new uses.

5. AI processing

Gameplan uses AI providers to analyze authorized messages and context, create drafts, answer questions, organize memory, research public information, and support athlete business workflows. Inputs may include account, profile, communication, and business context needed for the requested feature. We send providers only the inputs needed for the requested feature and configure available data-use and retention controls for the relevant workflow.

Do not send unnecessary sensitive information through AI features. Important external actions use the approval and authorization controls described in the product.

6. Sharing and processors

We do not sell personal data. We share data only as needed with:

athletes, fans, or authorized team members involved in the profile, offer, community, message, or transaction;
Stripe for checkout, fraud controls, payment processing, connected accounts, refunds, disputes, and payouts;
Supabase and hosting or storage providers for authentication, databases, application hosting, and files;
Resend and email infrastructure for transactional, support, and connected inbox messages;
Mux for secure video ingestion and playback;
Telegram and enabled messaging integrations when a user connects or uses them;
OpenAI, Google, and other configured AI or research providers for the requested agent or analysis feature;
Google Analytics and PostHog only after the visitor's applicable analytics choice permits initialization;
professional advisers, regulators, courts, law enforcement, or transaction counterparties when reasonably necessary or legally required.

7. International transfers

Gameplan and its providers operate in multiple countries, including the United Arab Emirates, United States, and other provider locations. Providers describe their transfer arrangements in their data-protection terms. We take additional steps required by applicable law and can provide information relevant to your data on request.

8. Cookies, local storage, and analytics choices

Essential storage supports authentication, security, checkout continuity, and your privacy preference. Optional analytics help us understand use and diagnose product problems. On a new browser, Google Analytics and PostHog do not initialize until you accept analytics. You can reject them and later reopen "Analytics choices" in the site footer. PostHog may use cookies and local storage after acceptance.

Server security and transaction logs may still be created when optional analytics are rejected because they are needed to operate, protect, and account for the Service.

9. Retention

We keep account and service data while the account or feature is active. We keep transaction, payout, tax, fraud, consent, security, and dispute records for the periods needed to meet legal and operational obligations. Deleted content may remain briefly in backups and may be retained longer when required for safety, disputes, legal holds, or enforcement. Agent memory and connected integration data can be deleted or disconnected through available controls or support, subject to those exceptions.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a portable copy of personal data; object to certain processing; withdraw consent; opt out of marketing; and complain to a data-protection authority. Withdrawing consent does not affect earlier lawful processing. We may verify identity before completing a request and may retain data where an exception applies.

Send requests to support@gameplan.io. You may also cancel subscriptions, disconnect supported integrations, and change analytics choices through the Service.

11. Security

We use access controls, encrypted transport, restricted credentials, signed payment and media callbacks, audit records, and other technical and organizational measures appropriate to the Service. No system is completely secure. Contact us immediately if you believe an account or integration has been compromised.

12. Adults only

The Service is for people aged 18 and over. We do not knowingly create accounts for children. Contact us if you believe a person under 18 has provided personal data so we can investigate and take appropriate action.

13. Changes and contact

We may update this Policy when the product, providers, or legal requirements change. We will update the effective date and provide additional notice for material changes when appropriate.

Edisonlab L.L.C-FZ, trading as Gameplan
Meydan Grandstand, Meydan Road, Nad Al Sheba, 6th floor
Dubai, United Arab Emirates
Email: support@gameplan.io