Privacy Policy

1. Introduction

Welcome to InstaCourts ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our pickleball court booking platform at insta-courts.com and its subdomains (collectively, the "Platform").

By using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

When you use our Platform, we may collect:

• Account Information: Name, email address, phone number when you sign up via Google OAuth
• Booking Information: Court preferences, booking dates and times, payment information
• Payment Information: Processed securely through PayMongo (we do not store complete credit card details)
• Court Owner Information: Business details, bank account information for payouts, court descriptions and photos
• Communications: Messages, feedback, and support requests you send to us

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, click patterns
• Device Information: Browser type, operating system, IP address
• Cookies and Tracking: Session cookies for authentication and user preferences

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our booking platform
• Process your court bookings and payments
• Send booking confirmations and reminders
• Enable court owners to manage their courts and receive payments
• Communicate with you about your bookings, account, or platform updates
• Improve our services and user experience
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services:

5. Data Sharing and Disclosure

We may share your information:

• With Court Owners: Your booking details (name, phone, booking time) are shared with the court owner you book with
• Service Providers: Third parties who provide services on our behalf (payment processing, email delivery)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with any merger, sale, or acquisition of our business
• With Your Consent: When you explicitly agree to share information

We do NOT sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure authentication via Google OAuth
• Row-level security policies on our database
• Regular security updates and monitoring
• PCI-DSS compliant payment processing

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records, transaction history)
• Resolve disputes and enforce our agreements

You may request deletion of your account and associated data at any time, subject to legal retention requirements.

Court recordings and AI rally analysis are a specific, shorter exception to the above: video recordings of court sessions are retained for 7 days after capture, then automatically deleted. At courts where AI-assisted rally analysis is enabled (see Section 4), any AI-derived rally score is retained for that same 7-day window, measured from when the score was produced. Within a day of the end of that window, everything linking a score to a specific match, booking, session, or court is deleted — we keep only non-identifying statistics afterward, used to evaluate how well the analysis performs.

Open Play check-in photos are a separate, shorter case again. If an Open Play session has photo capture switched on, the kiosk invites you to take an optional photo at check-in so your face shows on the session's TV board. We delete that photo the day after the session date, so we keep it for roughly a day. After it is deleted, the board falls back to the photo on your Google account if you signed in with Google, and otherwise shows your initials. Photos an organizer uploads for a player themselves are not covered by this and are kept until the organizer removes them.

One limit on that deletion we would rather state than gloss over: the screens that display check-in photos show them through an image service, and that service keeps its own smaller, resized copy. Deleting the original does not delete the service's copy, which can remain reachable for up to a month afterwards. It is not shown on any board or listed anywhere once we delete the original, and reaching it requires having saved the image's web address beforehand — but it is not deleted at the same time as the original, and we would rather you knew that than have us describe the deletion as complete.

8. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Data Portability: Receive your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent for data processing where applicable
• Object: Object to certain types of data processing

To exercise these rights, please contact us at the information provided below.

9. Children's Privacy

Minors participate in our Open Play sessions. We do not collect date of birth or otherwise verify age for Open Play sign-up, so we cannot and do not age-gate participation. The recording, promotional-use, and AI rally analysis disclosures in this policy (Sections 4 and 7) apply to every participant in a recorded session regardless of age. If you are a parent or guardian with questions or concerns about a minor's participation, please contact us using the information in Section 12.

10. International Data Transfers

Your information may be transferred to and processed in countries outside of the Philippines, including the United States where our service providers (Supabase, Vercel) operate. At courts where AI-assisted rally analysis is enabled, still frames extracted from recorded footage are also processed by Google (Vertex AI), which may occur outside the Philippines (see Section 4). We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173).