Privacy Policy

When you create and use an account, we collect:

• Account details - your email, name, a hashed password (we never store your password in plain text) and optionally a phone number, profile photo and postal address (line 1/2, city, state, pincode, country). The address is used only if you take part in a reward, giveaway or shipment.
• Tournament setup - tournaments you create and their configuration (name, sport, logo, purse, rules, scene/display settings).
• Account activity - verification status, last login and basic activity logs needed to operate and secure your account.

To run an auction, an operator adds content about teams, players and sponsors. This can include:

• Teams - team name, short name, logo, colors and captain name, captain email and captain phone (optional).
• Players - name, optional photo, optional email and phone, a serial number and any custom fields (category, role, base price, etc.) the operator configures.
• Sponsors - sponsor name, type, tagline and logo.
• Special mentions - the name, role and optional photo of a host, guest or organiser the operator chooses to feature on screen.

This data is supplied and controlled by the operator, who is responsible for it. AuctionXI acts as a processor on the operator’s behalf - we store and display this data so the auction can run, but we do not verify, validate or independently use these contact details, and we do not confirm that the individuals consented. When an operator shares a public viewer / projector / overlay / mobile link, the content they entered (including player names and photos) is displayed publicly to anyone who has that link. If you are a player, captain or sponsor and want your details corrected or removed, contact the organizer who entered them (or email us and we will help route the request). We do not pre-screen or manually review uploaded content; if you spot anything inappropriate, report it to support@auction-xi.com and we may suspend or remove the responsible account (see our Terms).

We collect basic technical data needed to run the Service - for example session cookies to keep you signed in and standard server logs and timestamps for security and reliability. For bot / abuse protection on our forms, your IP address is checked by Cloudflare Turnstile at the moment you submit and is not stored by us. Public viewer pages work without an account.

Viewer count.When you open a tournament's viewer page, we place a small cookie on your browser. It holds a random code so we can count how many different browsers followed the auction, without counting the same one twice. It does not contain your name, phone number or any account details, it is not shared with anyone outside AuctionXI, and we never use it to identify you or follow you around other sites. The organizer only ever sees the total. The cookie expires after 12 months, and you can remove it at any time by clearing your browser's cookies.

• to provide the Service - run auctions, render viewer/projector/overlay screens and show results;
• to authenticate you and keep your account and tournaments secure;
• to send essential account emails (verification, password reset, account notices) and, unless you opt out, occasional product updates;
• to maintain, debug and improve the platform.

We do not sell your personal data or operator-entered data, and we do not share it with third parties for their own advertising. We only share data with the service providers below who help us run AuctionXI or where required by law.

We rely on a small set of trusted providers (sub-processors) to operate the Service:

• Neon - managed database (stores your tournament and account data).
• Vercel - application hosting and delivery.
• Pusher - real-time updates between the operator and viewers during a live auction.
• Resend - sending transactional and product emails.
• Cloudflare Turnstile - bot / abuse protection on sign-up and other forms (checks your IP at submit time).
• India Post - pincode to city / state lookup for Indian addresses (autofill when you type a PIN code).
• GeoNames - postal-code to city / state lookup for non-Indian addresses (worldwide autofill).
• Razorpay - our payment processor for paid plans; it receives your payment details only when you make a payment.

Each provider only receives the data needed to perform its function.

• Account and tournament data is kept while your account is active.
• Inactive draft tournaments are auto-archived after about 30 days; unfinished live auctions auto-end after about 5 days.
• Ended tournaments and their results are kept so they stay viewable; archived tournaments are retained too and still shown on your dashboard (labelled “Archived”).
• Uploaded player photos, team / sponsor logos and special mention photos are removed about 90 days after a tournament ends, or about 60 days after it is archived if it never went live (the tournament’s own logo is kept).
• When you delete your account, your tournaments and their data are deleted; some minimal records may be retained briefly where required for security or legal reasons.

• Access - you can view your account and tournament data in the app.
• Correction - update your account details any time; operators can edit tournament content.
• Deletion - delete your account and its data from account settings.
• Notification choices - you are subscribed to product updates and offers by default. The in-app toggle and the unsubscribe link control your email marketing; for WhatsApp messages you opt out directly in WhatsApp (reply STOP or block the number) - WhatsApp’s own controls govern that, not this toggle. Essential account emails always continue.

To exercise any right, use the in-app controls or email us.

We use industry-standard measures (encrypted connections, hashed passwords, access controls) to protect data. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and respond to issues promptly.

AuctionXI is intended for adults. Because the Service involves payments, anyone under 18 should use it only under the supervision of a parent, guardian or responsible adult who accepts our Terms and is responsible for that use - we do not knowingly create accounts for unsupervised minors. Separately, operators may enter player details that include minors as part of a tournament roster; operators are responsible for obtaining any consent required to do so under applicable law.

We may update this Policy as the product evolves. We will update the “Last updated” date above and highlight significant changes where appropriate.

Questions or requests about your data? Email support@auction-xi.com or visit our Support page. See also our Terms of Service.