Privacy Policy
Privacy Policy
Last updated: May 26, 2026
This Privacy Policy describes how Volée Haus LLC ("Volée," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use voleehaus.com, our apps, and our events (collectively, the "Service").
We've tried to write this in plain English. If something is unclear, email us at admin@voleehaus.com.
1. Information we collect
1.1 Information you give us
- Account information — name, email, phone (optional), password (stored hashed)
- Profile information — bio, photo, pronouns (optional), gender (optional), handedness, social media handles (optional)
- Pickleball-specific information — DUPR ID and rating, partner preferences, event registration history
- Payment information — entry fees are processed by Stripe; we never see or store your card number, CVV, or full card details. Stripe gives us a token and the last 4 digits of the card for receipts and refund processing.
- Event content — team names, score entries, comments, reports submitted via Code of Conduct
- Communications — emails you send to us, messages submitted through forms
1.2 Information we collect automatically
- Device and browser data — IP address, browser type, operating system, device type
- Usage data — pages visited, features used, session duration, referring URLs
- Cookies and similar technologies — see Section 6
- Location data — when you use the courts map ("/play"), your browser may share your approximate location with our app (with your permission) so we can show nearby courts. We do not store this location data on our servers unless you save a court as a favorite.
1.3 Information from third parties
- DUPR — if you connect a DUPR ID, we retrieve your current rating
- Stripe — payment status, refund records, fraud signals
- Resend — email delivery status (bounces, opens — if you've opted in)
- PB Vision — gameplay analytics derived from match footage (see Section 1.4)
1.4 Match footage and gameplay analytics
At certain tournaments, we may record match footage and send it to PB Vision (or a similar AI video analytics provider) to generate per-player statistics, shot tracking, and highlight clips. The footage and derived analytics are stored in our database and may be shown to you and to other event participants.
This processing involves analysis of your physical movements, gameplay patterns, and on-court appearance — information that may be considered biometric data under California law. We rely on your explicit consent at the event level (disclosed on the event registration page) as the legal basis for this processing.
We retain match footage only as long as needed to process gameplay analytics, typically up to 30 days after PB Vision processing completes, after which we delete it from our systems. PB Vision retains a separate copy under its own data retention policy; if you request deletion in writing to admin@voleehaus.com, we will remove our copy and ask PB Vision to remove theirs (subject to their data-processing agreement).
2. How we use your information
We use your information to:
- Provide the Service — create your account, register you for events, process payments, run brackets and scoring, deliver match results
- Communicate with you — send event confirmations, match notifications, account alerts, password resets, and (only if you opt in) marketing emails
- Improve the Service — analyze usage patterns, fix bugs, develop new features
- Run events — coordinate logistics, share rosters with venue partners as needed, generate scorecards
- Submit to DUPR — if you've connected a DUPR ID, we submit your match results to DUPR after each rated event
- Generate gameplay analytics — via PB Vision, where applicable and disclosed
- Protect the Service — detect fraud, prevent abuse, enforce our Terms of Service and Code of Conduct
- Comply with the law — respond to legal requests, enforce our rights, meet tax-reporting obligations
We will never sell your personal information. We do not use your information to train external AI models without your separate consent.
3. Who we share your information with
3.1 Service providers
We share information with vendors that help us operate the Service. Each is contractually limited to using your data only as needed to provide their service:
| Vendor | Purpose | Data shared |
|---|---|---|
| Supabase (database & auth) | Hosts your account data and authenticates logins | All account/profile/event data |
| Vercel (web hosting) | Serves the website | Browser metadata, request logs |
| Stripe (payments) | Processes entry fees and prize payouts | Name, email, payment amount; PCI-compliant card handling |
| Resend (email) | Sends transactional and marketing email | Name, email, message content |
| DUPR | Two-way rating and match-result sync | DUPR ID, match results |
| PB Vision (video analytics) | Generates gameplay statistics | Match footage, player identifiers |
| Google Workspace | Hosts admin@voleehaus.com inbox | Anything you email us |
| Sentry (error monitoring) | Captures application errors so we can fix bugs | Error messages, stack traces, browser/OS type, the URL where the error happened, anonymized user ID (only after you log in). We do not send IP addresses, request bodies, cookies, or form contents. |
3.2 Other users
- Your profile (name, photo, bio, DUPR rating, social handles) is visible to other registered users by default. You can mark your profile as private in your account settings.
- Your event registrations and results appear publicly on event pages and leaderboards.
- Your community activity (registrations, placements, follows) appears in the activity feed visible to users who follow you.
3.3 Tournament partners
For events held at partner venues (e.g., Bay Padel, Goldman Tennis Center), we may share rosters and contact lists with the venue as needed for event operations.
3.4 Legal and safety
We may disclose information to law enforcement, regulators, or other parties if required by law, by valid court order or subpoena, or to protect the safety of any person, prevent fraud, or enforce our Terms.
