This policy describes how [OPERATOR LEGAL NAME — FILL BEFORE LAUNCH](https://leaguehub.co) collects, uses, discloses, and safeguards your personal information. It is written to comply with Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law. We provide GDPR-equivalent transparency for visitors located in the European Economic Area, the United Kingdom, and Switzerland.
1. Who we are
[OPERATOR LEGAL NAME — FILL BEFORE LAUNCH], based in [PROVINCE — FILL BEFORE LAUNCH],Canada, operates LEAGUE HUB. You can reach our privacy contact at privacy@leaguehub.co. Our registered business address is [STREET ADDRESS, CITY, PROVINCE, POSTAL CODE — FILL BEFORE LAUNCH].
2. What we collect
- Account & OAuth data — when you sign in with Google or Discord we receive your email, display name, avatar URL, and a stable account identifier.
- Profile content — anything you add to your profile (display name, banner, game tags, social links).
- Direct messages & uploads — messages you send, screenshots, clips, team logos, and any other user-generated content.
- Competitive data — match results, MMR/ELO, badges, leaderboards, league memberships, applications.
- Payments — Stripe customer ID, subscription status, expiry. We do not store full card numbers; Stripe handles those directly.
- AI prompts — the text prompt you enter for AI avatar / banner generation, sent to Google Gemini for processing.
- Technical logs — IP address, user-agent, request paths, error traces — used for security and debugging.
3. Why we collect it & legal bases
We process this information to provide the service you requested (contract), to operate the platform safely (legitimate interest), and where you explicitly opt in — e.g. cookie consent, marketing emails — on the basis of consent (PIPEDA meaningful consent; GDPR Art. 6(1)(a)).
4. Who we share with
We use the following service providers ("third-party processors") to operate LEAGUE HUB. Each processes data only on our instructions and is bound by contractual confidentiality.
| Provider | Purpose | Jurisdiction |
|---|---|---|
| Stripe, Inc. | Payment processing | United States |
| Google LLC | OAuth sign-in | United States |
| Discord Inc. | OAuth sign-in + community link | United States |
| Cloudflare, Inc. | Edge network + analytics (RUM) | United States |
| Google Gemini | AI avatar generation | United States |
| MongoDB Atlas | Application database | United States / Canada |
5. Cross-border transfers
Most of our processors are based in the United States. Personal information transferred outside Canada is protected by contractual safeguards (e.g. Stripe DPA, Google Cloud DPA, standard contractual clauses where applicable). PIPEDA requires us to inform you of this transfer; by using LEAGUE HUB you consent to it.
6. Retention
Account data is retained while your account is active. Payment records are retained for the period required by Canadian tax law (currently 6 years). DMs and uploaded content are retained until you delete them or your account is closed, at which point they are removed within 30 days except where retention is required by law or to resolve disputes.
7. Your rights
You have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — update inaccurate information directly in your profile, or contact us.
- Deletion — request that we delete your account and associated personal data, subject to legal-hold exceptions.
- Portability — request your data in a machine-readable format.
- Objection / withdraw consent — opt out of cookies, marketing, and processing based on consent at any time.
To exercise any of these rights, email privacy@leaguehub.co. We respond within 30 days.
8. Children
LEAGUE HUB is not intended for users under 13. We do not knowingly collect information from anyone under 13. If we learn we hold such information, we delete it. Parents or guardians may contact privacy@leaguehub.co.
9. Security & breach notification
We use industry-standard safeguards (TLS in transit, encryption at rest, restricted-access database, audit logging). If we become aware of a privacy breach that creates a real risk of significant harm we will notify affected users and the Office of the Privacy Commissioner of Canada (OPC) without unreasonable delay, as required by PIPEDA's Breach of Security Safeguards Regulations.
10. Marketing & CASL
We send commercial electronic messages only with your express consent under Canada's Anti-Spam Legislation (CASL). Every marketing email includes an unsubscribe link. Notifications related to your account (security, payments, league moderation) are transactional and may be sent without separate consent.
11. Complaints
If you believe we have mishandled your personal information, contact us first at privacy@leaguehub.co. You may also file a complaint with:
- The Office of the Privacy Commissioner of Canada — priv.gc.ca.
- The applicable provincial privacy commissioner (where [PROVINCE — FILL BEFORE LAUNCH] has one).
- If you are in the EU/UK/Switzerland, your local supervisory authority (e.g. CNIL, ICO, FDPIC).
12. Changes to this policy
We may update this policy from time to time. The version number and "Last updated" date at the top reflect the current revision. Material changes will be announced via in-app banner and, where we have your consent, via email.
See also: Cookies & Tracking · Terms of Service.