Privacy Policy

1. Introduction

PaddleDraw ("we," "us," or "our") operates a pickleball event platform that helps players discover, register for, and organize tournaments, leagues, open-play sessions, and clinics. This Privacy Policy explains what personal information we collect, how we use it, and your choices regarding that information.

By creating an account or using PaddleDraw, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide directly

• Account information — name, email address, and password when you register with email/password.
• Profile information — self-reported pickleball skill level (DUPR or equivalent rating), city/state, and optional profile photo.
• Event registration data — which events you register for, partner preferences, and category selections.

2.2 Information from third-party sign-in

When you sign in with Facebook or Google, we receive limited profile information from the provider, typically:

• Your name and email address
• Your profile picture / avatar URL
• A unique identifier from the provider

We do not request access to your friends list, posts, photos, or any other social data. We use this information solely to create and authenticate your PaddleDraw account.

2.3 Information collected automatically

• Usage data — pages visited, features used, and actions taken within the platform.
• Device and browser information — browser type, operating system, and screen resolution.
• IP address — used for security, fraud prevention, and approximate geolocation (city-level) to surface nearby events.

3. How We Use Your Information

• Account creation and authentication — to let you sign in and maintain your account.
• Event discovery and registration — to show you relevant events, process registrations, and manage waitlists.
• Communications — to send registration confirmations, event reminders, schedule changes, and match/court assignments. You may opt out of non-essential notifications at any time.
• Platform improvement — to understand how PaddleDraw is used and improve features, performance, and reliability.
• Safety and security — to detect and prevent fraud, abuse, and unauthorized access.

4. Data Sharing

We do not sell your personal information. We share data only in these situations:

• Event organizers — when you register for an event, the organizer receives your name, skill level, and registration details so they can run the event.
• Service providers — we use trusted third-party services for authentication (Supabase), email delivery (Resend), and hosting infrastructure. These providers process data on our behalf under strict contractual obligations.
• Legal requirements — we may disclose information if required by law, court order, or governmental request.

5. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or audit purposes. Anonymized, aggregated data (such as total event registrations) may be retained indefinitely.

6. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure password hashing, and access controls on our database. Authentication tokens are signed with RS256 and validated on every request. While no system is 100% secure, we take reasonable steps to protect your information.

7. Your Rights and Choices

• Access and export — you can view and download your profile and registration data from your account settings.
• Correction — you can update your profile information at any time.
• Deletion — you can request account deletion by contacting us. We will process your request within 30 days.
• Opt out of emails — transactional emails (registration confirmations, schedule changes) are required for the service to function. You can opt out of marketing and promotional emails via the unsubscribe link in any email.

If you are located in the European Economic Area (EEA), you may have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

8. Cookies

PaddleDraw uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. No cookie consent banner is required because we only use strictly necessary cookies.

9. Children's Privacy

PaddleDraw is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the platform before the changes take effect. Your continued use of PaddleDraw after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

Email: contact@paddledraw.com