3.5 Business transfers
If Volée is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred to the new owner. We will notify you by email before any such transfer.
4. Data retention
We keep your information for as long as your account is active, and for a reasonable period afterward to:
- Comply with tax and accounting obligations (typically 7 years for financial records)
- Resolve disputes
- Enforce our agreements
- Meet legal-hold requirements
Specifically:
- Account & profile data: retained while your account is active. When you request deletion, your account enters a 30-day grace period (you can reactivate by logging back in). On day 30, your profile is permanently de-identified: name, photo, contact info, social handles, and DUPR ID are removed. Your past tournament participation records remain (with your name replaced by "Former Player") to preserve tournament history for other players.
- Payment records: retained 7 years for tax/accounting (IRS requirement, applies even after account deletion)
- Match results & event history: retained indefinitely as part of the de-identified tournament record described above
- Match footage: retained only as long as needed to process gameplay analytics, typically up to 30 days after PB Vision processing completes; you may request earlier deletion at any time
- Marketing email lists: removed immediately upon unsubscribe
- Server logs: retained 90 days
- Error monitoring data (Sentry): retained 90 days per Sentry's default retention
5. Your rights
5.1 California residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and share
- Access a copy of your personal information
- Delete your personal information, subject to exceptions
- Correct inaccurate personal information
- Opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising — see Section 5.4 below; we do neither
- Limit use of sensitive personal information (we currently collect only basic sensitive information — primarily account credentials, payment information processed by Stripe, and biometric data from event footage where applicable)
- Non-discrimination for exercising any of these rights
To exercise any of these rights, email admin@voleehaus.com with the subject "CCPA Request." We will verify your identity (typically by confirming a code sent to your account email) and respond within 45 days.
You may also designate an authorized agent to make a request on your behalf. We will require proof of authorization.
5.2 EU/UK residents (GDPR / UK GDPR)
If you are in the European Union, United Kingdom, or European Economic Area, you have similar rights including access, rectification, erasure, restriction of processing, data portability, and the right to object to processing. The legal bases on which we rely include:
- Contract performance (running the Service you signed up for)
- Legitimate interest (improving the Service, preventing fraud)
- Consent (marketing emails, biometric/video processing)
- Legal obligation (tax reporting, responding to lawful requests)
To exercise these rights, email admin@voleehaus.com. You also have the right to lodge a complaint with your local data protection authority.
5.3 Right to deletion
You can request deletion of your account at any time. After deletion:
- Your profile, photos, and social interactions are removed
- Match results and event registrations are de-identified (your name is replaced with "Former Player") to preserve tournament records
- Payment and tax records are retained as required by law
- Backups containing your data are overwritten within 90 days
5.4 "Do Not Sell or Share My Personal Information"
California law (CCPA / CPRA) gives you the right to opt out of the "sale" or "sharing" of your personal information.
Volée Haus does not sell your personal information, and we do not share it for cross-context behavioral advertising. We do use service providers (listed in the vendor table in Section 3.1) to operate our Service — those vendors are contractually restricted from using your data for their own purposes and are not considered "selling" or "sharing" under CCPA.
If you wish to confirm this status, opt out of any potential future selling or sharing, or request that we not provide your data to a new vendor we may add in the future, email admin@voleehaus.com with the subject "Do Not Sell or Share Request." We will respond within 15 days.
6. Cookies and analytics
We use a small number of cookies for essential functions:
- Authentication cookies — keep you logged in (set by Supabase)
- Session cookies — preserve your in-app state across page loads
- Security cookies — protect against CSRF attacks
We do not currently use third-party analytics or advertising cookies. If we add them in the future, we will update this policy and present a cookie consent banner for non-essential cookies.
You can disable cookies in your browser, but the Service may not function properly without authentication cookies.
7. Security
We take reasonable measures to protect your information, including:
- TLS encryption for all data in transit
- Encryption at rest for our Supabase database
- Row-Level Security policies ensuring users can only access their own data
- Multi-factor authentication required for admin accounts
- Limited access to production data — only authorized personnel
- Regular review of access logs and security configurations
No security system is perfect. If you suspect your account has been compromised, contact admin@voleehaus.com immediately.
8. Children's privacy
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact admin@voleehaus.com and we will delete it.
Users 13–17 may create accounts with verifiable parental consent but may not register for tournaments or paid events.
9. International users
The Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S. By using the Service, you consent to this transfer.
10. Third-party links
The Service may contain links to third-party websites (e.g., venue websites, DUPR profiles, social media). This Privacy Policy does not apply to those sites. Review their privacy policies before using them.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and post the updated policy on the Site at least 30 days before it takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
12. Contact us
Questions, concerns, or to exercise your privacy rights:
Email: admin@voleehaus.com Subject line: "Privacy Request" (for rights requests) or "Privacy Question" (general)
Mailing address: Volée Haus LLC c/o Northwest Registered Agent 3400 Cottage Way, Ste G2 Sacramento, CA 95825