Legal

Privacy Policy

Datenschutzerklärung gemäß DSGVO

Last updated: 22 July 2026 · Piathletics e.U., Austria

1. Who is responsible for your data?

Data Controller

Patrick Nsoesie Enoh
Piathletics e.U.
Linzer Straße 33, Tür 4
4222 Sankt Georgen an der Gusen
Austria

Email: hello@pivolley.com

2. What data we collect and why

Data	Purpose	Legal basis (GDPR Art. 6)
Name, email address, password (hashed)	Create and manage your account	Contract performance (Art. 6(1)(b))
Team and player data you enter	Provide the coaching/scouting features	Contract performance (Art. 6(1)(b))
Billing information (processed by Stripe)	Process subscription payments	Contract performance (Art. 6(1)(b))
Email address (transactional emails)	Send account confirmations, password resets, receipts	Contract performance (Art. 6(1)(b))
Email address (product emails)	Share tips and upgrade offers during your trial period	Legitimate interest (Art. 6(1)(f))

We do not collect advertising data, sell your data to third parties, or use tracking pixels.

3. How long we keep your data

Account data — kept while your account is active. Deleted within 30 days of an account deletion request.
Billing records — kept for 7 years to meet Austrian tax law requirements.
Scout/team data — kept while your account is active and deleted with your account.
Server logs — kept for up to 30 days for security and debugging purposes.

4. Who we share your data with

We use the following third-party processors, each bound by a Data Processing Agreement:

Provider	Purpose	Location
Cloudflare, Inc.	Hosting, CDN, and database storage	USA (EU SCCs apply)
Stripe, Inc.	Payment processing	USA (EU SCCs apply)
Resend, Inc.	Transactional email delivery	USA (EU SCCs apply)

No other parties receive your personal data.

5. Your rights under GDPR

As a person in the EU/EEA, you have the right to:

Access — request a copy of the data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your account and personal data
Portability — receive your data in a machine-readable format
Object — object to processing based on legitimate interest (e.g. product emails)
Restriction — ask us to limit how we process your data

To exercise any of these rights, email us at hello@pivolley.com. We will respond within 30 days.

6. Unsubscribing from emails

Every product email we send contains an unsubscribe link. You can also email hello@pivolley.com to be removed from all non-essential communications.

7. Cookies and local storage

PiVolley does not use advertising or tracking cookies. The app stores your login token locally on your device (browser local storage) so you stay signed in. This data never leaves your device except as part of authenticated API requests to our servers.

8. Data security

All data is transmitted over HTTPS. Passwords are hashed using PBKDF2 with 100,000 iterations and are never stored in plain text. Access to production systems is restricted to authorised personnel only.

9. Children

PiVolley is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has registered, please contact us and we will delete the account promptly.

10. Right to complain

If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the Austrian Data Protection Authority:

Datenschutzbehörde (DSB)
Barichgasse 40–42
1030 Vienna, Austria
www.dsb.gv.at

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email. The current version is always available at pivolley.com/privacy.html.