Privacy Policy
Last Updated 19.10.2026
FinalScore is operated by Omer Erlich, trading as FinalScore (“FinalScore”, “we”, “us” or “our”). Contact: contact@finalscore.app. This Privacy Policy explains how FinalScore collects, uses, stores and shares personal information when you use the FinalScore website, applications and related services (the “Service”). We process personal information in accordance with applicable privacy and data-protection laws, including the Israeli Protection of Privacy Law, 5741-1981 and its regulations.
B2B Data Processing Layout (Holder vs. Database Owner): When uploading third-party data (such as customer or employee details of system users) to the platform, the business user serves as the sole "Database Owner". The Business acts solely in the capacity of "Holder" and/or "Processor". The responsibility for obtaining informed consent to collect the information, use it, its legality and reliability, falls entirely on the business user alone. The Business will never bear any liability toward third parties whose data was entered into the system through negligence or omission by platform users.
1. Information Collection
Types of Information We Collect
1.1. Transparency in Information Collection: Due to the nature of the service and Site activity, we collect and process the following information:
- Full name
- Email address
- Date of birth
- Country
- Gender
- Guardian or parent name and contact details, where applicable
- Information provided in event applications or registration forms, where that information identifies or relates to an individual
- Images, videos, files or other media uploaded in connection with an individual
- Technical information such as IP address, device/browser information and digital identifiers
- Transaction-related personal information, such as billing contact details, Paddle transaction identifiers and payment status; FinalScore does not receive or store complete payment-card details
1.1.1. Legal Clarification: In accordance with Amendment 13 to the Protection of Privacy Law, technical information such as IP address, location data, and digital identifiers is considered personal information to all intents and purposes, and we treat it in accordance with the required level of security and privacy.
1.2. Obligation to Provide Information and Consent (Amendment 13): You are under no legal obligation to provide the information, and its provision depends on your free will and full consent. It is clarified that the information is collected for the purposes detailed in Section 2 below.
1.3. Consequences of Non-Provision: However, non-provision of the required information may result in: blocking of the transaction/service.
1.4. Data Retention Period: We retain the information for the time necessary to fulfill the purposes detailed in this policy, or for a longer period if required by law (e.g., for bookkeeping purposes or legal grounds). Below are the main retention periods:
| Category | Type of Information | Retention Period |
|---|---|---|
| Financial and invoice information | Financial and invoice information | 7 years (according to bookkeeping regulations) |
| Technical and analytical information | Technical and analytical information | Up to 24 months from collection |
Private competition media: FinalScore operates an automatic retention process for music uploads, background videos and private competitor photographs. These files are scheduled for deletion from active storage after 90 days have passed from the later of the event's recorded end date or its last scheduled event day.
Deletion is performed by a daily automated process, subject to eligibility and safety checks. Files may be retained longer where an applicable legal hold, ongoing event, shared-file dependency or other documented exception prevents safe deletion. Certain seeded, demonstration or untracked files are excluded from the automatic process pending separate review.
The deletion of a stored file does not necessarily remove the associated historical application record, which may be retained to preserve application status, competition records or legitimate operational evidence. Guardian consent documents, difficulty sheets, public profile pictures, payment-related records and other files are governed by separate retention rules.
Deleted files may remain temporarily in provider backups according to the provider's backup-retention arrangements. FinalScore cannot delete copies previously downloaded and retained independently by event organizers, competitors or other authorized recipients.
2. Purposes of Using Information
2.1. The information will be used by the Business solely for the following purposes:
- Providing and operating the service
- Technical support and customer service
- Analyzing usage and improving the service
- Personalization
2.2. Data Retention: Different categories of personal information have different retention periods, depending on their purpose, legal requirements and operational necessity. The applicable rules, including the automatic deletion of certain private competition media, are described in Section 1.4. Other information is retained only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal obligations and documented exceptions.
2.3. Non-provision of information: Blocking of the transaction/service.
Use of Anonymized (Statistical) Information: It is hereby clarified that the Business collects Aggregated Non-identifiable Data on system usage patterns. The Business reserves the full and irrevocable right to make any use of this anonymous statistical information, including selling it to third parties, conducting future research, and training artificial intelligence (AI) models or algorithms, without any obligation to pay consideration of any kind to the user.
