Privacy Policy

1. Who we are

Gainline is a digital rugby player profile and management platform operated by NectaTechnologists. We provide tools that allow rugby players to create and share professional digital CVs, and allow agents and organisations to manage player books.

If you have any questions about this policy or how we handle your data, please contact us at privacy@gainline.pro.

2. What data we collect

We collect different types of data depending on how you use Gainline:

Account data — when you register, we collect your email address and a password (stored securely and never in plain text).

Player profile data — if you create a player profile, we collect:

• Full name, date of birth, nationality
• Physical attributes — height and weight
• Rugby positions (primary and secondary)
• School or educational institution attended
• Personal biography and playing summary
• Playing history and statistics
• Accolades and achievements

Documents — if you upload documents to your profile (such as passports, national ID cards, medical certificates, or contracts), we store these securely on your behalf.

Media — if you upload photos or videos, these are stored and may be displayed as part of your public CV.

Usage data — we collect information about how you use the platform, including pages visited, features used, and when your profile is viewed or saved by others.

Technical data — we collect your IP address, browser type, and device information for security and platform performance purposes.

3. How we use your data

We use your personal data for the following purposes:

• To provide and operate the Gainline platform
• To create and display your shareable rugby CV
• To allow agents and organisations to view your profile (subject to your visibility settings)
• To send you service-related communications such as account confirmations and security alerts
• To improve the platform and understand how it is used
• To comply with legal obligations

We do not use your data for automated decision-making or profiling in ways that produce legal or similarly significant effects on you.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing necessary to provide the Gainline service you have signed up for
• Legitimate interests — operating and improving the platform, detecting fraud, and ensuring security
• Consent — where you have explicitly agreed to specific processing, such as making your profile publicly visible
• Legal obligation — where we are required to process data to comply with applicable law

5. Profile visibility and sharing

Your player profile visibility is set to Public by default, meaning anyone with your CV link can view your profile information. You can control this through your profile settings.

When you share your CV link — via email, WhatsApp, social media, or any other method — you are choosing to make that information available to the recipient. Gainline is not responsible for how recipients use or share information they have accessed through your public CV link.

Agents and organisations using Gainline may view your profile as part of their player management activities. By creating a public profile, you consent to this visibility.

6. Sensitive data

Some data you may provide — such as medical certificates, nationality information, or physical attributes — may be considered sensitive under applicable data protection law. We collect this data only because you have chosen to include it in your rugby profile, and we treat it with the highest level of care.

By uploading sensitive documents or information, you explicitly consent to us storing and displaying this data as part of your profile, subject to your visibility settings.

7. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Profile view and activity logs are retained for up to 12 months.

8. Data sharing and third parties

We do not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Service providers — we use Supabase for database and authentication services, and Vercel for hosting. These providers process data on our behalf under appropriate data processing agreements.
• Legal requirements — we may disclose your data if required by law, court order, or regulatory authority.
• Business transfers — if Gainline is acquired or merges with another entity, your data may be transferred as part of that transaction. We will notify you in advance.

9. International data transfers

Gainline operates globally and your data may be processed in countries outside your own. Where data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

10. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — the right to request a copy of the data we hold about you
• Rectification — the right to correct inaccurate or incomplete data
• Erasure — the right to request deletion of your personal data
• Restriction — the right to request that we limit how we use your data
• Portability — the right to receive your data in a structured, machine-readable format
• Objection — the right to object to processing based on legitimate interests
• Withdrawal of consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at privacy@gainline.pro. We will respond within 30 days.

11. Cookies

Gainline uses essential cookies to operate the platform — specifically for authentication and session management. We do not use advertising cookies or third-party tracking cookies.

By using Gainline, you consent to the use of these essential cookies. You can disable cookies in your browser settings, but this will prevent you from logging in to the platform.

12. Children and age requirements

Gainline requires users to be at least 16 years of age to create an account. If you are between 13 and 16, you must have verifiable parental or guardian consent before using Gainline.

If we become aware that a user under 13 has created an account without parental consent, we will delete the account and associated data immediately. If you believe a child has registered without consent, please contact us at privacy@gainline.pro.

13. Security

We take the security of your data seriously. We use industry-standard measures including encrypted data transmission (HTTPS), secure authentication via Supabase, row-level security policies on our database, and access controls that limit who can view your data.

No system is completely secure. If you believe your account has been compromised, please contact us immediately at privacy@gainline.pro.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice on the platform. The date at the top of this page indicates when the policy was last updated.

Continued use of Gainline after changes are posted constitutes your acceptance of the updated policy.