Draft for review — not yet reviewed by a lawyer.

Privacy Policy

Last updated: 23 July 2026

1. Who we are

This Privacy Policy explains how Treline Co ("we", "us") collects, uses, and protects personal data through Courtside (treline.co) and its apps (Rosters, Academy, Matchboard).

2. What we collect

Account data: name, email, password (hashed), organization name, role. Player/coach/roster data: names, contact details, team assignments, attendance, and similar records that Organizations enter to run their teams — entered by the Organization, not directly by us. Billing data: handled by Stripe on our behalf; we store subscription status and plan details, not full card numbers. Usage data: log-in activity, device/browser information, and basic analytics to keep the Service reliable and secure.

3. Who enters player and coach data

Courtside is a B2B tool: Organizations (clubs, academies) are the ones who add player, parent, and coach information. Where a player is a minor, the Organization is responsible for obtaining any consent required (e.g. from a parent or guardian) before entering that child's data into Courtside. We act as a data processor for this data on the Organization's behalf.

4. How we use it

To provide and operate the Service (accounts, rosters, scheduling, billing). To communicate with you (service notices, billing, support, optional product updates). To keep the Service secure and prevent abuse. To improve Courtside based on aggregated, non-identifying usage patterns. We do not sell personal data.

5. Who we share it with

Stripe — payment processing. [PLACEHOLDER — hosting provider, e.g. Hostinger, and email/SMTP provider once wired up.] We may disclose data if required by law, or to protect the rights, safety, or property of Treline Co, our users, or others. We don't share Organization data with other Organizations.

6. Data retention

We keep data for as long as your account is active. If an Organization closes its account, we'll delete or anonymize its data within [PLACEHOLDER — e.g. 90 days], except where we need to retain records for legal, billing, or security reasons.

7. Security

We use industry-standard measures (encrypted connections, hashed passwords, access controls) to protect your data. No system is 100% secure, and we'll notify affected users if we become aware of a breach affecting their data, as required by law.

8. Children's data

Courtside itself is intended for use by adults (coaches, club staff, parents) managing club operations. Player records may include information about minors, entered and controlled by the Organization as described in Section 3 — we don't knowingly collect data directly from children, and player accounts (where they exist) are set up and managed by an Organization or parent/guardian.

9. Your rights

Singapore's Personal Data Protection Act (PDPA) gives you rights to access and correct your personal data held by us. If you're located outside Singapore, other data protection laws that apply to you (e.g. the EU GDPR or your local equivalent) may give you additional rights. To exercise any of these, contact us at [PLACEHOLDER — contact email]. Organization admins can also manage most player/coach data directly within Courtside.

10. Cookies

We use essential cookies to keep you logged in and Courtside functioning. [PLACEHOLDER — add if/when analytics or marketing cookies are introduced.]

11. Changes to this policy

We may update this Privacy Policy from time to time. We'll notify you of material changes before they take effect.

12. Contact

Questions about this policy: [PLACEHOLDER — contact email].