TopSeed Privacy Policy

Effective date: June 13, 2026

This Privacy Policy explains what personal information TopSeed AI, Inc., a Delaware corporation ("TopSeed," "we," "us," or "our"), collects, how we use it, who we share it with, and the choices you have. It covers our websites, mobile applications, and the tournaments, leagues, ladders, and other events created or joined through them (together, the "Platform").

We are the data controller for the information described here. We are also the merchant of record for payments made through the Platform, which means we collect payments, handle tax, and pay organizers. Our payment processor, Stripe, handles card data; we do not store your full card number.

TopSeed is a United States service intended for users in the United States. This policy is written for U.S. users and U.S. law.

By using the Platform, you agree to this Privacy Policy. If you do not agree, do not use the Platform.

1. Introduction and Scope

TopSeed is an AI-native, mobile-first platform for creating and running tennis and pickleball events. Two kinds of people use it: organizers, who create and run events, and players, who find and join them. This policy applies to both, and to anyone who simply browses.

This policy covers personal information we control. When you register for an event, the organizer of that event receives some of your information and uses it for their own purposes. At that point the organizer is an independent controller of their copy of your data, and their handling of it is governed by their own practices, not this policy. Section 6 explains exactly what organizers receive.

2. The Short Version

This summary is for convenience. It is not a substitute for the full policy below, which controls.

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising. No ad networks, no tracking pixels following you around the internet.
• Organizers get what they need to run your event. When you register, the organizer receives your name, contact details, rating, and your answers on their registration form.
• You must be 18 or older to use TopSeed. The Platform is not currently open to anyone under 18. Support for younger players, with parental consent, is coming later.
• Stripe handles payment cards, not us. We never store your full card number.
• We may use your data to improve our own AI. Section 11 has the details.
• We name our sub-processors. Section 15 lists every outside company that touches your data and why.
• You have California privacy rights, and we honor browser Global Privacy Control signals. Section 8 explains how to exercise them.

3. Information We Collect

We collect the following categories of personal information. We use the categories from the California Consumer Privacy Act so the picture is complete and comparable.

Identifiers and account information. Your name, email address, phone number, username, and password. We do not collect your date of birth; you confirm you are 18 or older when you create an account (see Section 7).

Profile and competition information. Your skill rating and rating category, your match and event history, doubles partner information, and any profile photo or files you upload.

Ratings data from third parties. We ingest and normalize ratings from outside providers, including UTR, USTA NTRP, World Tennis Number, DUPR, and UTR-P, so a single rating works across both sports. When we pull a rating tied to your identity, that rating becomes part of your profile information.

Registration information. The answers you give on an organizer's registration form. Organizers design their own forms, so the specific fields vary by event. Register only with information you are comfortable sharing with that organizer.

Commercial and transaction information. Records of the events you register for or host, your refund and cancellation history, and billing metadata such as the amount, date, and description of a transaction. We do not collect or store your full card number; Stripe does (see Section 10).

Organizer payout information. If you are an organizer, the information needed to pay you and to meet tax-reporting rules. We do not need this to create an event; we collect it when you set up payouts. If you use a connected Stripe account, our payment processor collects and holds your identity and banking details, which may include your legal name, date of birth, address, bank account, and a government identifier such as a Social Security number, and we receive limited status information. If you are paid through a manual method instead, such as ACH, PayPal, Wise, or check, we collect the payee and tax details needed to pay you and report, such as your name, mailing address, payout details, and a Form W-9.

Device and usage information. Your IP address, the coarse location we infer from it, your browser and device type, and server-log records of how you use the Platform. We collect this automatically (see Section 9).

We do not collect biometric information, and we do not collect health or medical information through the Platform. Tennis and pickleball are physical activities, and any injury or medical matter at an event is handled by the organizer, not by us, and is not stored in our product.

4. How We Collect Information

Directly from you. When you create an account, build or join an event, fill out a registration form, upload a file, or contact support.

Automatically. Through cookies and server logs as you use the Platform. Our logging records technical information such as IP address, request details, and error data so we can operate and secure the service. Section 9 covers cookies.

From third parties. From rating providers when we pull or normalize your rating, from Google when you choose to sign in with Google, and from Stripe in connection with payments and organizer onboarding.

