Privacy policy

1. What we collect

Account details: your name, email address, profile picture and, if you add it, mobile number. Name, email address and picture come from Google when you sign in (see Signing in with Google below).

Booking and game activity: the courts you book, the games you join or organise, attendance marked by organisers, and the reliability score derived from it.

Payment records: the amount, time and status of each QR Ph payment and the payment reference returned by our payment aggregator. We never see or store your bank or e-wallet credentials. If we owe you a refund or shares, we store the destination account name and number you give us so we can send the transfer.

Venue details: for court owners and their contact person, name, role and mobile number from the application, identity confirmed in person at the verification visit, GPS coordinates captured at the court, and the bank account used for payouts.

Technical data: IP address, device and browser type, and server logs kept for security and debugging.

2. Signing in with Google

CourtLot uses Google Sign-In as its only way to sign in. When you sign in, Google shares your name, email address and profile picture with us, along with a Google account identifier. That is all we request: we never ask for access to your Gmail, Drive, Calendar, Contacts or any other Google data.

We use this Google user data only to create and identify your CourtLot account, show your name to venues and to the organiser of a game you join, send you booking and game emails, and let you sign back in. We store it in our database for as long as your account exists.

We do not share Google user data with anyone except the service providers listed below, who process it only to run CourtLot. We do not sell it, use it for advertising, use it to train artificial-intelligence models, or let any person read it except as needed to operate the service or when you ask us to.

CourtLot's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove CourtLot's access at any time from your Google Account permissions page (myaccount.google.com/permissions). Asking us to delete your account also deletes the Google user data we hold.

3. Why we use it

To run the service: confirming bookings, settling payments, paying venues, sending refunds and shares to your account, and notifying you about games you are part of.

To keep the platform honest: verifying venues in person, showing organisers a joiner's reliability score, and investigating reports of courts that are not as listed.

To meet legal obligations, including tax and accounting records for payments and payouts.

We do not sell personal data and we do not use it for advertising.

4. Who we share it with

Venues see the name of the player who booked and, for games, the names on the roster. Organisers see the names and reliability scores of players who join their game.

Service providers who process data on our behalf: Google (sign-in), our payment aggregator (for QR Ph collection and disbursements), our database and file hosting, and our email provider. Each is bound by contract to use the data only to provide the service.

Authorities when required by law, or to protect the safety of players and venues.

5. How long we keep it

Payment and payout records are kept for ten years to meet Philippine accounting and tax rules. Booking history is kept while your account exists. Verification documents for venues are kept while the venue is listed and for two years after.

You can ask us to delete your account. We will delete or anonymise everything except records we are legally required to keep.

6. Your rights

Under the Data Privacy Act you may access, correct, or ask us to delete your personal data, object to processing, and request a copy in a portable format. Email support@courtlot.com and we will respond within fifteen working days.

You may also lodge a complaint with the National Privacy Commission.

7. Security

Data is encrypted in transit and at rest. Payment collection and disbursement are handled by a BSP-supervised aggregator; we hold no card or bank credentials. Access to venue verification documents is limited to platform staff.

8. Contact

Privacy questions, access or deletion requests, and complaints go to support@courtlot.com. A person reads every message and replies within fifteen working days.