Effective date: October 15, 2026
This Privacy Policy explains what personal information TopSeed AI, Inc., a Delaware corporation ("TopSeed," "we," "us," or "our"), collects, how we use it, who we share it with, and the choices you have. It covers our websites, mobile applications, and the tournaments, leagues, ladders, and other events created or joined through them (together, the "Platform").
We are the data controller for the information described here. We are also the merchant of record for payments made through the Platform, which means we collect payments, handle tax, and pay organizers. Our payment processor, Stripe, handles card data; we do not store your full card number.
TopSeed is a United States service intended for users in the United States. This policy is written for U.S. users and U.S. law.
By using the Platform, you agree to this Privacy Policy. If you do not agree, do not use the Platform.
TopSeed is an AI-native, mobile-first platform for creating and running tennis and pickleball events. Two kinds of people use it: organizers, who create and run events, and players, who find and join them. This policy applies to both, and to anyone who simply browses.
This policy covers personal information we control. When you register for an event, the organizer of that event receives some of your information and uses it for their own purposes. At that point the organizer is an independent controller of their copy of your data, and their handling of it is governed by their own practices, not this policy. Section 6 explains exactly what organizers receive.
This summary is for convenience. It is not a substitute for the full policy below, which controls.
We collect the following categories of personal information. We use the categories from the California Consumer Privacy Act so the picture is complete and comparable.
Identifiers and account information. Your name, email address, phone number, username, password, and birth year. We use your birth year to determine your age bracket; we do not collect your full date of birth. If you add a managed player, we collect the player's first name, last name, and birth year, and any rating you enter for them, from you (see Section 7). If a child with a limited account gives us a parent's or guardian's email address, we store it (see Section 7).
Profile and competition information. Your skill rating and rating category, your match and event history, doubles partner information, and any profile photo or files you upload.
Ratings. The ratings you enter, such as a UTR, USTA NTRP, World Tennis Number, DUPR, or UTR-P rating, together with the provider you name. We normalize them so a single rating works across both sports. We do not currently retrieve ratings from those providers; the rating we hold is the one you give us.
Registration information. The details you enter when you register for an event: the participant's name and rating, the draws they are entering, and, for doubles, the partner you choose or invite, including the email address of a partner you invite.
Commercial and transaction information. Records of the events you register for or host, your refund and cancellation history, and billing metadata such as the amount, date, and description of a transaction. We do not collect or store your full card number; Stripe does (see Section 10).
Organizer payout information. If you are an organizer, the information needed to pay you and to meet tax-reporting rules. We do not need this to create an event; we collect it when you set up payouts. If you use a connected Stripe account, our payment processor collects and holds your identity and banking details, which may include your legal name, date of birth, address, bank account, and a government identifier such as a Social Security number, and we receive limited status information. If you are paid through a manual method instead, such as ACH, PayPal, Wise, or check, we collect the payee and tax details needed to pay you and report, such as your name, mailing address, payout details, and a Form W-9.
Device and usage information. Your IP address, the coarse location we infer from it, your browser and device type, and server-log records of how you use the Platform. We collect this automatically (see Section 9).
We do not collect biometric information, and we do not collect health or medical information through the Platform. Tennis and pickleball are physical activities, and any injury or medical matter at an event is handled by the organizer, not by us, and is not stored in our product.
Directly from you. When you create an account, build or join an event, fill out a registration form, upload a file, or contact support.
Automatically. Through cookies and server logs as you use the Platform. Our logging records technical information such as IP address, request details, and error data so we can operate and secure the service. Section 9 covers cookies.
From third parties. From Google when you choose to sign in with Google (your name, email address, and profile photo), and from Stripe in connection with payments and organizer onboarding.
From other users. From the account holder who adds you as a managed player, such as a parent or guardian, and from a player who invites you to be their doubles partner.
We use your information to:
We do not send marketing or promotional messages today. If we add them, we will ask for your opt-in first and give you a way to unsubscribe in every message.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. With that baseline, here is everyone who receives your data and why.
