Byga Data Access Waiver

This waiver applies to the specific data access request it is linked to or referenced from. By checking the acknowledgment box on that request and submitting it, you agree to the terms below for that request only.

If your access is provided through the Byga API, the Byga API Terms of Service also apply to you. This waiver applies in addition to those Terms, and applies on its own for any access that is not provided through the API. Where this waiver and those Terms conflict, section 16(b) of those Terms states which controls.

1. Grant of access

Byga grants you access only to the data, environment, and scope described in your approved request. The access Byga grants may be narrower than the access you requested, and the scope recorded in Byga's approval register is the scope that governs.

Access is read-only unless Byga has granted write access expressly and in writing for your integration. Requesting write access in your submission does not grant it, and Byga's acceptance of a request that asks for it is not acceptance of that part.

2. Club authorization and responsibility

This access is granted at the direction of the club that owns the data. By submitting your request you confirm that an authorized official of the club, ordinarily a commissioner or a person of comparable authority, has authorized this access and the scope described in it. The club determines the permitted scope, including which teams, which other club data, and which API endpoints are enabled.

The club is responsible for how data accessed under this request is used, stored, shared, and protected, including player and guardian information. Byga relies on the club's authorization and may suspend or revoke access at any time if that authorization is withdrawn, cannot be confirmed, or no longer matches the access in use.

Where the person submitting the request is not themselves an authorized club official, Byga will confirm the authorization with the club directly before access is granted.

Access under this request is tied to your relationship with the authorizing club. The club is asked to notify Byga when the person or organization holding this access is no longer acting for the club, and you will notify Byga if that relationship ends. Byga may suspend access on learning that it has ended, pending confirmation from the club.

3. Eligibility

Access is granted for integrations that a club owns and manages. It is not granted for personal or individual projects, and Byga may decline any request that is not sponsored by a club.

4. Permitted use

You will use the data only for the purpose stated in your request. You will not access data outside the approved scope, aggregate data across multiple clubs to build an independent dataset or product, use the data to build or enhance a competing product, or attempt to re-identify anonymized or aggregated data.

You will not disclose the data to any third party that is not named in your request. If you intend to send the data to a service, platform, or processor you do not operate yourself, that destination must be named in your request and approved before the data reaches it.

5. Sensitive personal information

Data accessed under this request may include personal information about minors, including dates of birth. You will use that information only for the purpose stated in your request, will not disclose it to any third party not named in your request, and will apply the security measures in section 6 to every system on which it is stored.

6. Confidentiality and security

You will keep any credentials confidential and use multi-factor authentication on any account or system used to access or store the data. If credentials are exposed, whether or not you believe they were misused, you will notify Byga immediately so they can be rotated.

You will not access Byga using another person's login credentials, and you will not collect, store, or transmit a Byga user's password, whether persistently or transiently. Access must use only the credentials Byga issues to you. This applies to automated and AI-driven access as it does to any other access.

This paragraph governs how the data is retrieved, not what you may lawfully do with it afterwards. Data retrieved using the credentials Byga issued to you may be stored and processed in your own systems, including by automated and AI-assisted tools, provided the purpose is the one stated in your request, every destination is named under section 4, and the protections in this section apply to each system holding it.

7. Retention, return, and deletion

You will retain the data only for as long as the purpose stated in your request requires, and will state in your request how long you intend to hold it. Where you keep a copy outside Byga, you will keep it no longer than that period and will apply section 6 to it for as long as you hold it.

When your access expires, is revoked, or Byga requests it, you will stop using the data and delete or return any copies within 10 business days, and confirm deletion in writing if asked.

8. Breach notification

You will notify Byga within 72 hours of becoming aware of any known or suspected unauthorized access to, or loss of, the data or credentials covered by this waiver, and will reasonably cooperate with Byga's response.

9. Indemnification

You will indemnify, defend, and hold Byga harmless from claims, losses, or costs, whether brought by a third party or incurred directly by Byga, arising from your misuse, unauthorized use, or unauthorized disclosure of the data accessed under this waiver.

10. Supported and experimental capabilities, usage limits, and future charges

Byga publishes which API capabilities are supported and which are experimental. Supported capabilities carry Byga's documentation and change-notice commitments. Experimental capabilities may change or be withdrawn without that notice and should not be relied on in production.

Access is not unlimited, usage limits may be applied, and Byga may introduce fees for API or data access in the future. API access is not charged for today. Byga will give notice before any charge applies to an existing integration.

11. Term, review, and revocation

This waiver and the access it covers continue while the club's authorization stands. Byga will review each grant at least once every 12 months and may ask the club to re-confirm the authorization and the scope. Access ends if the club withdraws its authorization, if a review is not completed, or on any expiration date recorded for your request.

Byga may suspend or revoke your access at any time, with or without cause, including immediately if misuse is suspected.

12. Changes to this waiver

Byga may issue a revised version of this waiver. Where a revision materially changes your obligations, Byga will ask you and the authorizing club to accept the revised version, and may suspend access if it is not accepted within a reasonable period.