Privacy Policy
SEPSAP Special Electronics, Planning, Solutions and Projects OÜ
Service and contact
VII Sport Platform is operated by SEPSAP Special Electronics, Planning, Solutions and Projects OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia. Registry code: 14538594. VAT: EE102088535. Privacy contact: admin@sepsap.ee. RACKK Paweł Gardy provides technical development and publishes the mobile application through its developer accounts; it is not presented as the service owner.
Organizers and responsibilities
Series organizers control publication, chat participation and moderation for their Series. The allocation of controller and processor responsibilities for each activity must be confirmed in the relevant agreements. Contact SEPSAP if you need help identifying the responsible organization.
Accounts and access
We process account name, email, password hashes, verification and authentication records, permissions, Series memberships and optional profile images. Accounts are intended for adults aged 18 or older. Age is self-declared, not independently verified. Public Series documents can be accessed with an activation code without creating an account.
Official communication
Authorized participants can see chat aliases, avatars, messages, replies, reactions, attachments and delivery/read indicators. Organizers assign aliases and access. Authorized administrators can manage these communications. Published documents and results may themselves contain personal data. Do not upload unnecessary personal information.
Devices and notifications
We process device/installation identifiers, push tokens and notification preferences to deliver alerts through Web Push and Expo, Apple APNs and Google FCM. Push payloads can contain the full notification or chat-message text; device notification previews may expose it on the lock screen. Notification permissions are optional and managed separately from account terms.
Storage and service providers
The platform uses HTTPS, a VPS in Germany, a separate SEPSAP mail service, Cloudflare and Expo-related services. File replicas are held on a NAS in Poland. Access is restricted to authorized personnel. Provider roles, international transfers and safeguards require confirmation; we do not assert that every provider processes data only within the EEA.
Local copies
The web application uses essential session cookies and local settings. The mobile application stores Series settings, credentials and offline caches, including a standard SQLite chat database per account. SQLite is not separately encrypted by the application. Operating-system protections apply. V2 logout removes its account history and private cache, not server history or copies exported by other people. Legacy V1 data may remain. Updated iOS builds move V2 per-account chat databases and their journals to a dedicated persistent Application Support directory excluded from future device backups, without resetting history or device activations. Older builds and pre-existing backups may still include those databases; legacy V1 data is not covered by that exclusion. Android backup restrictions do not guarantee exclusion from every device-to-device transfer.
Retention and deletion
Account deletion requires email confirmation. Requests involving active chats or an administrator handover undergo individual review; other verified requests can be processed automatically. Deletion removes account data and user content from the active service, using message placeholders where needed. Any justified exception must be individually documented and explained. Archived chats have no approved universal retention period: organizers and SEPSAP must approve a limited schedule. Database backups are currently rotated over approximately six months; file deletion is expected to propagate through Syncthing. NAS version-history behavior must be verified. Restored backups must be reconciled against the erasure ledger before service resumes.
Your choices and rights
You can request access, correction, erasure, restriction and other applicable rights by contacting admin@sepsap.ee. We normally respond within one month and explain any applicable extension or refusal. You may complain to the competent supervisory authority, including the Estonian Data Protection Inspectorate. Public deletion requests are reviewed individually and do not themselves authorize account changes.