Privacy Policy

1. Who we are This Privacy Policy explains how DrillStack LLC ("DrillStack," "we," "us"), a Massachusetts limited liability company, collects, uses, and shares information when you visit our website or use the DrillStack basketball coaching platform (the "Service"). It applies to coaches, club and school administrators, and other people who create accounts or visit our site. It does not apply to information a school or club handles outside the Service. Effective date: September 23 2026 Contact: support@drillstack.app · DrillStack LLC, Massachusetts 2. Information we collect Category Examples Source Account information Name, email, password, organization (club or school), role You Billing information Billing name, address, organization, plan, invoice and payment status You Coaching content Drills, practice plans, notes, rosters, and anything typed into free-text fields, which may include player names You Communications Support emails and feedback You Usage and device data Pages viewed, features used, IP address, browser, device type, timestamps Collected automatically Cookie and pixel data Cookie IDs, ad click IDs, conversion events on our marketing website Collected automatically (see Section 6) We do not ask for, and you should not enter, sensitive information about players such as health or injury details, Social Security numbers, home addresses, or photos of minors, unless a future feature is specifically designed and disclosed for it. 3. How we use information Provide the Service: create and secure accounts, store and display your coaching content, and provide support. Billing: send invoices, record payments, and manage subscriptions. Communicate: send account, security, billing, and service notices, and, where permitted, product updates you can unsubscribe from. Improve and protect the Service: fix bugs, measure feature use, and prevent fraud and abuse. Marketing: measure and improve our advertising using data from our marketing website (never from coaching content). Legal: comply with law and enforce our Terms of Service. We do not use coaching content, including player information, for advertising. We do not use it to train artificial intelligence models, and we do not sell it. If you are in the EU or UK, our legal bases are: performing our contract with you, our legitimate interests in running and improving the Service, your consent (for non-essential cookies and marketing), and legal obligations. 4. Content you enter, including player names DrillStack is for adult coaches. Players do not use the Service or create accounts, and the Service is not directed to children. Practice plans include optional free-text fields. Some coaches type in the names of players attending practice so the printed plan shows team or pinnie assignments. Entering names is never required. We only store it for you. We keep what you type so you can view, edit, and print your plans. We do not analyze it, build player profiles, use it for advertising, or share it except with the service providers that host the Service. You are responsible for what you enter. Only enter information you have the right to share, and keep it to what you need, such as first names. Do not enter health, medical, or other sensitive information about players. Removing it. You can edit or delete any practice plan at any time. Parents or players with questions about information a coach entered should contact that coach or their organization, or email us at support@drillstack.app. 5. How we share information We do not sell personal information for money. We share it only as follows: Recipient Purpose What they receive Lovable (and its infrastructure providers) Application hosting, database, authentication, and app emails All Service data Zoho Our business email and support Emails you send us [Invoicing/accounting provider, e.g., Zoho Invoice or QuickBooks] Invoicing and payment records Billing information Google and Meta Advertising measurement on our marketing website Cookie and pixel data only (see Section 6) Professional advisers Legal, accounting, and audit As needed Authorities When required by law or to protect rights and safety As required A buyer or successor If DrillStack is sold, merged, or reorganized Service data, under this Policy's protections Our service providers may use your information only to provide services to us.  If you belong to a club or school account, that organization's administrators can see content in its account. 6. Cookies, pixels, and advertising choices We use advertising pixels from Google and Meta only on our public marketing website, never inside the logged-in Service. They help us measure which ads lead to sign-ups and show DrillStack ads to people who visited our site. Under some U.S. state laws, this can count as "sharing" personal information or "targeted advertising." You can opt out at any time: Use the "Your Privacy Choices" link in our website footer. Turn on Global Privacy Control in your browser. We treat it as an opt-out. Adjust your ad settings with Google and Meta. If you are in the EU or UK, we will not set non-essential cookies unless you consent through our cookie banner. Essential cookies that keep you signed in and secure cannot be turned off. 7. Retention, security, and data location Retention. You can delete practice plans in the app at any time. To close your account, email [privacy@YOURDOMAIN]. Otherwise we keep information only as long as needed, then delete it: Data How long we keep it Account and coaching content While the account is active, then deleted within [90] days of account closure or a deletion request Backups Deleted on a rolling [30]-day cycle Billing records [7] years, for tax and accounting law Usage logs [12] months Marketing cookie and pixel data Per our cookie banner settings, no longer than [13] months Security. We use encryption in transit and at rest, and access controls. No system is perfectly secure. If a breach affects your information, we will notify you and regulators as the law requires. Location. DrillStack is based in the United States. Our hosting and other service providers may store and process information in the United States and other countries where they operate. By using the Service, you understand your information may be processed outside your home country. For EU and UK users, we rely on appropriate safeguards such as Standard Contractual Clauses. 8. Your rights and choices Wherever you live, you can ask us to: Access the personal information we hold about you and get a portable copy. Correct inaccurate information. Delete your information. Opt out of targeted advertising and "sharing" (see Section 6). Unsubscribe from marketing emails using the link in any email. Service and billing notices will still be sent. Depending on where you live (for example, California or the EU/UK), you may have more rights, such as objecting to or restricting processing, or complaining to a data protection authority. We will not treat you differently for using any of these rights. How to ask. Email support@drillstack.app. We will verify your identity and respond within 45 days, or 30 days where EU/UK law applies. You may use an authorized agent. If we deny your request, you can appeal by replying to our decision, and we will respond within 60 days. If your information is in a club or school account, we may refer your request to that organization, because it controls that information. 9. Changes and contact We may update this Policy. If we make material changes, we will email account holders and post a notice in the Service at least [30] days before they take effect. The effective date at the top shows the latest version. Questions or requests: support@drillstack.app · DrillStack LLC, Massachusetts.