Privacy Policy
Last updated: October 2026
We believe you have a right to know exactly what happens with your data. Written in plain language — no legalese. Questions? Just ask.
1. Data We Collect
We only collect data that helps us run the platform and serve you better.
Account & Profile
- ✓Name and email address (all users)
- ✓Date of birth, gender, state, playing hand, backhand style (players)
- ✓AITA ID — optional, used for ranking lookups (players)
- ✓Academy name, city, state, and contact details (academies)
- ✓Academy logo image (uploaded by academy accounts)
Performance & Tournament Tools
- ✓Match results, scores, and round information via the Performance Tracker
- ✓Self-reported match notes, strengths, and weaknesses
- ✓Coaching tools data — mind maps, points plans, opponent evaluations, strategies
- ✓Seedings and bracket positions for tournaments you are part of
- ✓Live scoring point logs stored per match
Tournament Registrations & Payments
- ✓Player name, date of birth, mobile number, and gender when you register for a tournament
- ✓Optional GSTA ID and doubles partner name, plus the categories you enter
- ✓Payment success screenshot you upload as proof — stored privately, never publicly
- ✓Payment details read from that screenshot (amount, date & time, reference number, app) to verify your payment
- ✓Entry fees are paid by you directly to the organizer’s UPI ID — we never see your UPI PIN or bank credentials
Usage & Technical
- ✓IP address — used for rate limiting and abuse prevention, nothing more
- ✓CAPTCHA checks (Cloudflare Turnstile) on public forms to block bots
- ✓Contact form submissions including your message and email
- ✓Session tokens in secure HTTP-only cookies for authentication
- ✓Pages visited and interactions, collected as anonymised, aggregate usage statistics via Google Analytics 4
- ✓No advertising networks and no cross-site ad trackers of any kind
Public Sports Data
- ✓AITA rankings and AITA tournament calendar and draw information, imported from publicly accessible official AITA sources
- ✓GSTA player lists, imported from publicly accessible GSTA sources — used to look up and verify your GSTA ID when you register
- ✓All of this data is already publicly accessible; it is not collected from you
- ✓It is used only to power rankings, searches, seeding, and registration verification
2. How We Use Your Data
Your data is used exclusively to operate and improve the platform.
- ✓Create and manage your account; authenticate you on the platform
- ✓Send email verification, password reset, and account status notifications
- ✓Display your player profile and match history within the platform
- ✓Generate PDF performance reports for players and coaches
- ✓Match players against public AITA and GSTA data for lookups and automated tournament seeding
- ✓Process your tournament registrations and verify your payment proofs for the organizer
- ✓Run public tournament pages — draws, results, and live scores
- ✓Notify academy accounts of approval or rejection decisions
- ✓Respond to contact form enquiries
- ✓Keep the platform secure — rate limiting, spam and bot defence, audit logs of administrative actions
3. Data Sharing
We do not sell, resell, rent, or trade your personal data, and we do not share it with third parties for advertising or any other commercial purpose. Data moves only where the service you asked for requires it:
The tournament organizer you register with
When you register for a tournament, your registration details (name, date of birth, mobile number, gender, GSTA ID, partner, categories) and your payment verification status are visible to that organizer — they need them to run the event and confirm your entry.
Public scoreboards & tournament pages
Your name, draw position, match results, and live scores appear on public tournament pages — the same information spectators see at any tournament.
Email delivery
We use an email service provider to send transactional emails (verification, password resets, notifications). Your email address is transmitted solely for that purpose.
Cloudflare Turnstile (CAPTCHA)
Public forms are protected by Cloudflare’s Turnstile CAPTCHA to block bots. The check happens in your browser; no personal data is stored by it.
Google Analytics (usage statistics)
We use Google Analytics 4 to understand how the platform is used — which pages are visited and roughly what device and region they are visited from. This is aggregate, anonymised statistics only: no names, emails, or registration details are ever sent to analytics.
Legal obligations
We may disclose data if required by law or to protect the safety and rights of our users.
That is the complete list. No advertisers, no data brokers, no resale of any kind — and nothing beyond anonymised usage statistics ever leaves the platform.
4. Storage & Security
Your data is stored on secured servers. We use HTTPS/TLS, hashed passwords, HTTP-only session cookies, and strict access controls. Payment proof screenshots are stored in private storage, visible only to the tournament organizer and site administrators — never publicly.
We never store card numbers or UPI credentials — entry fees are paid directly from your UPI app to the organizer’s UPI ID. No system is completely secure — use a strong, unique password for your account.
Where your data lives: our servers are hosted outside India (United States), and some of the services we rely on — Google Analytics, Cloudflare (CAPTCHA), and our email delivery provider — also process data outside India. Cross-border transfers of personal data are permitted under India’s DPDP Act unless the government restricts transfers to a country, and no such restriction applies as of this policy’s date.
5. Data Retention
We retain account data while your account is active. Tournament registrations, payment records, match results, and public sports data are kept to preserve historical accuracy of the platform’s records. Security and activity logs are kept for up to one year.
To delete your account or specific data, email support@tennis.university and we will remove it, except where records must be kept for a completed tournament’s integrity.
Before we erase data on your request, we will send you a short notice (about 48 hours ahead) so an incorrect request can still be stopped in time.
6. Your Rights
You have full control over your personal data.
- ✓Access the personal data we hold about you
- ✓Request correction of inaccurate or incomplete data
- ✓Request deletion of your account and associated personal data
- ✓Block analytics cookies in your browser at any time — the platform works fully without them
- ✓Ask how your data has been used at any time
To exercise any of these rights, email support@tennis.university. We respond to requests within 30 days. Withdrawing consent is as easy as giving it — the same email works.
Not satisfied with our response? Escalate to our Grievance Officer (see Section 9) — grievances are resolved within 90 days of being received.
7. Children’s Privacy
Tennis.University serves junior players, many of whom are under 18. Under India’s Digital Personal Data Protection Act, anyone under 18 is a child: their data may only be processed with the consent of a parent or legal guardian.
That is why every tournament registration and player account for an under-18 player is completed by a parent or legal guardian, who confirms their role and name and gives consent at the form itself. We record who consented and when, alongside the registration or account.
We do not track, profile, or target advertising at children — we run no advertising of any kind (see Section 8). If you are a parent or guardian and believe your child’s data was registered without your consent, contact us and we will remove it promptly.
8. Cookies
Essential cookies
Required for authentication and session management. Cannot be disabled without breaking the platform.
CAPTCHA (Cloudflare Turnstile)
Runs on public forms to keep bots out. It does not track you across sites.
Analytics cookies (Google Analytics 4)
Record anonymised, aggregate usage of the platform — which pages are popular, device types, and broad regions. They never identify you personally, and you can block them in your browser without affecting the platform.
No advertising cookies
We run no advertising networks, ad pixels, or cross-site ad trackers of any kind.
9. Changes & Contact
We may update this policy from time to time. When we do, the “Last updated” date at the top will change. Continued use of the platform constitutes acceptance.
Grievance Officer
For any complaint about how your personal data is handled — or to escalate a rights request you are not satisfied with — write to our Grievance Officer:
Grievance Officer, Tennimax (Tennis.University) — support@tennis.university
We acknowledge complaints within 72 hours and aim to resolve grievances within 30 days — and in any case within 90 days of the grievance being received.
Questions about this policy? Email support@tennis.university or use the contact form.