Privacy Policy

Effective date: 1 January 2026

1. Data Controller and Contact

Tribes Arena Sp. z o.o.
Ul. Czwartaków 158, 04-430 Warsaw, Poland
E-mail: contact@tribesarena.com

This is the single point of contact for all data protection matters.

Tribes Arena Sp. z o.o. has assessed its processing activities and determined that appointment of a Data Protection Officer is not mandatory under Art. 37 GDPR for its current scale and nature of operations. This assessment is reviewed periodically and may change as the scale or nature of processing evolves. Data protection enquiries are handled directly at the contact address above.

2. Scope of This Privacy Policy

This Policy applies to personal data processed in connection with:

  • use of www.TribesArena.com and all subpages;
  • creation and management of listings, profiles, and applications;
  • use of the AI chat assistant;
  • payments and subscriptions;
  • contact forms and email communication;
  • basic web analytics.

The platform is not intended for users under 18. We do not knowingly process data of minors.

The platform provides informational and matching functionality only. It does not provide legal, financial, or investment advice.

3. Categories of Personal Data

Identification data

  • name or pseudonym

Contact data

  • email address

Account and transaction data

  • listing type, subscription status, billing metadata, Stripe customer ID

AI chat interaction data

  • content of queries submitted to and responses generated by the AI chat assistant

User-generated content

  • profiles, listings, applications, and messages submitted through the platform

Communication data

  • emails and contact form messages

Technical data

  • IP address, browser type, device, operating system, usage logs

We do not store payment card data. Payment data is handled exclusively by Stripe, Inc.

4. Purposes and Legal Bases (EU/EEA)

(a) Platform operation and service delivery

Creation of profiles, listings, applications, and account management.
Legal basis: Art. 6(1)(b) GDPR - performance of a contract.

(b) AI chat functionality

Providing responses and maintaining system performance.
Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR - legitimate interest in providing the service.

(c) Communication and support

Handling enquiries and user communication.
Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR.

(d) Payments and subscriptions

Processing transactions and billing.
Legal basis: Art. 6(1)(b) GDPR.

(e) Analytics and platform optimisation

Understanding platform usage to improve functionality.
Legal basis: consent (Art. 6(1)(a)) or legitimate interest (Art. 6(1)(f)) depending on cookie configuration.

(f) Legal obligations and claims

Compliance with applicable law and defence of legal claims.
Legal basis: Art. 6(1)(c) and Art. 6(1)(f) GDPR.

5. AI and Automated Processing

We do not use automated decision-making producing legal or similarly significant effects under Art. 22 GDPR.

AI chat responses are informational only. They may be inaccurate, incomplete, or misleading and do not constitute advice, recommendation, or automated decision-making. You use AI chat outputs entirely at your own risk.

We do not use user-submitted data to train general-purpose AI models. Data processed through the AI chat assistant is used only to provide the service and improve platform functionality.

6. Cookies and Analytics

We use cookies for:

  • technical operation of the platform;
  • traffic measurement via Google Analytics 4.

Essential cookies required for the operation of the platform are used without consent. Analytics cookies are activated only after your consent via the cookie banner displayed on the platform.

We do not use advertising cookies or cookies for behavioural tracking and profiling.

7. Data Recipients and International Transfers

We may share data with the following categories of recipients:

  • Stripe, Inc. (USA) - payment processing and billing. Data transfer secured via Standard Contractual Clauses (SCCs).
  • AI infrastructure providers (including providers based in the United States) - used for chat functionality. Data transfers are secured via Standard Contractual Clauses (SCCs).
  • Google LLC (USA) - analytics (Google Analytics 4). Data transfer secured via SCCs.
  • Hosting providers (EEA) - platform infrastructure within the European Economic Area.

Where required, we apply additional safeguards appropriate to the nature of the data and processing.

We may disclose personal data if required by law, court order, or a competent authority.

We do not sell personal data to any third party.

8. Data Retention

  • Account and transaction data - duration of use plus up to 5 years for legal and tax purposes.
  • AI chat interaction data - up to 24 months.
  • Listings and profiles - until deletion by the user or account termination.
  • Communication data - up to 24 months.
  • Analytics data - per the settings of the applicable tool.

We may delete data earlier if it is no longer necessary for the purposes for which it was collected.

9. Your Rights (EU/EEA)

Under applicable data protection law, you have the right to:

  • access your personal data;
  • correct inaccurate data;
  • request deletion of your data;
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interest;
  • withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at: contact@tribesarena.com

You may also file a complaint with your local supervisory authority. In Poland: Urząd Ochrony Danych Osobowych (UODO), uodo.gov.pl.

10. Users Outside the EU/EEA

USA and Canada

We do not sell personal data. You may contact us to request access to, correction of, or deletion of your personal data.

India

Processing of data of Indian residents is conducted in accordance with the Digital Personal Data Protection Act 2023. You may request access, correction, or deletion by contacting us at contact@tribesarena.com.

11. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.

No system is fully secure. In the event of a personal data breach affecting your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals without undue delay, in accordance with applicable law.

12. User Responsibility

You must not submit to the platform:

  • personal data of third parties without their knowledge and consent;
  • confidential or sensitive business information belonging to others.

You confirm that you have the necessary rights and permissions to submit any personal data to the platform.

You are solely responsible for the content you submit to the platform.

13. Changes to This Policy

We may update this Policy at any time. The latest version is always available at www.TribesArena.com.

Material changes may be communicated via email where we hold your contact details.