Legal
Privacy Policy
This Privacy Policy explains what information ToloCourt (operated by Tolotech LLC, "we", "us") collects, how we use it, and the choices you have. It applies to the ToloCourt platform, websites, and applications (the "Service").
Plain-language summary (not a substitute for the full policy): We collect the information you give us (name, email, phone, bookings) and a little technical data needed to run the app. We use it to operate the Service, process payments through Stripe, and send the notifications you opt into. If you use our optional AI setup assistant, the text you type is sent to an AI provider to suggest courts and pricing. We don't sell your personal information.
1Information we collect
We collect the following categories of information:
- Account information — your name, email address, and (if you provide it) phone number, plus your hashed password. We never store your password in plain text.
- Club & booking information — courts, sessions, reservations, memberships, waiver signatures, and notification preferences.
- Payment information — handled by Stripe. We receive limited details such as a payment confirmation and the last digits/brand of a card; we do not store full card numbers.
- Technical information — basic data needed to operate and secure the Service, such as your IP address (used for rate-limiting and abuse prevention) and a signed session cookie that keeps you logged in.
- AI assistant input — if you choose to use our optional AI club-setup assistant, the description you type (for example your club name, city, and the courts you offer) is processed to generate setup suggestions. See "Artificial intelligence (AI) features" below.
2How we use information
- to provide the Service — create your account, show availability, process bookings and memberships;
- to process payments and payouts through Stripe;
- to send transactional notifications you opt into (booking confirmations, payment receipts, reminders) by email and/or SMS;
- to secure the Service — detect, prevent, and respond to fraud, abuse, and security incidents;
- to comply with legal obligations and enforce our Terms.
2aCookies
We use a single, essential cookie to keep you signed in. It is signed, set as HttpOnly and SameSite=Lax, and served over HTTPS. We do not use third-party advertising or tracking cookies.
2bArtificial intelligence (AI) features
Some features use third-party AI to provide optional, assistive suggestions — for example, our setup assistant turns a short description of your club into suggested courts and prices. When you use such a feature, the text you submit is sent to our AI provider, DeepSeek, which generates a response. The AI provider may retain and use the text you submit to operate, develop, and improve its services, including to train its models, under its own terms. These outputs are suggestions only: you review, edit, and confirm everything before it takes effect, and you can set up and use the Service without ever using an AI feature. Please don't enter sensitive personal information into AI prompts.
International transfer. Our AI provider may process the text you submit on servers located outside the United States, including in other countries. By choosing to use an AI feature, you understand that the information you enter into it may be transferred and processed in those locations. We do not send your name, email, phone number, or payment details to the AI provider as part of these features.
2cSMS / text messaging
If you provide a mobile number and turn on text notifications, we send transactional messages only — booking confirmations, waitlist openings, payment receipts, and reminders about your reservations. We do not send marketing or promotional texts. Message frequency varies with your activity (typically a few messages per booking). Message and data rates may apply.
Opt-in. You opt in by entering your mobile number and enabling the “Text me” setting in your account. Consent to receive texts is not a condition of using the Service or of any purchase.
Opt-out. You can opt out at any time by turning off the “Text me” setting in your account, or by replying STOP to any message. Reply HELP for help, or contact us at support@tolocourt.com.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except with our SMS delivery provider and carriers solely to deliver the messages you requested.
3How we share information
We do not sell your personal information. We share it only as needed to run the Service:
- With the Club you book with — so it can manage your reservations and memberships.
- Service providers who process data on our behalf, including Stripe (payments), Resend (email delivery), Twilio (SMS delivery, where enabled), DeepSeek (AI setup suggestions, only when you use an AI feature), and our hosting and database providers.
- Legal & safety — when required by law, or to protect the rights, property, or safety of ToloCourt, our users, or the public.
4Data retention
We keep your information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data (see "Your choices" below); some records may be retained where required by law.
5Security
We protect your data with industry-standard measures: passwords are hashed, sessions are signed and HttpOnly, traffic is encrypted in transit (HTTPS/HSTS), payment card data is handled by Stripe, and login and account endpoints are rate-limited. No method of transmission or storage is 100% secure, but we work to safeguard your information.
6Your choices & rights
- Notifications — adjust your email and SMS preferences in your account settings at any time.
- Access & correction — view and update your account information in the app.
- Deletion — request that we delete your account and personal data by contacting us.
- Depending on where you live (for example, under U.S. state privacy laws), you may have additional rights to access, correct, delete, or limit the use of your personal information. We will honor valid requests as required by applicable law.
7Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
8Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
9Contact
Questions or requests about your privacy? Email us at support@tolocourt.com.