5. How We Use Your Information

We use your information to:

• create and manage your account and authenticate you;
• run events: registration, doubles partner verification, draw generation, schedules, and results;
• generate draws, brackets, pools, and ladders from natural-language input, and power the in-product AI assistant for organizers (see Section 11);
• process payments as merchant of record, calculate and remit tax, issue refunds, and pay organizers;
• send you transactional messages you need, such as registration confirmations, receipts, and event updates;
• develop, train, fine-tune, and improve our own AI features and models (see Section 11);
• secure the Platform, prevent fraud and abuse, and enforce our Terms;
• comply with legal, tax, and financial-record obligations.

We do not send marketing or promotional messages today. If we add them, we will ask for your opt-in first and give you a way to unsubscribe in every message.

6. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. With that baseline, here is everyone who receives your data and why.

With event organizers. This is the core of how the Platform works. When you register for an event, the organizer receives the information needed to run it: your name, contact details, rating and rating category, and your answers on their registration form. From that point the organizer is an independent controller of their copy of your data and uses it under their own practices. We cannot retract information already delivered to an organizer. If you want a copy corrected or deleted in an organizer's own records, you will need to contact the organizer. You can always decline to register for an event you do not want to share your data with.

With Stripe, for payments. Stripe processes payments and organizer payouts and collects the card and banking data involved. See Section 10.

With our sub-processors. Outside companies that run parts of our service under contract, such as hosting, database, email, and logging providers. Section 15 names each one and what it does. They may use your information only to provide their service to us.

For legal and safety reasons. When we believe in good faith that disclosure is required by law or legal process, or is needed to protect the rights, safety, or property of TopSeed, our users, or the public.

In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, your information may transfer as part of that transaction. We will require the recipient to honor this policy, or we will notify you of any material change.

7. Age Restriction and Children

You must be 18 or older to use TopSeed. The Platform is currently for adults only, and it is not directed to or available to anyone under 18. When you create an account, you represent that you are 18 or older. If you are under 18, do not use the Platform or provide us any personal information.

We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete it. If you believe a person under 18 has given us personal information, contact us at support@topseed.ai and we will remove it.

We plan to support younger players in the future through a parent or guardian who consents and is responsible for the minor. That feature is not available yet. When it launches, we will update this policy to explain how we handle a minor's information and how a guardian controls it, and we will not collect information about minors before those protections are in place.

8. Your California Privacy Rights (CCPA/CPRA)

TopSeed operates in California and follows the California Consumer Privacy Act, as amended by the California Privacy Rights Act. The rights below are available to California residents. We extend the same access and deletion process to all U.S. users as a matter of practice.

Your rights

• Know and access. Request the categories and specific pieces of personal information we have collected about you.
• Delete. Request that we delete personal information we collected from you, subject to legal exceptions such as tax and transaction records.
• Correct. Request that we correct inaccurate personal information.
• Opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We still honor browser Global Privacy Control signals.
• Limit use of sensitive personal information. The only sensitive personal information we collect is your account login credentials, which we use solely to authenticate you. We do not use or disclose sensitive personal information to infer characteristics about you, so this right does not apply to anything we do.
• Non-discrimination. We will not deny you service, charge you a different price, or give you a lesser experience for exercising your rights.

Categories we collect and why

Categories we disclose and to whom

We do not sell or share personal information, and we have not done so in the preceding 12 months.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you. Ratings help match players to suitable events; they are not used to make consequential decisions about you on their own.

How to exercise your rights

Email us at support@topseed.ai. We will verify your request by confirming information associated with your account before we act on it. You do not need an account to make a request; if you do not have one, we will verify your identity using the information reasonably necessary to confirm who you are. We respond within the timelines California law requires, generally within 45 days, and we will tell you if we need more time. You may use an authorized agent to submit a request; we will ask the agent for proof of your written permission and may still verify your identity directly.

9. Cookies and Tracking Technologies

We keep this simple. We use cookies that are essential to run the Platform, such as the authentication and session cookies that keep you logged in, and standard functional cookies that remember your preferences.

We do not use advertising cookies, and we do not track you across other websites. Nobody is following you around the internet because of us. We measure aggregate usage and performance with Vercel Analytics and Speed Insights, which are cookieless and do not build a cross-site profile of you, and we keep server-side logs to operate and secure the service.