With event organizers. This is the core of how the Platform works. When you register for an event, the organizer receives the information needed to run it: your name, contact details, rating and rating category, and the draws you entered. If you register a managed player, the organizer receives the managed player's name and rating and your contact details, because you are the person responsible for them; organizers do not receive a managed player's birth year. From that point the organizer is an independent controller of their copy of your data and uses it under their own practices. We cannot retract information already delivered to an organizer. If you want a copy corrected or deleted in an organizer's own records, you will need to contact the organizer. You can always decline to register for an event you do not want to share your data with.
On event pages. Participant names and ratings appear on event pages, draws, brackets, and results, which anyone can view, including people who are not signed in. For players with their own accounts, a profile photo and a link to their profile may appear too. For a managed player, some event pages may show the name, profile photo, and profile link of the account holder who registered them instead of the player's own name.
With Stripe, for payments. Stripe processes payments and organizer payouts and collects the card and banking data involved. See Section 10.
With our sub-processors. Outside companies that run parts of our service under contract, such as hosting, database, email, and logging providers. Section 15 names each one and what it does. They may use your information only to provide their service to us.
For legal and safety reasons. When we believe in good faith that disclosure is required by law or legal process, or is needed to protect the rights, safety, or property of TopSeed, our users, or the public.
In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, your information may transfer as part of that transaction. We will require the recipient to honor this policy, or we will notify you of any material change.
Who can hold an account. From the calendar year you turn 14, you can hold your own account and use the Platform in full. When you create an account you enter your birth year, which we use to determine your age bracket; we go by the year alone, so the year you turn 14 is the year your account gets full access, whatever month you were born in. Before then, an account you create for yourself is restricted to browsing: it cannot register for events, create events, or submit scores. No child under 13 can hold a full account. Children usually take part instead as managed players: an adult with an account of their own who is the child's parent or legal guardian, or who has that person's permission (the "account holder"), adds the child, enters the child's name and birth year, registers the child for events, and receives every communication about the child's registrations. A managed player has no login, password, email address, or profile page.
Managed players of other ages. An account holder can also add someone older, such as another family member, as a managed player, with that person's authorization (see Section 4 of our Terms of Service). We collect the same information about them, from the person who adds them, and handle it the same way. The rules below for children under 13 apply only to children under 13.
Information about children under 13. We collect a managed child's information from the account holder who adds them, and only what is needed to run events: the child's first name, last name, birth year, registrations, and any rating the account holder enters. The child's name and rating appear on draws, brackets, results, and event pages, as they do for every participant, although some public event pages may show the account holder's name in place of the child's (see Section 6); the child's birth year is not shown to organizers or other players. We do not use a child's information for marketing.
If a child under 13 signs up on their own. A child can create an account before telling us their age. When they enter a birth year that places them under 13, the account becomes limited: it can browse events and can be deleted, but it cannot register for or create events, and we ask for nothing more except, if the child chooses, a parent's or guardian's email address (see below). Until the account is deleted, we keep what the child gave us when signing up: their email address and sign-in details, their birth year, and, if they signed in with Google, the name and profile photo Google provided. When the account was set up, we usually also created a customer record with our payment processor, Stripe, containing the child's email address and any name we received; no payment can be made from a limited account. The child, or a parent or guardian, can delete the account at any time, from the account itself or by emailing support@topseed.ai. Deleting it deletes this information from our records, and we ask Stripe to delete any customer record it holds.
Parent or guardian email. From a limited account, a child can ask us to email a parent or guardian. We use the address only to send that person an email explaining how to add the child as a managed player from their own account. We keep the most recent address on the limited account and show it to the child only partly hidden. We do not use it for anything else, and we delete it when the limited account is deleted. The email gives the child no new permissions, and we do not link the limited account to a managed player the parent or guardian later creates.
Apart from a limited account, which we handle as described above, if we learn that we hold personal information collected directly from a child under 13, we will delete it.
