Privacy Policy

MatchDesk is a football club content and reporting platform operated by MediaGroup15. For this policy, MatchDesk, we, us, and our mean MediaGroup15 trading through the MatchDesk service.

Contact: support@matchdesk.app. Website: matchdesk.app.

We act as controller for MatchDesk account, billing, support, product security, and platform usage data. Where a club uploads or publishes information about its players, coaches, sponsors, venues, or match reports, the club is normally responsible for making sure it has the right permission or lawful basis to use and publish that information.

• Account details such as name, email address, password login state, role, organisation, and team membership.
• Club setup data such as club name, teams, venues, sponsors, colours, logos, public links, and custom domain settings.
• Match and report data such as fixtures, scores, players, goal scorers, substitutions, manager notes, report drafts, social captions, and published reports.
• Media files such as club crests, sponsor logos, and match images uploaded to MatchDesk.
• Billing data such as plan, payment status, Stripe customer ID, subscription ID, invoice references, and billing history. MatchDesk does not see or store full card numbers.
• Support and communication data such as emails, setup requests, invite emails, and messages you send us.
• Technical data such as IP address, browser/device details, security logs, error logs, authentication events, cookie choices, and local browser storage used by the app.

• To create and manage MatchDesk accounts, clubs, teams, reports, public pages, and subscriptions.
• To generate, edit, publish, unpublish, and share match reports and related social copy.
• To process subscriptions, invoices, receipts, setup fees, top-ups, upgrades, downgrades, and refunds through Stripe.
• To secure the service, prevent abuse, investigate errors, enforce usage limits, and protect tenant data.
• To provide support, onboarding, white-glove setup, domain setup, and important service messages.
• To improve MatchDesk, provided that any optional analytics or marketing tracking is only used where the required consent has been given.

We rely on different lawful bases depending on the activity. Contract is used where processing is needed to provide the MatchDesk service or paid plan. Legitimate interests are used for security, fraud prevention, service improvement, support, and basic business records, where those interests are not overridden by individual rights. Legal obligation is used for tax, accounting, and compliance records. Consent is used for optional cookies, optional marketing, or any other processing where the law requires consent.

MatchDesk uses trusted AI service providers to help turn club-provided match information into report drafts and social copy. We send the information needed to produce the requested draft, such as match facts, selected players, manager notes, prior meeting details, and report instructions. This workflow is for drafting content only. It is not used to make decisions about people with legal or similarly significant effects.

Users must review AI-assisted content before publishing. Do not enter unnecessary sensitive information, private medical details, or information about children unless your club has a clear lawful basis and appropriate safeguards for using it.

MatchDesk is for adult club administrators, coaches, and authorised staff. Reports may include information about youth players where a club chooses to enter or publish it. Clubs are responsible for obtaining any parental, player, league, safeguarding, or media permissions required for youth football content and for avoiding unnecessary personal details.

Youth team features are designed to reduce unnecessary personal data: youth squad setup uses display names only, youth reports hide surnames, positions, cards, individual awards, named injuries, and returning-from-injury mentions, and youth reports can hide the final score from public pages. These safeguards support club decisions but do not replace the club's own safeguarding, consent, and media policies.

We use trusted suppliers to run the service. These include Supabase for authentication, database, and storage; Vercel for hosting and deployment; Stripe for checkout, subscriptions, invoices, and payment security; Resend for service emails; and trusted AI service providers for report generation. We may also share data where required by law, to protect the service, or as part of a business transfer involving MatchDesk.

We do not sell personal data. We do not use customer card details because card entry and storage are handled by Stripe.

Some suppliers may process data outside the UK or European Economic Area. Where this happens, we expect appropriate safeguards to be used, such as adequacy regulations, standard contractual clauses, the UK international data transfer addendum, or equivalent lawful transfer mechanisms.

We keep account and club data while the account is active and for as long as needed to provide the service. Billing and tax records may be kept for statutory accounting periods. Security logs, backups, and audit records are kept for limited periods needed for security, recovery, and legal protection. Published reports remain public until the club unpublishes or deletes them, subject to any legal retention need.

Depending on your location and the data involved, you may have rights to access, correct, erase, restrict, object to processing, request portability, and withdraw consent. You can contact us at support@matchdesk.app. You also have the right to complain to the UK Information Commissioner's Office or your local data protection authority.

We may update this policy when the service, suppliers, law, or data practices change. If a change is material, we will take reasonable steps to bring it to users' attention before or when it takes effect.