This is a standard template provided for transparency and is subject to review by our legal counsel before launch. For questions, please contact us.
On this page
This Privacy Policy explains how BallOBall ("we") collects, uses, and protects personal data when you use the Service. We act as a controller for account and marketing data, and as a processor for the league data our customers upload (see our Data Processing Addendum).
1. Data we collect
Depending on how you use the Service, we may collect:
- Account data — name, email, username, password hash, role;
- League data — teams, players, schedules, scores, standings, and media uploaded by operators;
- Usage & device data — log data, IP address, browser/device type, and product analytics;
- Payment data — billing details processed by our payment provider (we do not store full card numbers).
2. How we use data
We use personal data to:
- Provide, secure, and improve the Service;
- Authenticate users and prevent fraud and abuse;
- Communicate about your account, support, and (with consent where required) marketing;
- Comply with legal obligations.
3. Legal bases
Where the GDPR or similar laws apply, we process personal data under one or more of: performance of a contract, legitimate interests, consent, and compliance with legal obligations.
4. Sharing
We share data with service providers (hosting, analytics, email, payments) under contract, and where required by law. We do not sell personal data. League data is shared only as directed by the operating customer (e.g. public fan pages they choose to publish).
5. Retention & security
We retain personal data for as long as needed to provide the Service and meet legal obligations, then delete or anonymize it. We use tenant isolation, encryption in transit, access controls, and audit logging to protect data.
6. Your rights
Subject to applicable law, you may request access, correction, deletion, portability, or restriction of your personal data, and may object to certain processing. Operators can export or delete league data from the app. Contact us to exercise your rights.
7. Children
Youth‑sport data may include minors. Operators are responsible for obtaining the consents required by law (e.g. COPPA/parental consent) before uploading a minor’s personal data, and we provide tooling (guardian links, consent records) to support this.
8. International transfers & contact
Data may be processed in countries other than yours under appropriate safeguards. For privacy questions or requests, reach us via the contact page.