Data Processing Agreement

1. Roles

You are the controller of participant data you enter or collect through a registration form. Viantech is your processor and handles that data only to provide the Service. Viantech remains controller of its own account, security, and product-operation data, as described in the Privacy Policy.

2. What this covers

• Subject: personal data of people entered in your tournaments, including children.
• Duration: while you keep the data in the Service, and afterward only as the Privacy Policy retention rules and any legal hold require.
• Nature and purpose: hosting, registration, draws, scoring, standings, awards, and the public pages you choose to publish.
• Categories: names, event entries, scores, team or club names, and, where you collect them, email, phone, date of birth, gender, partner contact, and waiver acceptance. Public spectator pages are limited to what you publish. Roster contact details and dates of birth are not placed on those public pages by the Service.

3. Your responsibilities

You will enter and collect participant data only with a lawful basis, including parental or guardian consent where a participant is a child and any club or safeguarding rule that applies. You will not put a child's email, phone number, home address, or date of birth in a public field. You are responsible for the instructions you give us by using the Service, including what you publish.

4. Our responsibilities

When we process participant data on your instructions, we will:

• process it only to provide the Service, unless the law requires something else;
• require confidentiality from people who handle it;
• use security measures appropriate to a cloud service, as described in the Privacy Policy;
• use the subprocessors in section 5, and update the Privacy Policy when that list materially changes;
• assist with access, correction, and deletion requests and with security incidents where feasible;
• delete or anonymize participant personal data when you delete it or close your account, subject to the retention rules in the Privacy Policy and any legal hold;
• make this DPA available so you can show what we have committed to.

5. Subprocessors

Participant data is handled by:

• Supabase — database, authentication, and file storage.
• Vercel — website hosting.

Google may receive data from public pages only when ads are turned on, as described in the Privacy Policy. Stripe processes support payments to Viantech. It does not process your participant roster. These providers may store data outside Canada. Transfer safeguards are described in the Privacy Policy.

6. How this DPA applies

Using the Service to store participant personal data means you agree to this DPA. No separate signature is required. If a club, school, or insurer needs written confirmation, email support@racketlive.com and we will confirm that this page is the agreement in force.

7. Law and contact

This DPA is governed by the laws of the Province of Ontario and the federal laws of Canada applicable there. Processor: Viantech Inc., a federal corporation (number 12417367), registered office 65 Yorkland Boulevard, Unit 605, Brampton, Ontario L6P 4M5, Canada. Questions: support@racketlive.com.