Under review. This is the version 1 draft and it is being reviewed by our legal advisers. It may change before final publication. Items in square brackets will be completed before it is published.
1. Overview
2. Active sub-processors
- Service and purpose
- Database, user authentication, private file storage (photos and logos) and real-time updates of the platform.
- Data processed
- All platform data: user accounts, athletes, evaluations, matches, attendance, photos and security records.
- Location
- São Paulo, Brazil.
- Service and purpose
- Hosting and delivery of the web application.
- Data processed
- Data travelling between your browser and the platform while you use it, and technical server logs (kept 30 days).
- Location
- São Paulo, Brazil.
- Service and purpose
- Sending the service e-mails: invitations, e-mail confirmation and password resets.
- Data processed
- The recipient's name and e-mail address and the content of the message.
- Location
- United States.
- Service and purpose
- Language models, through its API, to answer the questions asked to the AI assistant included in the plans.
- Data processed
- The user's question and the statistics they can already see, with athletes and teams replaced by codes. Never contact details, ID numbers or medical data. OpenAI keeps its API traffic for up to 30 days, only for abuse monitoring, and does not use it to train its models.
- Location
- United States.
- Service and purpose
- Hosting of the website www.proevolutionlab.com and delivery of contact form messages.
- Data processed
- Name, club or institution, e-mail address and message from the contact form.
- Location
- [To be confirmed].
3. Club-managed integrations (AI assistant with the club's own account)
If the club prefers not to use the credits included in its plan, it can connect its own account with an artificial intelligence provider. In that case, the club is the one contracting with the provider and decides to turn it on; ProEvolution Lab only sends the information needed to answer each question, with names replaced by codes.
- Service and purpose
- Language models to answer the questions of the club's authorized users.
- Data processed
- The question and the performance data needed, with names replaced by codes. Never passwords, contact details or medical information.
- Location
- According to the club's contract with the provider (mainly the United States).
- Service and purpose
- Language models to answer the questions of the club's authorized users.
- Data processed
- The question and the performance data needed, with names replaced by codes. Never passwords, contact details or medical information.
- Location
- According to the club's contract with the provider.
With the club's account, that account's own terms apply, which ProEvolution Lab does not control. With OpenAI, data sent through its API is not used to train its models, unless the club has turned on data sharing in its account. With Google Gemini, a paid account excludes that use; on the free tier, however, Google may use the content to improve its products and AI, and people may review it (in the European Economic Area, Switzerland and the United Kingdom the paid-account rules apply). We recommend a paid account.
4. Updates and notices
When we add a new sub-processor, we will update this page and notify club administrators at least 30 days in advance.
Objecting to a new sub-processor
If your club has a reasonable data-protection reason to object, write to us at privacy@proevolutionlab.com within that period and we will look for a solution; if that is not possible, the club may end the affected service.
5. Questions and contact
Write to us at privacy@proevolutionlab.com.