Privacy Policy

CourtHubs is a management platform for court clubs and arenas (beach tennis, padel, tennis, futsal and other court sports). We are the controller of the personal data processed through our services under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018).

This policy covers: (a) the marketing site courthubs.com; (b) the web platform app.courthubs.com; and (c) the CourtHubs mobile app.

Contact for the controller and our data protection officer: courthubs2@gmail.com · WhatsApp +55 (45) 9 8812-8155.

Account data: name, email address, phone number, username and password. Passwords are stored only as a cryptographic hash — never in readable form, not even to us.

Profile and approximate location: city, state and postal code, when you provide them to find nearby clubs.

Platform usage data: court bookings you make or cancel, classes you are enrolled in, attendance and absences recorded, equipment reserved, and the history of those activities.

Consumption and billing records: items charged to your tab at a club, class fees and related financial entries. CourtHubs records these amounts on behalf of the club — we do not process payments and we never collect or store credit card, debit card or bank account details.

Technical and security data: IP address, browser and device type, and access logs. We use these to throttle abusive login attempts, prevent fraud and keep the service running.

Notification tokens: an identifier for your browser or device, generated only if you opt in to notifications.

You can create an account or sign in to CourtHubs using your Google account. If you do, we receive only three pieces of basic profile information from Google: your email address, your name and a unique identifier for your Google account.

We request only the openid, email and profile scopes. We do not request and cannot access your Gmail content, your contacts, Google Drive, your calendar, your photos or any other data in your Google account.

We use this information solely to create your account, identify you at sign-in and link access to an existing CourtHubs account with the same email address. We do not use data obtained from Google for advertising, we do not sell it, and we do not transfer it to third parties for marketing purposes.

You can revoke CourtHubs' access to your Google account at any time at myaccount.google.com/permissions. This disables Google sign-in but does not automatically delete your CourtHubs account — see the section on deleting your account.

To create and maintain your account, authenticate you and keep you securely signed in.

To let you find clubs, book courts, enrol in classes and follow your schedule and history.

To let the club where you play or train manage bookings, classes, attendance and the items charged to your tab.

To send operational and security messages: email confirmation, verification codes, password resets, booking and class notices, and the notifications you opted into.

To prevent fraud, abuse and unauthorised use, and to comply with legal obligations.

We process your data under Article 7 of the LGPD, as applicable: performance of a contract or preliminary steps to one, in order to deliver the service you requested; compliance with a legal or regulatory obligation; legitimate interests, for security, fraud prevention and service improvement; and consent, for analytics cookies, notifications and non-essential communications.

We record the date, time and version of this policy you accepted when creating your account, as evidence of consent.

CourtHubs is the tool clubs use to run their operations. When you book a court, enrol in a class or have items charged to your tab at a club, that club's authorised administrators, coaches and staff can see your name, phone number, email address and the history of your relationship with them.

Each club is responsible for how it uses that data within its own operation. A club cannot see your data at any other club.

We do not sell your personal data and we do not share it for third-party advertising.

We share data only with service providers acting on our behalf and under our instructions: Hetzner (infrastructure hosting), Resend (transactional email delivery), Google LLC (sign-in and, on the marketing site, analytics), and the push notification services of your browser or device vendor (Google, Apple, Mozilla, Microsoft).

We may disclose data where required by law, court order or a request from a competent authority.

When you click to reach us on WhatsApp, you are directed to Meta's app, which is subject to Meta's own privacy policies.

Some of our providers process data outside Brazil, on servers in Europe or the United States. In those cases we apply the safeguards set out in Articles 33 to 36 of the LGPD, requiring providers to maintain a level of protection compatible with Brazilian law.

On the marketing site we use Google Analytics (Google LLC) to understand, in aggregate, how visitors navigate. These cookies are set only after you consent via the banner shown on your first visit, and you can decline without any loss of functionality.

On the platform we use strictly necessary cookies to keep your session authenticated. Sign-in does not work without them, so they do not require consent.

If you opt in, we send notifications about bookings, classes and club announcements. Opting in is optional and can be revoked at any time in your browser or device settings. When you sign out, we remove that device's notification registration.

We keep your account data for as long as the account exists. Booking, class and financial records are kept for as long as they are needed for the club's operation and to meet legal, accounting and tax obligations.

Verification codes, password reset tokens and sessions expire automatically after a short period and are discarded.

You can delete your athlete account at any time from within the app, under Profile, using the Delete account option.

If you have a password, confirm with it. If you signed in with Google and never set a password, we email a confirmation code to your account address and you enter it on the same screen — neither case requires contacting us.

Deletion removes your registration, your personal data and your future bookings. Past bookings are unlinked from your name and remain anonymised in the club's history, to preserve the integrity of its financial and operational records.

Club, coach and staff accounts are deleted on request by email at courthubs2@gmail.com, because they involve operational data shared with the club. We will process it within the statutory period.

The LGPD gives you the right to confirm that processing exists, access your data, correct incomplete or outdated data, request anonymisation, blocking or deletion of unnecessary data, request portability, be told who we share your data with, withdraw consent, and object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, write to courthubs2@gmail.com. We may ask for additional information to verify your identity before acting on the request.

Passwords are stored only as a cryptographic hash. All traffic between you and the platform is protected with TLS. Database access is restricted, and sessions can be invalidated remotely if we suspect a compromise.

No system is completely immune. If a security incident occurs that may pose a material risk to your rights, we will notify you and Brazil's National Data Protection Authority in accordance with Article 48 of the LGPD.

Platform accounts are intended for people aged 18 or over.

Children and adolescents may nonetheless have data processed here without holding an account of their own — for instance, students enrolled in children's classes by a club or by their legal guardian. In that case processing is carried out in the minor's best interests and with the specific consent of a parent or guardian under Article 14 of the LGPD, which the club is responsible for collecting and evidencing.

We may update this policy. The current version will always be on this page, with the date it was last updated. We will announce material changes in the app or by email before they take effect.

Questions, requests or complaints about privacy: courthubs2@gmail.com · WhatsApp +55 (45) 9 8812-8155.

You may also file a complaint with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.