Privacy Policy

• We collect information needed to provide TriviaCommand—like account details, organization/workspace data, and game/session metadata.
• We use trusted processors (like Supabase for authentication/database, Stripe for billing, and Resend for email delivery) to operate the Services.
• TriviaCommand is host-centric. Players typically submit answers offline (paper/verbal). The app generally does not collect individual player answers directly; hosts enter scores/results.
• We do not sell personal information.

We collect information in a few categories:

• Account information: email address, authentication identifiers, and basic profile/workspace settings (e.g., default organization).
• Organization and team information: organization name, member roles/permissions, invitations, and related workspace configuration.
• Content you create or upload: trivia questions, rounds, games, session configuration, and media you upload (images/audio/video).
• Usage and gameplay metadata: events/sessions you host, timing and navigation actions, question performance (e.g., correctness rates), and similar operational metrics.
• Device and log data: IP address, user agent, pages/screens viewed, and diagnostic logs used for security and debugging.
• Payment and subscription information: subscription status and Stripe customer/subscription identifiers. Payment card details are handled by Stripe and are not stored by TriviaCommand.
• Communications: messages you send to support and emails we send to you (e.g., invites, account verification).

Optional features. If you use certain features, additional data may be processed:

• Spotify integration: Spotify authorization tokens and playback control metadata needed to show “Now Playing” and manage playback.
• AI features: prompts and relevant context you provide to AI tools (for example, to generate or refine trivia content). These requests are processed through our AI providers (currently Google Gemini and/or Google Vertex AI). Do not include sensitive personal information in AI prompts.

• Provide and operate the Services: authentication, workspace access, game creation, hosting flows, storage, and syncing.
• Improve and maintain the Services: debugging, performance monitoring, and product analytics (for example, understanding which features are used and how they perform).
• Security and fraud prevention: protect accounts, prevent abuse, and enforce usage limits.
• Billing and subscription management: process payments, manage subscriptions, and communicate about billing-related events.
• Support: respond to questions, troubleshoot issues, and provide customer service.

We share information only as needed to run TriviaCommand:

• Service providers (processors): hosting and database (Supabase), billing (Stripe), email delivery (Resend), and other infrastructure providers used to operate the Services.
• Within your organization: users with appropriate permissions in your workspace can access content and analytics associated with your organization.
• Legal and safety: if required by law, or to protect rights, safety, and the integrity of the Services.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We use cookies and similar technologies to keep you signed in, remember preferences (like theme), and help the Services function reliably. These may include authentication cookies set by our infrastructure providers.

We do not use cookies to sell your data or to serve third-party behavioral advertising on TriviaCommand.

We retain information for as long as necessary to provide the Services and for legitimate business purposes (such as security, compliance, and dispute resolution). Retention depends on the type of data:

• Account and workspace information: retained while your account is active.
• Game/content data: retained until deleted by you or your organization (or as required for backups).
• Logs and diagnostics: retained for a limited period to troubleshoot and secure the Services.

We use administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard practices.

• Access and updates: you can update certain account and workspace information in the app.
• Deletion: you can request deletion of your account or certain content by contacting us.
• Communications: you may opt out of non-essential communications where applicable (transactional/service emails may still be sent).

Depending on where you live, you may have additional rights (for example under GDPR/UK GDPR or certain U.S. state privacy laws). Contact us and we’ll work with you to address applicable requests.

TriviaCommand is intended for hosts and organizations. We do not knowingly collect personal information from children under 13 (or under the age defined by local law). If you believe a child has provided us information, contact us and we will take appropriate steps.

If you access the Services from outside the country where our providers operate, your information may be transferred and processed in other countries. Where required, we take steps to help ensure appropriate safeguards are in place.

We may update this policy from time to time. We will update the “Last updated” date above, and may provide additional notice if changes are material.

See also our Terms of Use.