Privacy Policy

Your personal data is collected and processed to:

• Provide and improve the TacticalVolley service
• Manage your user account and teams
• Process your subscriptions and payments
• Contact you for customer support
• Analyze service usage to improve it
• Comply with our legal obligations
• Prevent abuse and ensure security

Data processing is based on:

• Contract performance: providing TacticalVolley service
• Legitimate interest: service improvement and abuse prevention
• Consent: for marketing communications (optional)
• Legal obligation: billing data retention

• Active account data: retained while your account is active
• Deleted account data: immediate deletion, except email retained for 1 year to prevent abuse
• Billing data: 10 years (French legal obligation)
• Cookies: maximum 13 months
• Analytics data: maximum 25 months

Your personal data is not sold to third parties. It may only be shared with:

• Technical providers: Vercel (hosting - Europe), Supabase (database - Europe), OVH (infrastructure - Europe)
• Payment services: Stripe for credit card processing
• Competent authorities: if required by law

Under GDPR, you have the following rights:

• Right of access: consult your personal data
• Right of rectification: correct inaccurate data
• Right of erasure: delete your account and data
• Right to portability: retrieve your data in a structured format
• Right to object: object to processing of your data
• Right to restriction: limit processing of your data

To exercise these rights, contact us at: support@tacticalvolley.com

TacticalVolley uses the following cookies:

• Essential cookies: user session, authentication
• Analytics cookies: Vercel Analytics to measure usage
• Preference cookies: dark/light theme, settings

You can manage your cookie preferences in your browser settings.

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS) and at rest
• Secure authentication with NextAuth.js
• Database hosted with Supabase (SOC 2 compliance)
• Continuous security monitoring
• Regular and secure backups

We primarily host and process data in the European Union. Some providers may process data outside the EU. When applicable, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data in accordance with GDPR.

TacticalVolley is not directed to children under 13 (or under the minimum age required by local law). We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us to request deletion.

For any questions regarding this privacy policy:

This privacy policy may be modified. Significant changes will be notified by email or via the application.