Privacy Policy

1. Who We Are

CourtFlow is a pickleball facility management platform operated in the United States. You can reach us at anthony@courtflowpickle.com with any questions about this policy or your data.

2. Information We Collect

We only collect what we genuinely need to operate the platform:

• Email address: required to create an account and sign in. We use a "magic link" system (a one-time sign-in link sent to your email) rather than storing passwords.
• Name: collected only if you choose to provide it when submitting a Contact Us message. Names are never required to use the platform.
• Player names and game data: division names, player rosters, match scores, and tournament brackets entered by facility organizers and staff while using the platform.
• Contact Us messages: the content of any message you voluntarily submit through our contact form, including your email address and any name you provide.

3. How We Use Your Information

• Email address: to send you your sign-in link when you request one, and to send you a facility staff invitation if a facility administrator invites you to join their team.
• Player and game data: to display divisions, standings, brackets, and match history within the platform for you and your facility's staff.
• Contact Us messages: to read and respond to your inquiry. We do not use these for marketing.

We do not use your information for advertising, profiling, automated decision-making, or any purpose beyond directly operating CourtFlow.

4. How We Store and Protect Your Data

CourtFlow is built on the following third-party infrastructure providers, each operating under their own security and privacy standards:

• Supabase: our database and authentication provider (supabase.com). Your email address and account data are stored in Supabase's secure, access-controlled database. Supabase is SOC 2 compliant.
• Resend: our email delivery provider (resend.com). Used only to send sign-in links and staff invitation emails. Resend does not store the content of these emails beyond delivery.
• Netlify: our hosting provider (netlify.com). Serves the CourtFlow application. Does not store your personal data.
• Cloudflare: our DNS and email routing provider (cloudflare.com). Used to route email to and from courtflowpickle.com.

Access to your data within CourtFlow is strictly controlled by role: only facility administrators and staff members you have explicitly joined can view or edit your facility's data. We enforce row-level security on all database tables.

5. Data Sharing

We do not sell, rent, or share your personal information with any third parties for their own purposes. The only parties who ever receive your data are:

• The infrastructure providers listed in Section 4, solely to operate the platform.
• Other staff members within your own facility, as permitted by the facility's administrator.
• Law enforcement or government authorities, only if required by a valid legal process such as a court order or subpoena.

6. Your Rights and Choices

You have the following rights regarding your information:

• Access: you may request a copy of the personal information we hold about you.
• Correction: you may request that we correct inaccurate information.
• Deletion: you may request that we delete your account and associated personal data. Note that tournament and division data created by you may be retained by your facility administrator separately.
• Opt out of communications: sign-in links are only sent when you request them. Invitation emails are only sent when a facility administrator invites you. We do not send unsolicited email.

To exercise any of these rights, contact us at anthony@courtflowpickle.com. We will respond within 30 days.

7. Children's Privacy

CourtFlow is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

8. Data Retention

We retain your email address and account information for as long as your account is active. Division and tournament data is retained as long as the facility account that created it remains active. Contact Us messages are retained for up to 2 years. You may request deletion of your data at any time as described in Section 6.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights, including the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information. CourtFlow does not sell personal information. To exercise your rights, contact us at anthony@courtflowpickle.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of CourtFlow after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: anthony@courtflowpickle.com
• Website: courtflowpickle.com/contact