Privacy Policy

1. Data controller

The controller of your data is NapsixAI, operator of the Padel365 platform.

• General contact: hola@padel365.app
• Privacy and data requests: privacidad@padel365.app
• Site: https://padel365.app

2. Data we collect

We collect the following types of information:

• Account data: name, email address, phone and preferred language.
• Third-party sign-in data (Google and, soon, Meta/Facebook): email address, name and profile picture that the provider shares when you choose to authenticate with them.
• Profile data: avatar, skill level, preferred position, city and country (whatever you choose to add).
• Activity data: court bookings, tournament and lesson registrations, memberships, reviews and used-gear listings.
• Payment data: metadata of transactions processed by Mercado Pago (we do not store your full card details).
• Technical data: IP address, device and browser type, and session identifiers needed to authenticate you.

3. How we use your data

We use your information to:

• Create and manage your account and authenticate you securely.
• Let you book courts, register for tournaments and lessons, and shop in the store.
• Process payments through Mercado Pago and issue receipts.
• Send you transactional and operational email notifications (confirmations, password recovery, reminders).
• Show your public profile (name and avatar) in rankings, tournaments and club communities where applicable.
• Prevent fraud and abuse and keep the platform secure.
• Comply with legal and accounting obligations.

4. Legal basis

We process your data on the following bases: performance of the contract (providing the Service you request), your consent (for example, when signing in with an external provider), our legitimate interest (security and improvement of the Service), and compliance with legal obligations.

5. Who we share your data with

We share data only with the providers necessary to operate the Service, under data-processing agreements:

• Supabase: database, authentication and file storage (infrastructure hosting).
• Mercado Pago: payment processing.
• Resend: transactional email delivery.
• Google: “Sign in with Google” authentication (when you use it).
• Meta/Facebook: “Sign in with Facebook” authentication (upcoming phase, when enabled).
• Vercel and Cloudflare: application hosting and content delivery.
• Your club: when you book or join their events, the club sees the data needed to manage them (name, contact, activity at their club).

We do not sell your personal data to third parties.

6. Signing in with Google and Meta

If you choose to sign in with Google or Meta/Facebook, we receive from that provider only your email address, name and profile picture, solely to create and authenticate your Padel365 account.

We do not post anything on your behalf, and we do not access your contacts, posts or other information from those accounts. You can revoke access at any time from your Google or Meta account security settings.

Padel365’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

7. Data retention

We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data, except what we must keep for legal or accounting obligations (for example, payment records) for the period required by law.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request deletion of your data.
• Request a portable copy of your data.
• Object to or restrict certain processing and withdraw your consent.

To exercise any of these rights, write to privacidad@padel365.app.

9. Data deletion

You can request deletion of your account and personal data in two ways:

• By emailing privacidad@padel365.app with the subject “Data deletion” from the address associated with your account.
• From your account settings in the app, when the deletion option is available.

We will process your request within 30 days. We will delete or anonymize your personal information, keeping only what the law requires us to retain (for example, payment receipts). If you signed in with Google or Meta, you can also revoke Padel365’s access from that provider’s account settings.

10. Cookies and similar technologies

We use strictly necessary cookies to keep you signed in and for the secure operation of the Service. We do not use third-party advertising cookies. You can block cookies in your browser, but some features may stop working.

11. Security

We apply technical and organizational measures to protect your data: encryption in transit, password hashing, role-based access control, per-club data isolation (Row Level Security) and encrypted storage of sensitive credentials. No system is 100% infallible, but we work to minimize risks.

12. Minors

The Service is intended for adults or for minors with the authorization and supervision of a parent or guardian. We do not knowingly collect data from minors without such authorization.

13. International transfers

Our providers may process data on servers located outside your country (for example, in the United States). In those cases we apply appropriate safeguards to protect your information under applicable law.

14. Changes to this policy

We may update this Privacy Policy. We will publish the current version on this page with its update date. Significant changes will be communicated by email or within the app.

15. Contact

For any questions about this policy or your personal data, write to privacidad@padel365.app.