Major sports organizations choose Regystra to manage and scale their operations, relying on our commitment to providing the best practices in sports management.
Last modified: February 1, 2025
At Regystra, we are dedicated to protecting our customers' data by implementing robust security measures across our services and infrastructure. Our Security Policy outlines the key practices we follow to ensure data integrity, user privacy, secure payment processing, and reliable hosting.
Disclaimer: While Regystra implements industry-standard security practices to protect customer data, no system is 100% secure. Customers are responsible for ensuring their own security practices, including managing user access, securing their credentials, and complying with data protection regulations. Regystra is not liable for any unauthorized access, data breaches, security incidents, or financial losses resulting from user actions, third-party services, or circumstances beyond our control.
1. Data Security
We implement comprehensive security measures to protect your data, including:
2. Payment Processing Security
We ensure the security of your payment information by:
All payment transactions are processed by third-party providers (e.g., Stripe, PayPal, Authorize.net, MercadoPago). Regystra does not store or process payment data. Any disputes, fraud claims, or unauthorized transactions must be handled directly with the payment provider. Regystra is not liable for payment processing errors, chargebacks, or financial losses arising from third-party payment systems.
3. Hosting Security
We ensure the security of our hosting infrastructure by:
While Regystra leverages cloud providers such as AWS, Azure, and Google Cloud for hosting, we are not responsible for any outages, security breaches, or data loss resulting from failures in these third-party services. Customers should refer to the respective provider's security policies for details on their security measures and compliance.
4. Security and Compliance
We conduct regular security assessments to evaluate the effectiveness of our security controls and identify potential vulnerabilities:
5. Incident Response & Security Breach Notification
In the event of a data breach affecting customer information, Regystra will:
Customer Responsibility: Customers must notify Regystra immediately if they suspect unauthorized access to their accounts. Regystra is not liable for security breaches caused by compromised user credentials, phishing attacks, or weak passwords.
6. User Responsibilities & Security Best Practices
While Regystra implements security best practices, customers must take necessary precautions to secure their accounts. This includes:
Regystra is not liable for security incidents caused by weak credentials, phishing attacks, customer misconfiguration, or unauthorized access due to user negligence.
7. Compliance with Security Standards & Regulations
Regystra follows industry best practices for cloud security, data protection, and user privacy. While Regystra does not hold SOC 2 or ISO 27001 certifications, we implement security controls inspired by these frameworks where applicable.
Note: Compliance with GDPR, CCPA, and other regulations is a shared responsibility, where Regystra provides security measures while customers remain responsible for their data-handling practices.
8. API & Integration Security
If customers integrate Regystra with external systems via API access, they must:
Customers are responsible for securely managing their API credentials and ensuring third-party integrations meet security best practices. Regystra provides API access as-is and is not liable for security breaches, data leaks, or unauthorized access resulting from customer-managed integrations or third-party applications.
9. Termination & Data Deletion
Upon account termination, Regystra retains customer data for a limited period (e.g., 30 days) to facilitate potential reactivation or retrieval requests. Customers are responsible for exporting any required data before closing their accounts. After this period, Regystra will permanently delete or irreversibly anonymize all stored customer data, in compliance with applicable laws, internal policies, and customer requests.
Regystra makes no warranties, express or implied, regarding the security of the platform. Customers acknowledge that security is a shared responsibility and agree that Regystra shall not be liable for any direct, indirect, incidental, consequential, punitive, special, or exemplary damages, including but not limited to cybersecurity threats, unauthorized access, data breaches, misconfigurations, third-party failures, or customer negligence.
For more information on our security practices or to report potential security concerns, please contact our security team at: info[at]regystra.com