Privacy Policy

1. Controller and representatives

The controller of your personal data is MERIDEVO PTE. LTD. (UEN 202630503K), 160 Robinson Road #14-04, Singapore 068914. Our data-protection contact is help@rankrise.gg. Because we offer services to individuals in the EU and the UK, our EU representative under Article 27 GDPR and our UK representative under the UK GDPR are being appointed and will be named here.

This notice is provided under the Singapore Personal Data Protection Act 2012 (PDPA), the EU General Data Protection Regulation (GDPR), and the UK GDPR.

2. What we collect

• Account data: name, email, password hash, role, language.
• Profile data (coaches): display name, headline, biography, avatar, expertise.
• Transaction data: bookings, package details, payment status. Card details are handled by Stripe; we do not store full card numbers.
• Usage data: device and interaction data, collected only where you consent to analytics.
• Communications: messages and support requests.

3. Why we use it and our legal basis

• To provide the platform and fulfil bookings — performance of a contract.
• To process payments and prevent fraud — contract and legitimate interests.
• To comply with law, including tax, accounting, and anti-fraud obligations — legal obligation.
• To understand and improve usage via analytics — consent (you may withdraw it at any time via Cookie settings).
• To communicate service messages — contract and legitimate interests.

Under the PDPA we rely on your consent and the legitimate-purposes exceptions as applicable.

4. Who we share it with (processors and sub-processors)

We share data with service providers who process it on our behalf, including: Supabase (database, authentication, hosting), Stripe (payments), Cloudflare (delivery and security), Sentry (error monitoring), PostHog (product analytics), and our email providers. A current list is maintained and available on request at help@rankrise.gg.

5. International transfers

We are based in Singapore, which is not covered by an EU adequacy decision. Where personal data is transferred from the EU/UK to Singapore or to other countries, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum/IDTA) together with a transfer impact assessment. You may request a copy of the safeguards from our data protection contact.

6. Retention

We keep personal data for as long as your account is active and as needed to provide the service, then for the period required to meet legal, tax, accounting, and dispute-resolution obligations, after which it is deleted or anonymised.

7. Your rights

Depending on your location you may have the right to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent. EU/UK residents may lodge a complaint with their supervisory authority (your local Data Protection Authority, or the UK ICO). Singapore residents may contact the Personal Data Protection Commission (PDPC). To exercise any right, contact our data protection contact above.

8. Cookies

We use strictly-necessary cookies to operate the platform and optional analytics cookies only with your consent. See our Cookie Policy and the Cookie settings control in the footer.

9. Changes

We may update this notice. Material changes will be notified through the platform.