Privacy Policy

Version 2.0 · Effective May 6, 2026

Aligned with Mexico’s Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and applicable U.S. data privacy practices.

League Pix DOES NOT sell personal data to third parties under any circumstance.

1. Data controller

League Pix (“LP”, “we”, or “the Platform”) is the entity responsible for processing your personal data. For any privacy-related matter, you can contact us at:

2. Personal data we collect

In connection with our services, LP collects and processes the following categories of personal data:

CategorySpecific data
IdentificationFull name, email address
ContactPhone number / WhatsApp / SMS
Platform usageLeagues created or joined, predictions, scores, activity history
Platform fee paymentsTransaction reference (processed by MercadoPago); LP does not store card data or banking credentials
League pool dataAmount configured by the organizer, labels and payment data the organizer chooses to share with their participants (free text), and manual “paid” markings made by the organizer. LP does not process, receive, or transmit the pool money; LP also does not store tokens, balances, or banking credentials of users.
TechnicalIP address, device type, session cookies

LP does not collect sensitive personal data as defined in article 3, section VI of the LFPDPPP.

3. Purposes of processing

Primary purposes (necessary for the service)

  • Create and manage your user account.
  • Enable the creation, administration, and participation in prediction leagues.
  • Calculate and publish scores and standings.
  • Process platform fee payments via MercadoPago.
  • Send transactional notifications via WhatsApp or SMS (prediction reminders, standings updates, league confirmations). SMS is sent only to users who opt in explicitly. Message and data rates may apply. Reply STOP to opt out at any time.
  • Comply with legal obligations and lawful requests from competent authorities.

Secondary purposes (optional)

  • Sending marketing communications about new features or LP promotions.
  • Conducting satisfaction surveys and aggregated statistical analysis to improve the Platform.

If you do not wish your data to be processed for secondary purposes, you may opt out by sending an email to privacy@leaguepix.com with the subject “Opposition to secondary purposes”. Refusal will not affect access to the service.

4. Third-party transfers

LP shares personal data only with the following third parties, to the extent strictly necessary to operate the service. We do not share your information with third parties for marketing purposes.

MercadoPago

Platform fee payment processing (Pay to Play, Pro Pack, Comisionado). Receives transaction reference and user identifier. Does NOT process league pool payments.

Required to perform the contract.

Twilio

Delivery of WhatsApp and SMS messages (transactional notifications). Receives phone number and message content.

Required to perform the contract.

Supabase

User authentication and secure session storage. Receives email address and session metadata.

Required to perform the contract.

Vercel

Application hosting and scheduled job execution. Processes technical data (IP, access logs).

Required to perform the contract.

Competent authorities

Compliance with legal, judicial, or administrative requests under applicable law.

Legal exception — no consent required.

None of the above third parties is authorized to use your data for purposes other than those described. LP DOES NOT sell personal data, and information collected for SMS notifications is never shared with third parties for marketing purposes.

4-bis. SMS / Text Messaging Communications

When you opt in to SMS notifications during account registration, League Pix collects your mobile phone number solely to deliver transactional messages about your account and your leagues (registration confirmations, prediction-deadline reminders, match-result notifications, and end-of-league summaries).

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

The categories of personal information shared with our SMS provider (Twilio) exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency: variable, typically 2 to 5 messages per week while a league is active. Message and data rates may apply from your mobile carrier.

Opt-out: reply STOP to any League Pix message to unsubscribe immediately. Reply HELP for help. You can also disable SMS from your profile page.

5. Your data-subject rights

You have the right to Access your data, Rectify it, Cancel its processing, or Object to it (collectively, ARCO rights), pursuant to article 28 of the LFPDPPP.

How to exercise your rights

  1. Send an email to privacy@leaguepix.com with the subject “ARCO Request”.
  2. Include: full name, email registered with LP, a clear description of the right you wish to exercise and, in the case of rectification, the requested correction with supporting documentation.
  3. LP will acknowledge receipt within 5 business days and resolve your request within a maximum of 20 business days, extendable by another 20 when circumstances justify.
  4. The response will be sent to the email address provided in your request.

Exercising ARCO rights is free of charge. LP may request additional information to verify your identity before proceeding.

6. Cookies

LP uses cookies strictly necessary to manage your authenticated session (provided by Supabase). These cookies do not track your navigation outside the Platform and are not used for advertising purposes.

You can configure your browser to block or delete cookies; however, this will prevent access to the protected areas of the Platform.

7. Security

LP implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or destruction. These measures include: encryption in transit (TLS), secure authentication managed by Supabase, and role-based access controls. Nevertheless, no security system is infallible; in the event of a security breach affecting your rights, LP will notify you as required by the LFPDPPP.

8. Data retention

Your personal data will be retained while you maintain an active account on LP and for the additional time necessary to comply with legal, accounting, or dispute-resolution obligations. Once the contractual relationship has ended and the applicable legal terms have elapsed, LP will proceed to delete or dissociate your data.

9. Minors

LP is directed exclusively to persons 18 years of age or older. LP does not intentionally collect or process personal data of minors. If LP detects that data of a minor has been collected, it will proceed with immediate deletion. If you are a parent or guardian and become aware that a minor has provided data to LP, please contact us at privacy@leaguepix.com.

10. Changes to this Privacy Policy

LP may modify this Privacy Policy at any time. Changes will be communicated through a prominent notice within the Platform and/or by email at least 15 days before they take effect. The updated version will always be available at leaguepix.com/privacy.

11. Complaints to data protection authorities

If you believe LP has violated your right to personal data protection, after exhausting the ARCO request procedure described in Section 5, you have the right to file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), through its official site www.inai.org.mx.