Transparency and Use of Data for AI Training: The Business clarifies that it may use anonymous technical information (such as usage patterns, performance data, and non-personally identifiable metadata) for the development, training, and improvement of artificial intelligence models and to improve the user experience. It is clarified that identifiable personal information (such as name, phone, or email) is not used to train these models without separate individual consent.
Algorithmic Transparency and Artificial Intelligence (2025 Reform): It is hereby clarified that some service decisions, content adaptation, or price determinations on the Site may be executed automatically through algorithms and/or artificial intelligence (AI) systems. The Business commits that the use of these technologies is conducted fairly and transparently.
3. Information Security
3.1. We implement information security measures in accordance with legal requirements (Protection of Privacy Regulations, Information Security, 2017).
3.2. Payments for paid FinalScore products and services are processed by Paddle, which acts as Merchant of Record for those transactions. FinalScore does not receive or store complete payment-card details. Payment information is processed by Paddle in accordance with its privacy and security practices.
4. Transfer of Information to Third Parties - Transparency
4.1. We may share personal information with service providers and other recipients where necessary to operate and provide the Service, as described below:
| Category | Provider / Identity | Geographic Location | Purpose | Privacy Policy |
|---|---|---|---|---|
| Payments and billing | Paddle | According to provider's policy | Processing purchases as Merchant of Record, billing, taxes, fraud prevention, refunds and payment disputes | Paddle Privacy Policy |
| Transactional and service email | Resend | According to provider's policy | Sending transactional and operational emails such as invitations, reminders, application-related messages and service communications | Resend Privacy Policy |
| Authentication email and managed services | Lovable (managed authentication-email delivery; underlying downstream provider not independently confirmed) | According to applicable provider arrangements | Delivering authentication and account-related emails and supporting managed application services | Lovable Privacy Policy |
| Database, authentication and storage | Supabase | According to provider's policy | Hosting and processing account information, application and event data, authentication information, database records and stored files | Supabase Privacy Policy |
| Application hosting and delivery | Cloudflare | According to provider's policy | Hosting and delivering the FinalScore application, processing web requests, application server functions and content delivery | Cloudflare Privacy Policy |
| Google sign-in | According to provider's policy | Providing optional Google account authentication and receiving basic account information, such as name, email address and profile information, when you choose to sign in with Google | Google Privacy Policy | |
| Maps and location services | Google Maps | According to provider's policy | Geocoding event venue addresses and displaying event locations or maps where those features are used | Google Privacy Policy |
| Event management | The organizer and authorized administrators of the event you apply to or participate in | Per event | Managing applications, competitor communication, event administration and participation | Organizer's own practices |
Event organizers and authorized event administrators: When you apply to or participate in an event through FinalScore, information you provide in connection with that event, including your name, email address, contact information and application details, may be made available to the organizer and authorized administrators of that event for the purpose of managing your application and participation.
4.2. Data Minimization: We limit information shared with service providers and other recipients to what is reasonably necessary for the relevant purpose. Where appropriate, we may use anonymization, pseudonymization or other measures to reduce the amount of directly identifiable information shared.
4.3. The use of third-party services may also be subject to the privacy policies and terms of those providers. We recommend reviewing the privacy policies of the relevant providers.
4.4. International Transfer: Some service providers may process personal information outside Israel. Where applicable, international transfers will be handled in accordance with applicable legal requirements and appropriate safeguards.
5. Cookies and Browser Storage
FinalScore uses first-party cookies and browser storage, including localStorage and sessionStorage, where necessary to operate and secure the Service, maintain authenticated sessions, continue user-requested workflows, preserve unfinished application drafts and remember limited interface preferences.
FinalScore does not currently use third-party advertising cookies, analytics cookies, behavioural tracking, cross-site tracking or session-replay technologies. Because no optional tracking technologies are currently active, FinalScore does not currently provide an optional-cookie consent banner.
More information about the specific storage used, its purposes and retention periods is available in our Cookie and Browser Storage Policy.
6. User Rights
6.1. The Protection of Privacy Law, 5741-1981, grants you the following rights:
- Right to Review (Section 13 of the Law): Your right to review the information held about you in our database.
- Right to Amend (Section 14 of the Law): If you find that the information about you is incorrect, incomplete, unclear, or outdated, you may contact us to request amendment or deletion of the information (subject to legal provisions).