Because we run no advertising or cross-site tracking, we do not show a cookie consent banner. We honor browser Global Privacy Control signals. You can also block or delete cookies in your browser settings, though essential cookies are needed for the Platform to work.

10. Payment Information and Stripe

We do not store your full card number. When you pay through the Platform, Stripe collects and processes your card and billing information directly. Card data stays off our systems. We receive transaction metadata such as the amount, date, status, and the last four digits and card type, which we use to manage registrations, refunds, and our records.

We act as the merchant of record for payments. We collect amounts due, calculate and remit applicable tax, issue refunds under our refund policy, and pay organizers. When paid events launch, we will collect the information needed to pay organizers and to meet tax-reporting rules at the time they set up payouts, depending on whether they are paid through a connected Stripe account or a manual method we arrange (such as ACH, PayPal, Wise, or check). Stripe acts as our payment processor for payments we instruct, and as an independent controller for its own fraud-prevention and legal-compliance purposes. Stripe's handling of payment data is governed by Stripe's privacy policy.

Paid events are not yet live on the Platform; current events are free. This section describes how payments will work once paid events are enabled.

11. AI Features

The Platform generates draws, brackets, pools, and ladders from natural-language input, and offers an in-product AI assistant for organizers. These features rely on third-party AI model providers.

To generate a response, we may send the relevant event and registration data, which can include player personal information, to an AI model provider. The provider we use can change over time, so we describe it here as a category rather than naming a single vendor. We use these providers under their commercial API terms, which restrict their use of the data to providing the service to us and do not permit them to train their own models on it.

Using your data to improve our AI. We reserve the right to use your information, including your content and activity on the Platform, to develop, train, fine-tune, and improve our own AI features and models. We do this to make draws, ratings, and the organizer assistant work better. When we use data for this purpose, we prefer de-identified or aggregated data wherever it does the job. If you delete your account, we stop using your personal information for future training, though we cannot undo training that has already happened. Records we are legally required to retain (Section 12) are excluded from training after you delete your account.

12. Data Retention

We keep personal information only as long as we need it.

• Account data: while your account is active, plus a short wind-down period after you ask us to delete it.
• Transaction and tax records: retained as long as required to meet our merchant-of-record, tax, and financial-record obligations, generally up to seven years.
• Backups: residual copies cycle out of our backups on our normal backup rotation after deletion from active systems.
• Logs and usage data: kept for shorter, purpose-based periods for security and operations.

13. Data Security

We use reasonable technical and organizational measures to protect your information. Our database is hosted with Supabase and our application with Vercel, and we encrypt information in transit and at rest. Because Stripe handles card data and we keep it off our systems, your card number is never exposed through us.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your information and to respond promptly if something goes wrong. If you believe your account has been compromised, contact us at support@topseed.ai.

14. Where Your Data Is Processed

We operate in the United States and process your information here. The sub-processors we use to run the service operate in the United States. TopSeed is intended for U.S. users, and we do not offer the Platform to users outside the United States.

15. Sub-Processors

These are the outside companies that process personal information to help us run the Platform. Each acts under contract and may use your information only to provide its service to us.

If we pay an organizer through a manual method, the provider used to complete that payout (for example, a bank for ACH, PayPal, or Wise) receives the payee information needed to send the payment.

We update this list as our providers change.

16. Your Choices and Controls

• Access and update. View and edit your profile information in your account at any time.
• Delete your account. Ask us to delete your account and personal information at support@topseed.ai, subject to the records we must keep by law (Section 12).
• Communications. We send only transactional messages you need to use the service. We do not send marketing today, so there is nothing to unsubscribe from. If we add marketing later, it will be opt-in.
• Global Privacy Control. We honor GPC signals from your browser.

17. Changes to This Policy

We may update this policy as the Platform and the law change. When we do, we will post the new version with an updated effective date at https://www.topseed.ai/. If a change is material, we will give you clearer notice, such as an email or an in-product notice, before it takes effect. Your continued use of the Platform after an update means you accept the revised policy.

18. Contact Us and Exercising Your Rights

Questions, requests, or concerns about your privacy: email us at support@topseed.ai.

To exercise a California privacy right, see Section 8 for what to include and what to expect.