Privacy Policy

1. Information we collect

You provide most of it directly:

• Account & profile: name, email, password (stored hashed by our auth provider), gender, and optionally phone, location, and birth month/year.
• Play data: your self-rate and optional DUPR reference, your PBMaestro rating and status, club memberships, event registrations, lineups, and match results.
• Payments: when you pay a fee, our payment processor (Stripe) handles your card details — we don't store them. We keep a record of the payment (amount, status, and identifiers).
• Communications & consents: your contact and marketing preferences, and messages sent through the Service.
• Technical: basic log and device data and essential cookies needed to keep you signed in (see our Cookie Policy).

2. How we use your information

• To run the Service — accounts, clubs, events, and standings.
• To calculate and display the PBMaestro rating.
• To process event payments and refunds.
• To communicate with you about clubs and events you take part in, and — only if you opt in — to send product news and offers.
• To keep the Service secure and enforce our Terms.

3. Who can see your information

• Your clubs: directors and co-directors of clubs you join can see your profile basics, rating, contact details (e.g. phone), and your participation. Other members see what your profile visibility setting allows.
• Administrators: PBMaestro administrators can access data to operate and support the platform.
• Service providers who process data on our behalf: Supabase (database, authentication, hosting of data), Stripe (payments), Resend (email delivery), and Vercel (application hosting). They're permitted to use it only to provide their service to us.
• Legal: where required by law or to protect rights and safety.

We do not sell your personal information.

4. Marketing choices

Marketing emails are opt-in at sign-up and entirely optional. You can opt out at any time using the link in those emails or by contacting us. Service messages (confirmations, password resets, director messages about your events) are not marketing and continue regardless.

5. Retention

We keep your information while your account is active. Deactivating your account disables login but preserves historical records (match results, ratings, payments) for the integrity of clubs' histories. You can request deletion of your personal data — see your rights below — subject to records we must keep by law.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise these, contact us at [CONTACT EMAIL]. You can also edit much of your profile in the app and deactivate your account from Account settings.

7. Security

We use reputable providers and reasonable technical measures (including encryption in transit and access controls) to protect your data. No system is perfectly secure, so we can't guarantee absolute security.

8. Children

The Service isn't directed to children under [AGE, e.g. 16]. If you believe a child has given us personal data, contact us and we'll remove it.

9. International transfers

We and our providers may process your information in the United States and other countries. Where required, we rely on appropriate safeguards for such transfers.

10. Changes and contact

We may update this policy and will post the revised version with a new date. Questions or requests: [CONTACT EMAIL, e.g. privacy@pbmaestro.com].