- Right to Erasure/Be Forgotten: You may request the deletion of your personal information, provided the information is no longer required for service purposes or for binding legal documentation.
Prevention of Spam (Section 30A of the Communications Law): Sending promotional material will only be done subject to obtaining explicit consent for marketing as required by law. It is hereby clarified that you have the right to request removal from the mailing list at any time, easily and free of charge. Removal will be possible in the same manner the message was sent (e.g., replying "Remove" or "הסר" in SMS messages, or clicking the dedicated link at the bottom of every marketing email). Or by directly contacting the address contact@finalscore.app, which will result in immediate deletion from the database.
Additional Rights (GDPR Regulations / International Users): European Union users enjoy expanded rights:
- Data Portability: Your right to receive your personal information in a structured, commonly used, and machine-readable format.
- Right to Erasure: Where the GDPR applies, you may request erasure of your personal information in accordance with Article 17 of the GDPR. This right is subject to applicable conditions and exceptions, including legal obligations and other lawful grounds for continued retention.
- Objection to Processing: The right to object to information processing for direct marketing purposes or legitimate interests.
6.2. Method of Exercising Rights: Requests to exercise rights can be directed to our email address: contact@finalscore.app.
6.3. Section 17 of the Law: The database manager is responsible for the security of the information within it. We operate in accordance with the provisions of the law and regulations for information security.
7. Protection of Minors' Privacy
7.1. The Site is also intended for users under the age of majority. Use of the Site by minors (under the age of 13) is conditional upon obtaining explicit consent from a parent or legal guardian, via: prior written consent.
7.2. In accordance with Amendment 13 to the Protection of Privacy Law, 5785-2025, a parent or legal guardian of a minor has all the rights enumerated in this policy (review, amendment, deletion, objection to processing) regarding the minor's data.
7.3. In the event of a parent or guardian's refusal to give consent, the minor will not be permitted to use the Site, and their data will be deleted from the database.
7.4. Guardian Consent Records: Guardian consent records and signatures, where collected, are maintained separately from ordinary competition media and are not included in the automatic 90-day deletion process for music, background videos and competitor photographs. These records are retained only where reasonably necessary for consent verification, legal obligations, dispute handling or other legitimate purposes, subject to applicable law.
8. International Information Transfer
8.1. As part of our operations, personal information may be transferred and processed outside the borders of Israel.
8.2. Countries with an Adequate Level of Protection: The transfer of information to European Union (EU/EEA) countries is executed in accordance with the Adequacy Decision granted to Israel.
8.3. Transfer to Other Countries: If information is transferred to countries lacking an adequate level of protection, we will ensure that the transfer is carried out via one of the following mechanisms:
- Standard Contractual Clauses (SCC)
- Explicit consent of the data subject
- Contractual commitment of the recipient to comply with Israeli privacy protection standards
8.4. For more information regarding international transfers and existing safeguards, you may contact us.
9. Notification of a Security Incident
9.1. In accordance with the Protection of Privacy Regulations (Information Security), 5777-2017, in the event of a severe security incident that may cause substantial harm to privacy, we will act as follows:
- Report to the Authority: We will notify the Privacy Protection Authority without delay.
- Notice to Affected Parties: We will notify the affected data subjects if the incident is likely to cause them substantial harm.
- Documentation: We will document the incident, its impact, and the actions taken to address it.
9.2. The notification will include the nature of the incident, the type of information exposed, the potential risks, and recommended steps for protection.
10. Updates to the Policy
10.1. We may update this policy from time to time. Material changes will be published on the Site and/or sent via direct message.
10.2. Continued use of the services after the publication of changes constitutes consent to the updated policy.
10.3. It is recommended to review this policy periodically to check for updates.
11. Privacy Protection Management and Contact
11.1. The Business operates in accordance with the provisions of the law to prevent harm to the privacy of employees and customers.
11.2. Privacy questions and requests may be sent to contact@finalscore.app
11.3. Response Time: We commit to responding to privacy inquiries and the exercising of rights (review/amend/delete) within a reasonable timeframe (up to 30 days), in accordance with legal requirements.
This policy was last updated on 19.10.2026
© 2026 FinalScore. All rights reserved.
