The data controller responsible for processing personal data through VolleyInsights is the individual operator identified on the legal notice page. For privacy inquiries, please use the contact details provided there.

This policy covers the website, authentication flows, the product itself, support interactions, and any related communications.

• Account and contact data, such as name, email address, organization, and login identifiers.
• Team and performance data, such as player names, numbers, positions, lineups, match events, and analytics generated from those records.
• Technical and usage data, such as device information, IP address, browser type, pages visited, log records, and security events.
• Support and communication data, such as emails, messages, and requests sent to us.

• To create and manage accounts and authenticate users.
• To provide team management, live stats, analytics, exports, and related product features.
• To secure the service, prevent fraud, troubleshoot incidents, and enforce our terms.
• To respond to requests, provide support, and send important product or legal notices.
• To improve usability, performance, and reliability.

Depending on the context, we process data because it is necessary to perform a contract, pursue legitimate interests, comply with legal obligations, or because consent has been obtained where required.

If you input personal data about athletes, staff, or minors, you are responsible for identifying and documenting the appropriate legal basis for that processing.

We may share data with service providers that help us host, authenticate, store, secure, maintain, and support the service, subject to confidentiality and data protection obligations.

We may also disclose data where required by law, to protect rights and security, or when necessary in connection with a merger, acquisition, or asset transfer. We do not sell personal data.

Your data may be processed in countries other than the one where you are located. When required, appropriate safeguards should be implemented, such as contractual clauses or other lawful transfer mechanisms.

Where transfers outside the European Economic Area occur, we rely on appropriate safeguards such as Standard Contractual Clauses adopted by the European Commission, adequacy decisions, or other lawful transfer mechanisms recognized under applicable law.

We keep personal data for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

Active account data is retained while your account remains open. After account deletion, residual copies in backups and logs are purged within a reasonable period, typically no longer than 90 days, unless a longer retention is required by law.

Depending on the laws that apply, individuals may have rights to access, correct, delete, restrict, object to, or port their personal data, and to withdraw consent where consent is the legal basis.

Under the GDPR, you may also lodge a complaint with your local data protection supervisory authority. Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to know what personal data is collected, to request deletion, and to opt out of the sale of personal data. We do not sell personal data. To exercise any right, contact us using the details on the legal notice page.

Because the service may be used in youth sports environments, organizations and account holders must ensure lawful handling of minors' data, including any parental or guardian authorizations required by applicable law.

We use reasonable technical and organizational measures to protect data, but no system is completely secure. We may update this policy from time to time and should publish the effective date of the latest version.