Privacy Policy

ysTALENT (“we”, “us”, “our”) is committed to safeguarding the privacy and personal data of our users—including supporters, fans, football club administrators, coaching staff, pitch-side camera operators, and talent scouts.

This Privacy Policy explains how ysTALENT collects, uses, stores, discloses, and protects personal data when you use our website, mobile applications, broadcast tools, and streaming platform (the “Platform”), as well as your statutory privacy rights under the General Data Protection Regulation (GDPR), UK GDPR, and applicable global privacy laws.

If you have any questions regarding this Privacy Policy or our data handling practices, you may contact our Data Protection Officer (DPO) at onirdevelopment@gmail.com.

We collect personal data directly from you, automatically through your use of the Platform, and occasionally from football clubs when you are registered as a team member or staff.

Under European and UK data protection laws, we only process personal data where we have a valid legal basis:

• Performance of a Contract (Article 6(1)(b) GDPR): To deliver live streaming services, maintain your subscription, authenticate your account, process billing, and operate club workspace tools.
• Legitimate Interests (Article 6(1)(f) GDPR): To maintain Platform security, improve video streaming reliability, diagnose WebRTC connection errors, analyze user engagement in aggregate, and prevent fraud.
• Consent (Article 6(1)(a) GDPR): For optional marketing newsletters, non-essential cookies, or specific broadcast permissions where explicit consent is required.
• Legal Obligation (Article 6(1)(c) GDPR): To comply with financial accounting laws, tax reporting, anti-fraud regulations, and valid law enforcement requests.

ysTALENT uses the collected data strictly for lawful, sports-technology purposes:

• Delivering Ultra-Low Latency Broadcasts: Establishing peer-to-peer and WHEP/WHIP media pipelines between pitch-side cameras and viewing fans.
• Match Intelligence & AI Commentary: Generating automated play-by-play commentary narration, highlights clips, and tactical analytics for clubs and supporters.
• Club Administration & Team Management: Enabling clubs to manage rosters, schedule matches, assign broadcast sources, and download match recordings.
• Subscription & Payment Processing: Managing paid fan tiers (Free, Plus, Pro), processing recurring renewals, and executing club revenue distributions.
• Platform Security & Quality Assurance: Monitoring stream uptime, preventing screen-scraping, securing account access, and protecting platform infrastructure.

Live match broadcasting is the core functionality of ysTALENT. Because match streams capture athletes, coaches, match officials, and pitch-side environments, we uphold stringent safeguarding standards:

Clubs broadcasting on ysTALENT are responsible for ensuring that all participating players, staff, and guardians have been informed of match broadcasts and that appropriate consents or league sanctions have been obtained in accordance with national football association safeguarding guidelines.

If a player, parent, or guardian wishes to request the redaction, takedown, or removal of match footage featuring their likeness on legitimate safeguarding or privacy grounds, they may contact our safeguarding team at support@ystalent.com. We handle all safeguarding requests with utmost priority.

We do not sell, rent, or trade your personal data to third parties. We share data only with verified service providers who assist us in operating ysTALENT under strict data processing agreements:

• Payment Processors: Stripe, Inc. for secure credit/debit card processing and subscription billing.
• Streaming & Media Infrastructure: MediaMTX and cloud-hosted WebRTC edge relays for low-latency video transcoding and distribution.
• Cloud Hosting & Databases: Cloud service providers (e.g. AWS / Google Cloud) for secure database storage, application hosting, and automatic backup retention.
• Email & Communication: Transactional email providers for authentication, password resets, and critical match notifications.
• Legal & Regulatory Authorities: When required by law, subpoena, or to protect the safety of users and athletes.

ysTALENT uses essential cookies and local storage tokens to maintain your login session, remember stream preferences (such as audio volume, mute status, and video quality), and optimize WebRTC media connectivity.

We do not use invasive third-party advertising trackers. For a detailed breakdown of all cookies and local storage mechanisms we use, please visit our dedicated Cookie Policy at /cookies.

ysTALENT stores and processes data primarily within the European Economic Area (EEA) and the United Kingdom. When data is transferred internationally to third-party sub-processors, we ensure that adequate safeguards—such as standard contractual clauses (SCCs) approved by the European Commission—are in place.

We implement industry-standard technical and organizational security measures, including end-to-end HTTPS encryption, TLS-secured WebRTC channels, strict role-based database access controls, salted password hashing, and regular vulnerability monitoring.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Maintained for the duration of your active account plus up to 12 months following account closure to facilitate reactivation or dispute resolution.
• Match Recordings: Stored in the club's video archive according to their subscription plan storage quota and partnership agreement.
• Financial Records: Billing records, invoices, and transaction logs are retained for seven (7) years in compliance with statutory tax and accounting obligations.

Under applicable data protection laws (including GDPR, UK GDPR, and California CCPA/CPRA), you have significant rights regarding your personal information:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure (“Right to Be Forgotten”): You may request the deletion of your personal data when it is no longer needed.
• Right to Restrict Processing: You may request that we temporarily suspend processing your personal data.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Object: You may object to data processing based on legitimate interests at any time.

We may revise this Privacy Policy periodically to reflect enhancements to our streaming platform, new features, or legislative changes. When updates are published, we will update the “Last Updated” date at the top of this page. We encourage you to review this page periodically to stay informed about our data protection commitments.

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact our Data Protection Team at onirdevelopment@gmail.com.

If you reside in the EU/EEA or UK and believe our processing infringes data protection laws, you also have the right to lodge a complaint with your national Data Protection Supervisory Authority (such as the UK Information Commissioner's Office (ICO)).