Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, password (hashed), club name, and timezone when you sign up
• Operational data: client records, player profiles, lesson schedules, drill libraries, billing records, and other data you enter into the Service
• Usage data: login timestamps, feature usage patterns, and error logs for improving the Service
• Payment data: processed securely by Stripe; we do not store credit card numbers

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process transactions and send billing-related communications
• Send service notifications (password resets, system alerts)
• Improve the Service and develop new features
• Monitor for security threats and abuse

3. Data Isolation

CourtOps is a multi-tenant platform. Each club's data is logically isolated at the database level using tenant identifiers. Users from one club cannot access data belonging to another club.

4. Data Sharing

We do not sell your data. We may share data with:

• Service providers: hosting (Railway), email (Resend), payments (Stripe), error tracking (Sentry) — only as needed to operate the Service
• Legal requirements: if required by law, court order, or governmental authority

5. Data Security

We protect your data through:

• Encryption in transit (HTTPS/TLS)
• Encrypted database connections
• Password hashing (bcrypt)
• Role-based access control (Director, Admin, Coach)
• Rate limiting on authentication endpoints

6. Data Retention

We retain your data for as long as your account is active. Upon account termination, we retain data for 30 days to allow for reactivation, after which it may be permanently deleted. Billing records may be retained longer as required by law.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a standard format
• Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@courtops.com.

8. Cookies

We use a single authentication token stored in your browser's local storage to maintain your session. We do not use tracking cookies or third-party advertising cookies.

9. Children's Privacy

The Service is intended for use by tennis academy staff and directors. Player profiles may contain information about minors entered by authorized club staff. We do not knowingly collect personal information directly from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact

For privacy-related questions or requests, contact us at privacy@courtops.com.