Fieldio is provided by ScalarRatio LLC, 75 E 3rd St, Sheridan, WY 82801, USA. This policy explains what personal data we process, why, and what your rights are.
1. Roles: controller and processor
Fieldio is the controller of data about coaches and club administrators (e.g. login and billing data). For team and player data that coaches enter on behalf of their club, the club is the controller and Fieldio acts as processor. That relationship is governed by our Data Processing Agreement.
2. What data we process
- Account data: name, email, password (hashed), role.
- Team and player data: name, position, attendance, playing minutes, substitution moments, date of birth if entered.
- Match and training data: date, line-ups, statistics.
- Billing data: company name, invoice info, payment status (card data is handled by Stripe; we do not store it).
- Technical data: IP address, device and browser info, logs.
- Analytics: aggregated usage of our marketing pages.
3. Purposes and legal bases
- Performance of the contract (delivering the Service, billing).
- Legitimate interest (security, abuse prevention, product improvement).
- Consent (analytics and non-essential cookies — see Cookies).
- Legal obligation (e.g. tax retention).
4. Recipients and sub-processors
We only share data with providers that help us deliver the Service:
| Party | Purpose | Region |
|---|---|---|
| Supabase | Authentication, database, file storage | EU |
| Stripe | Payments and subscriptions | EU/US (SCCs) |
| Lovable AI Gateway | AI features (substitution planner, complex map) | EU/US (SCCs) |
| Resend | Transactional email | EU/US (SCCs) |
| Google Analytics | Marketing page usage statistics | EU/US (SCCs) |
5. International transfers
For transfers to the US we rely on the European Commission's Standard Contractual Clauses (SCCs) and additional technical safeguards. Customer data on Supabase is stored in the EU region.
6. Retention
- Active accounts: for as long as the account is active.
- After cancellation: account, team and player data is deleted or anonymised within 90 days, unless a longer retention period is required by law.
- Invoices and accounting records: 7 years.
- Backups: rolling window of up to 30 days.
- Server and access logs: up to 12 months.
7. Your rights
You have the right to access, rectify, delete, restrict, port, and object. You may withdraw consent at any time. We respond within 30 days. Requests concerning youth-player data generally run through the club (controller).
8. Security
We apply encryption in transit, role-based access control (RLS), least-privilege access, MFA for administrative access, and regular backups. Incidents affecting individuals are notified without undue delay, typically within 72 hours.
9. Children
Fieldio is a B2B service for coaches and clubs. It is not directed at children. Youth player data is entered by the coach/club acting as controller.
10. Complaints and supervision
EU users may lodge a complaint with their local data protection authority. US users may contact their State Attorney General.
11. Changes
We may update this policy. Material changes are announced by email or in-product.
12. Contact
Questions or requests? Use our contact form.