Privacy Policy

StatSetter Inc. (“StatSetter,” “we,” “us,” or “our”) operates the StatSetter volleyball analytics platform, including the website at statsetter.com, the web application at app.statsetter.com, and the StatSetter mobile application (collectively, the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name and email address
• Password (stored securely via Supabase Auth — we never store plaintext passwords)
• Organization name (for Coach and Club plans)
• Subscription tier and billing information (processed by Stripe)

1.2 Player & Team Data

To provide our core stat-tracking service, we collect:

• Player names, jersey numbers, and positions
• Team names and roster information
• Match, tournament, and season metadata
• Statistical events (attacks, serves, blocks, digs, sets, receives, points, etc.)
• Player profile pictures (Individual plan)

1.3 Video & Media Data

If you use our video sync, form analysis, or highlights features, we may process:

• Video clips uploaded for AI form analysis (stored in Supabase Storage, scoped to your organization)
• Annotated frame captures (PNG screenshots with drawing overlays)
• Highlight clips created from match recordings
• YouTube video URLs and timestamps (we do not download or store YouTube videos on our servers for stat-tracking purposes)
• RTMP live stream data transmitted through the mobile app (we do not record or store your live streams)

1.4 AI Analysis Data

When you use AI-powered features (form analysis, AI insights), your video clips and statistical data are sent to Google Gemini’s API for processing. AI analysis results are stored alongside your clip metadata. We do not use your data to train AI models.

1.5 Device & Usage Data

We automatically collect:

• Browser type, operating system, and device information
• IP address and approximate location
• Pages visited, features used, and interaction patterns
• Google Analytics data (anonymized, via GA4)

1.6 Local Device Storage

Our web application uses IndexedDB (via Dexie) to store your data locally on your device for offline access and performance. This data syncs to our cloud servers when you are online. The mobile app communicates directly with our cloud servers.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the StatSetter platform
• Process and display volleyball statistics, analytics, and insights
• Perform AI-powered video analysis and generate coaching insights
• Manage your account, subscriptions, and billing
• Send transactional emails (account verification, team invitations, password resets)
• Generate public stat snapshots and scoreboard overlays when you choose to share them
• Monitor service health, performance, and security
• Respond to support requests

3. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

3.1 Service Providers

• Supabase — Database hosting, authentication, file storage, and edge functions
• Stripe — Payment processing (we never see or store your full credit card number)
• Google Gemini — AI video analysis and coaching insights (video clips are sent for processing)
• Resend — Transactional email delivery (verification emails, team invitations)
• Vercel — Website and application hosting
• Google Analytics — Anonymized usage analytics

3.2 Public Sharing (Your Choice)

Certain features allow you to share data publicly. This is always opt-in:

• Public Stat Snapshots — Read-only share URLs for match/player statistics
• Live Scoreboard Overlays — Real-time score data accessible via public URL for OBS or YouTube integration

3.3 Within Your Organization

If you are part of a team or club organization, other members of that organization can see shared team data, rosters, matches, and statistics according to their role.

3.4 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request.

4. Data Security

We implement industry-standard security measures to protect your data:

• Row-Level Security (RLS) — All database tables enforce organization-scoped access policies, ensuring users can only access their own organization’s data
• JWT Authentication — All API requests are authenticated via JSON Web Tokens verified server-side
• Encrypted Storage — Data is encrypted at rest and in transit (TLS/HTTPS)
• Scoped File Storage — Uploaded files (videos, images) are stored in organization-scoped paths with storage-level RLS policies
• Server-Side API Keys — Third-party API keys (Gemini, Resend, Stripe) are stored as server-side secrets and never exposed to the client

5. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Deleted accounts: Upon account deletion, we will delete your personal data and associated organization data within 30 days. Some data may be retained in backups for up to 90 days.
• Local data: Data stored in your browser’s IndexedDB persists until you clear your browser data or sign out (which triggers a local data reset).
• AI analysis results: Stored alongside clip metadata and deleted when you delete the associated clip or account.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your statistical data
• Withdraw consent for optional data processing
• Object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@statsetter.com.

7. Children’s Privacy

StatSetter is designed for use by coaches, parents, and athletes. We do not knowingly collect personal information from children under 13 without parental consent. Coach and Club plan accounts are managed by adult coaches or administrators. The Individual plan is intended for athletes aged 13 and older or their parents/guardians. If you believe we have collected information from a child under 13 without appropriate consent, please contact us immediately.

8. Cookies & Tracking

We use:

• Essential cookies — Authentication session tokens required for the app to function
• Analytics cookies — Google Analytics (GA4) to understand aggregate usage patterns. You can opt out using browser extensions or cookie settings.

We do not use advertising cookies or sell data to advertisers.

9. International Data Transfers

Our services are hosted in the United States. If you access StatSetter from outside the US, your data will be transferred to and processed in the US. We rely on our service providers’ data protection commitments (including Supabase, Stripe, and Google) for lawful international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

• Email: privacy@statsetter.com
• Website: statsetter.com