Privacy Policy

Last updated: April 28, 2026

This Privacy Policy explains how BallBall Inc. ("BallBall," "we," "us") collects, uses, and protects personal data when you use our tournament services and website at ballball.tech.

The data controller is BallBall Inc., a Delaware corporation, with its registered office at [Delaware registered office address — to be inserted]. You can contact us at privacy@ballball.tech.

Our EU representative under Article 27 GDPR is [to be appointed before EU launch — recommended: VeraSafe Ireland Limited, Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23 AT2P, Ireland, europerepresentative@verasafe.com]. Users in the European Union and the European Economic Area may contact our EU representative on any matter concerning the processing of their personal data.

1. What we collect

When you register for a tournament hosted on BallBall, we collect:

Identity data: name, email address, country, and a photograph you provide at registration.
Tournament data: the matches you play, results, opponents, and your position in the bracket.
Match video: video recordings of every match you play during the tournament.
Biometric and performance data derived from match video: physical metrics (distance covered, sprint speed, shot speed, jumps, falls, positioning) and event-level metrics (rallies, shot types, in-zone time) generated by our AI analysis.
Technical data: IP address, browser, device, and basic analytics on how you use the site.

2. Why we collect it (lawful basis)

To run the tournament and deliver your personal stats and video package — performance of a contract (Art. 6(1)(b) GDPR).
To process your photograph and biometric data through facial recognition and skeletal tracking, so your stats are correctly attached to you — your explicit consent (Art. 9(2)(a) GDPR). You give this consent at registration. You can withdraw it at any time, in which case we will delete your biometric profile and stop attaching new stats to you.
To improve our AI models — your explicit consent, with the option to opt out without losing access to the tournament service.
To communicate with you about the tournament — performance of a contract.
To send you product updates or marketing — your consent, which you can withdraw at any time via the unsubscribe link.

3. Special category data — biometric processing

Facial recognition (used to identify you in match footage) and skeletal tracking (used to derive your physical stats) constitute processing of biometric data under Article 9 GDPR. We rely on your explicit consent for this processing. If you do not consent, you cannot participate in tournaments hosted on BallBall, because the service depends on attributing video and stats to specific players.

4. Who we share it with

The host club running your tournament receives your name, results, and aggregate match data so they can administer the event.
Your match video and physical stats appear on your personal tournament page, accessible via a private link sent to you.
Aggregate, non-identifiable tournament metrics (e.g., total distance covered by all participants) may be used by the host club for social media and marketing.
Individual highlights of you may be used by the host club for social media or marketing only with your separate, optional consent at registration.
We use third-party service providers for hosting, video processing, email delivery, and analytics. These providers process data on our behalf and are bound by data processing agreements.

5. International transfers

BallBall Inc. is established in the United States. When you use our Service, your personal data is transferred to and processed in the United States by BallBall and by our hosting and infrastructure providers.

For transfers of personal data of EU/EEA, UK, or Swiss residents to the United States, we currently rely on Standard Contractual Clauses adopted by the European Commission (and the UK International Data Transfer Addendum where applicable), together with supplementary technical and organisational measures consistent with the Schrems II ruling.

We may rely on the EU–US Data Privacy Framework, the UK Extension, or the Swiss–US Data Privacy Framework once BallBall Inc. is certified under those programmes; we will update this Privacy Policy when that occurs.

You can request a copy of the safeguards we use by writing to privacy@ballball.tech.

6. How long we keep it

Identity data and tournament results: kept for as long as your account is active, plus 6 years for legal and accounting purposes.
Match video and biometric data: kept for as long as your account is active, unless you request deletion. Source video used to derive your stats is retained for up to 12 months for quality assurance, then deleted.
Marketing data: kept until you unsubscribe, plus a 24-month suppression list afterwards.

You can request deletion at any time. We will delete your data within 30 days unless we are legally required to retain it.

7. Your rights

Under GDPR you have the right to:

access the data we hold about you,
correct inaccurate data,
have your data erased,
restrict or object to processing,
receive your data in a portable format,
withdraw any consent you have given,
lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at privacy@ballball.tech.

US state privacy rights

If you are a resident of California, Delaware, Colorado, Connecticut, Virginia, or another US state with a comprehensive privacy law, you have additional rights under your state law, including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the "sale" or "sharing" of personal information.

BallBall does not sell personal information and does not share it for cross-context behavioural advertising. To exercise any state-level right, contact us at privacy@ballball.tech. We will verify your request and respond within the timeframe required by your state law.

8. Cookies

We use a small number of cookies for essential site functionality and analytics. You can manage your preferences via the cookie banner shown on your first visit, and at any time by clearing cookies in your browser.

9. Children

BallBall is intended for users aged 16 and over.

For participants in the EU/EEA who are under 16, registration must be completed by a parent or legal guardian, who provides consent on the child's behalf in accordance with Article 8 GDPR.

For participants in the United States who are under 13, registration must be completed by a parent or legal guardian in accordance with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have collected such information, please contact us at privacy@ballball.tech and we will delete it.

10. Changes to this policy

We will notify you of material changes by email and by updating the "Last updated" date at the top of this policy.

11. Contact

For privacy questions, data subject requests, or to withdraw consent:

Email: privacy@ballball.tech
Postal: BallBall Inc., [registered office address — see top of policy]
EU/EEA users may contact our EU representative directly (see top of policy).

For Terms of Service questions: legal@ballball.tech.

← Back to BallBall.tech