Guardian access and deletion. The account holder can review and correct a managed player's name and birth year from their own account, and can remove the player's profile while it has no registration history. A parent or legal guardian who is not the account holder, or anyone who wants to review or delete a child's information in any other case, can contact us at support@topseed.ai; we will confirm their relationship to the child before acting. Closing your own account removes your managed players and their registrations, subject to the records we must keep (Section 12).
Teens. Starting the calendar year you turn 14, you may hold your own account and use the Platform in the same way as adults. We handle a teen's information the same way as an adult's, with one exception: we do not use a teen's information to train or fine-tune our AI features or models (see "Minors and AI training" below and Section 11). If you are a parent or guardian with questions about your teen's account, contact us at support@topseed.ai.
Minors and AI training. We do not use personal information about participants under 18, or about any managed player, to train or fine-tune our AI features and models (see Section 11).
TopSeed operates in California and follows the California Consumer Privacy Act, as amended by the California Privacy Rights Act. The rights below are available to California residents. We extend the same access and deletion process to all U.S. users as a matter of practice.
| Category (CCPA) | Examples | Collected? | Purpose |
|---|---|---|---|
| Identifiers | Name, email, phone, username, IP address; a parent's or guardian's email given by a limited under-13 account | Yes | Account, authentication, communication; the guardian invitation (Section 7) |
| Customer records | Password, billing metadata, payout status | Yes | Account, payments |
| Characteristics (age) | Birth year, from which we derive an age bracket; a managed player's birth year entered by the guardian | Yes | Age bracket and child-safety rules (Section 7) |
| Commercial information | Events registered or hosted, refund history | Yes | Running events, payments |
| Internet activity | Server logs, device and usage data | Yes | Security, operating the service |
| Geolocation | Coarse location inferred from IP | Yes | Security, fraud prevention |
| Professional or employment | Not collected | No | n/a |
| Education information | Not collected | No | n/a |
| Biometric information | Not collected | No | n/a |
| Health or medical information | Not collected | No | n/a |
| Sensitive personal information | Account login credentials | Yes | Authentication only; not used beyond providing the service |
| Inferences | Normalized cross-provider rating | Yes | Matching players to appropriate events |
| Category | Disclosed to | Reason |
|---|---|---|
| Identifiers, profile, rating, registration details | Event organizers | To run the event you registered for |
| Participant name, rating, profile photo, and profile link | Anyone viewing an event page | Publishing the event's players, draws, and results |
| Payment and payout data | Stripe | Payment processing and payouts |
| Account, usage, and content data | Sub-processors (Section 15) | Hosting, database, email, logging, AI features |
| Any category | Legal and safety recipients | When required by law or to protect rights and safety |
We do not sell or share personal information, and we have not done so in the preceding 12 months.
We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you. Ratings help match players to suitable events; they are not used to make consequential decisions about you on their own.
Email us at support@topseed.ai. We will verify your request by confirming information associated with your account before we act on it. You do not need an account to make a request; if you do not have one, we will verify your identity using the information reasonably necessary to confirm who you are. We respond within the timelines California law requires, generally within 45 days, and we will tell you if we need more time. You may use an authorized agent to submit a request; we will ask the agent for proof of your written permission and may still verify your identity directly.
We keep this simple. We use cookies that are essential to run the Platform, such as the authentication and session cookies that keep you logged in, and standard functional cookies that remember your preferences.
We do not use advertising cookies, and we do not track you across other websites. Nobody is following you around the internet because of us. We measure aggregate usage and performance with Vercel Analytics and Speed Insights, which are cookieless and do not build a cross-site profile of you, and we keep server-side logs to operate and secure the service.
Because we run no advertising or cross-site tracking, we do not show a cookie consent banner. We honor browser Global Privacy Control signals. You can also block or delete cookies in your browser settings, though essential cookies are needed for the Platform to work.
We do not store your full card number. When you pay through the Platform, Stripe collects and processes your card and billing information directly. Card data stays off our systems. We receive transaction metadata such as the amount, date, status, and the last four digits and card type, which we use to manage registrations, refunds, and our records.
