Privacy Policy

This Privacy Policy explains what data Cmbat Connection collects, how we use it, and the choices you have. It applies to fighters, gyms, coaches, managers, matchmakers, promoters, and event attendees who use the Platform.

• Account data: email, password hash, display name, role, verification status, sign-in provider (e.g. Google).
• Profile data: information you add to your fighter, gym, coach, manager, matchmaker, or promoter profile.
• Messaging data: messages, fight offers, and threads exchanged between users on the Platform.
• Event participation: RSVPs, registrations, ticket purchases (handled by third-party processors), bout assignments, results, votes.
• Media uploads: profile photos, fighter photos, gym logos, event posters, share cards.
• Verification data: claim submissions including optional Instagram handle, gym name, phone last 4 digits, and evidence URLs (visible only to admins for review).
• Device & analytics data: IP, user agent, page views, and interaction events used to operate and improve the Platform.
• Push notification data: when you enable push notifications, we store your browser/device push subscription endpoint and keys so we can deliver alerts (e.g. new messages, offers, event updates). You can revoke this at any time from your browser/device settings or in Notification settings.
• Approximate location data: if you use radius / location-based search or set a city on your profile, we store the location text and a geocoded latitude/longitude (approximate, not precise device GPS) to power distance filters and discovery.
• Payment & subscription data: when you subscribe or buy tickets, payment is processed by Stripe via Lovable Payments. We store non-sensitive metadata (subscription status, plan, billing period, customer ID). Full card details are handled by Stripe and never stored on our servers.

Fighter profiles may include legal name, nickname, date of birth, location, weight, disciplines, records (per discipline, amateur and professional), gym affiliations, coach contacts, social handles, and links to external registries. Public-facing profile fields are visible to other users and may be indexed by search engines when associated with public events.

Messages and fight offers are stored to deliver them, maintain threads, and enforce safety policies. They are visible to participants in a thread and to administrators when required for safety, abuse, or legal reasons.

When you RSVP, register, vote on bouts, or buy tickets, we record that activity and associate it with your account. Promoters may see attendees, registrants, and aggregated voting for their own events. Public bout results contribute to fighter records.

Photos, posters, videos, and other media you upload are stored in our hosted media storage and served via content delivery networks. Public media (e.g. event posters, profile photos on public events) is publicly accessible. You can remove your media at any time from the relevant editor.

We use product analytics to understand how the Platform is used (e.g. page views, feature usage, error rates) so we can improve it. Analytics data is associated with your account or a pseudonymous identifier and is not sold.

We use cookies and browser local storage to keep you signed in, remember preferences, and maintain session state. You can clear these at any time via your browser; doing so will sign you out.

• With other users as required by Platform features (e.g. your public profile, your messages with the recipient, registrations visible to the promoter).
• With service providers who host, process, or deliver the Platform (cloud hosting, email, analytics, geocoding, push delivery, payments). They are bound by confidentiality and data-protection terms.
• For legal reasons when required by law, court order, or to protect the rights, safety, or property of Cmbat Connection or others.

We do not sell your personal information.

Subscriptions and ticket purchases are processed by Stripe via Lovable Payments. Checkout and the self-service billing portal (used to update payment methods, view invoices, and cancel) are hosted by Stripe. Stripe collects and processes your payment information directly under its own privacy policy. We receive only non-sensitive metadata (e.g. subscription status, plan, current billing period, Stripe customer ID) which we store to enable plan-gated features and renewals.

You may request deletion of your account from your account settings or by emailing privacy@cmbatconnection.com. On deletion we remove or anonymize your personal account data. Certain records may persist for the integrity of the combat sports record (e.g. historical bout results, public event participation tied to a fighter profile) or where retention is required by law.

We retain account and profile data for as long as your account is active. Messaging and event data are retained for as long as needed to operate the Platform and comply with legal obligations. Audit logs (e.g. admin actions) are retained as immutable records for security and accountability.

We use industry-standard technical and organizational safeguards including encryption in transit, role-based access controls, and row-level database security. No system is perfectly secure; please use a strong, unique password and report any suspected compromise immediately.

The Platform is not intended for users under 13. If you believe a child has provided us personal information, contact us and we will remove it.

We may update this Policy from time to time. Material changes will be communicated through the Platform or by email.

Privacy questions, requests, or complaints? Contact us at privacy@cmbatconnection.com.