Privacy Policy

1. What we collect

We only collect what we need to run the club and its events.

• Account: your full name, email address and a password (stored hashed by our authentication provider; we never see it). If you use Google Sign-In, Google shares your name, email address and profile picture with us.
• Profile photo (optional): a picture you choose to upload.
• Event registration: the run you register for, your bib number, the distance you pick, payment status, payment reference IDs, and your check-in, start and finish times.
• Progress screenshots (optional): images and notes you upload for the team to verify your running stats.
• Comments: anything you post in community comments.
• Technical data: IP address, browser and device details and error logs, collected automatically by our hosting and database providers for security and reliability.

Payments: card, UPI and bank details are entered on Razorpay's checkout and are never collected or stored by us. We only receive an order ID, payment ID and success or failure status.

We do not use analytics, advertising or tracking tools, and we do not collect your phone number, address, date of birth, precise location or health records.

2. Why we use it

• To create and secure your account and sign you in.
• To register you for runs, issue your ticket and bib, run check-in and timing, and publish results.
• To take payments, confirm them, and resolve payment issues or refunds.
• To send transactional emails such as registration confirmations and race-day updates. We do not send marketing emails without your separate opt-in.
• To verify progress submissions and show your stats and streaks.
• To keep the site safe, prevent misuse, and comply with legal obligations.

We process your data on the basis of your consent, which you give when you create an account, register for a run or upload something, and for certain legitimate uses the DPDP Act permits (such as fulfilling a registration you asked for, or complying with the law). You can withdraw consent at any time (see section 7).

3. What is public

Your name and profile photo can be seen by anyone visiting the site. If you check in to a run, your name, photo, distance and finish time can appear on public leaderboards and results. Comments you post are visible to other users. Your email address, payment details and screenshots are not public; they are visible only to you and Verve admins.

4. Who we share it with

We do not sell your data. We use these service providers (data processors) only to run the site:

• Supabase: database, sign-in and file storage (servers in Tokyo, Japan).
• Vercel: website hosting.
• Razorpay: payment processing.
• Resend: sending transactional email.
• Google: optional Google Sign-In.

Some of these providers store or process data outside India. We may also disclose data if the law or a court requires it.

5. Cookies

We use only the cookies needed to keep you signed in. See our Cookie Policy.

6. How long we keep it

We keep account and registration data while your account is active. You can delete your account yourself at any time from the bottom of your Profile page, or by emailing us. Deletion permanently erases your profile, photo, registrations, results, screenshots and comments from our systems. Payment records are held by our payment processor (Razorpay) for as long as Indian law requires, and are not affected by deleting your account here.

7. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you;
• ask us to correct or update inaccurate data;
• ask us to erase your data and delete your account;
• withdraw your consent at any time;
• nominate someone to exercise these rights if you die or become incapacitated;
• raise a grievance with us and, if unresolved, complain to the Data Protection Board of India.

Email bindaladiti123@gmail.com from the address on your account. We will respond within 30 days. Withdrawing consent may mean we can no longer provide your account or registrations.

8. Children

Verve is for people aged 18 and over. We do not knowingly collect personal data of anyone under 18. If you believe a child has signed up, email us and we will delete the account.

9. Security and breaches

Data is encrypted in transit, access to admin tools is restricted, and the database enforces row-level access rules. No system is perfectly secure. If a breach affects your data, we will notify you and the Data Protection Board of India as the law requires.

10. Grievance Officer

Smit Bharat Patil, Grievance Officer, Verve Run Club, Bhubaneswar, Odisha, India.
Email: patilsmit2006@gmail.com

11. Changes

If we change this policy in a material way we will update the date above and, where needed, ask for your consent again.