We act as the merchant of record for payments. We collect amounts due, calculate and remit applicable tax, issue refunds under our refund policy, and pay organizers. We collect the information needed to pay organizers and to meet tax-reporting rules when they set up payouts, depending on whether they are paid through a connected Stripe account or a manual method we arrange (such as ACH, PayPal, Wise, or check). When you create an account, we usually also create a customer record for you with Stripe, containing your email address and any name we have, so that you can pay for registrations. Stripe acts as our payment processor for payments we instruct, and as an independent controller for its own fraud-prevention and legal-compliance purposes. Stripe's handling of payment data is governed by Stripe's privacy policy.
The Platform generates draws, brackets, pools, and ladders from natural-language input, and offers an in-product AI assistant for organizers. These features rely on third-party AI model providers.
To generate a response, we may send the relevant event and registration data, which can include player personal information, to an AI model provider. The provider we use can change over time, so we describe it here as a category rather than naming a single vendor. We use these providers under their commercial API terms, which restrict their use of the data to providing the service to us and do not permit them to train their own models on it.
Using your data to improve our AI. We reserve the right to use your information, including your content and activity on the Platform, to develop, train, fine-tune, and improve our own AI features and models. We do this to make draws, ratings, and the organizer assistant work better. When we use data for this purpose, we prefer de-identified or aggregated data wherever it does the job. If you delete your account, we stop using your personal information for future training, though we cannot undo training that has already happened. Records we are legally required to retain (Section 12) are excluded from training after you delete your account. We do not use personal information about participants under 18, or about any managed player, for this purpose.
We keep personal information only as long as we need it.
We use reasonable technical and organizational measures to protect your information. Our database is hosted with Supabase and our application with Vercel, and we encrypt information in transit and at rest. Because Stripe handles card data and we keep it off our systems, your card number is never exposed through us.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information and to respond promptly if something goes wrong. If you believe your account has been compromised, contact us at support@topseed.ai.
We operate in the United States and process your information here. The sub-processors we use to run the service operate in the United States. TopSeed is intended for U.S. users, and we do not offer the Platform to users outside the United States.
These are the outside companies that process personal information to help us run the Platform. Each acts under contract and may use your information only to provide its service to us.
| Sub-processor | What it does | More information |
|---|---|---|
| Vercel | Application hosting, delivery, and scheduled jobs | vercel.com/legal/privacy-policy |
| Vercel Analytics and Speed Insights | Cookieless, aggregate usage and performance measurement | vercel.com/legal/privacy-policy |
| Supabase | Database, authentication, and file storage | supabase.com/privacy |
| Upstash | Redis caching and background job processing | upstash.com/trust/privacy.pdf |
| Redis Cloud (Redis Ltd.) | Real-time messaging for live features | redis.io/legal/privacy-policy |
| Stripe | Payment processing and organizer payouts (also an independent controller for its own fraud-prevention and legal-compliance purposes, see Section 10) | stripe.com/privacy |
| Resend | Transactional email delivery | resend.com/legal/privacy-policy |
| Axiom | Application logging and observability | axiom.co/privacy |
| Google sign-in and internal workspace tools | policies.google.com/privacy | |
| AI model provider(s) | Powering AI draw generation and the organizer assistant | Provider may change; see Section 11 |
If we pay an organizer through a manual method, the provider used to complete that payout (for example, a bank for ACH, PayPal, or Wise) receives the payee information needed to send the payment.
We update this list as our providers change.
We may update this policy as the Platform and the law change. When we do, we will post the new version with an updated effective date at https://www.topseed.ai/. If a change is material, we will give you clearer notice, such as an email or an in-product notice, before it takes effect. Your continued use of the Platform after an update means you accept the revised policy.
Questions, requests, or concerns about your privacy: email us at support@topseed.ai.
To exercise a California privacy right, see Section 8 for what to include and what to expect.