Privacy policy

Information we handle and why

• Accounts and club access: names, email addresses, account identifiers, club membership, assigned roles and sign-in information. These support account verification, invitations and access to the right club features.
• Cricket and club records: playing lists, player attributes, availability, fixtures, team selections, Player Plans, match preparation, scores, observations, coaching conversations and messages. These support the club's selection, coaching and communication workflows.
• Images and content: uploaded player photos, club artwork, sponsor logos, captions, generated graphics and linked videos. These support the content and publishing features your club chooses to use.
• Communications and support: enquiries, Guide questions and replies, support requests, invitations, notification preferences and delivery records.
• Billing and usage: the club's subscription or trial details, purchase references, payment status and video-credit usage. Payment details entered at Stripe checkout are handled by Stripe.
• Technical information: our service providers process information such as IP addresses, browser details and request logs to deliver and secure the service. The app also uses browser storage for sign-in sessions, preferences and unfinished work.

Information comes from you, authorised club users, club imports and services you choose to connect. For example, a club may import its registered playing list or a public scorecard before a player creates an account. Some features cannot operate without the relevant information.

Only include information relevant to the club task. Avoid putting unnecessary medical or other sensitive details in free-text notes, messages or AI prompts.

Who can see information

Access within the app depends on club membership and assigned roles. Coaches, selectors, captains and administrators may see different records. Platform administrators may access information for support and operation of the service. Club information is not automatically made public by creating an account.

Content that a club publishes on Facebook or Instagram can be viewed and shared according to those platforms' settings. Anyone with an unlisted external video link may be able to view or forward it. Clubs should obtain the appropriate permission before uploading or publishing a person's photo, particularly for young players.

Facebook and Instagram

Connecting club accounts is optional. A person with the appropriate Club Batting role and Facebook Page access authorises the connection through Meta.

To offer the connection and publish approved club content, we process:

• The connecting person's Meta user identifier, granted permissions and eligible Facebook Pages.
• The selected Page's identifier and name, and the linked professional Instagram account's identifier and username, where available.
• Access tokens, stored encrypted on the server, and connection status.
• Approved captions and images, publishing instructions, post identifiers, links, timestamps and delivery results.

These details let you choose the correct club accounts, check access and publish or schedule content approved by an authorised club user. The connection does not request your Facebook password, friends list or private messages. Meta receives the content sent for publication and handles it under its own privacy policy.

A permanent Socials Manager or Club Admin can stop the connection through Social graphics → Social accounts → Connection help → Disconnect this club. This removes the usable publishing credential and stops further publishing through that connection. Some account labels and publishing history remain as club records. To request removal of connection data, use the options below.

Services used to run the app

Information is processed by providers for the features you use:

• Supabase: account authentication, the database, file storage and server functions.
• GitHub Pages: delivery of the public website and app files.
• Resend and device notification services: emails and phone alerts, where enabled.
• VentraIP / Axigen: our business mailbox for enquiries, support and privacy requests.
• OpenAI: Guide assistance and optional image or style preparation. Guide requests include the question, relevant conversation history and club context. Image preparation sends the selected image and instructions. The outputs are saved in Club Batting where the feature requires them.
• Daily: optional Selection Room video calls, including display names, call media and connection/usage information. Club Batting does not enable automatic recording or transcription in this integration.
• Stripe: payments and payment confirmations.
• Meta: the optional Facebook and Instagram connection described above.

The main database is hosted in Sydney, Australia. Providers may also process information overseas, including in the United States; using an Australian database does not mean every feature processes data only in Australia.

Provider information: Supabase, GitHub, Resend, OpenAI, Daily, Stripe and Meta.

Storage and retention

Club and player records are kept to provide the service and maintain the club's history. Signing out, removing a person from a team or disconnecting Facebook does not by itself erase their Club Batting records. Browser-stored preferences and drafts can also remain on your device until cleared.

Deletion requests are reviewed against the records concerned. Some information may need to be kept for payment, legal, security or dispute-handling purposes; we will explain any applicable limitation. Provider backups and logs may follow separate retention cycles.

The app uses account permissions, server access controls and encryption of stored Meta credentials to protect information. Access to your own account and device also affects the security of your information.

Access, correction and deletion

You can ask to access, correct or delete your personal information without signing in. A parent or guardian can also contact us about a young person's information.

Make a request

1. Contact us using the privacy contact below. Include your name, club, account email and what you want accessed, corrected or deleted.
2. For Facebook or Instagram information, identify the club Page or account. Do not send passwords, access tokens or an App Secret.
3. We may ask for enough information to verify that you are entitled to make the request. We will review the relevant records, respond and explain the action taken or any limitation.

Remove the Meta connection

You can also remove Club Batting through Meta's settings for connected apps or business integrations and use its data-deletion request option where available. When Meta sends us a valid removal or deletion request, the app removes the associated stored connection records and pending connection data, including credentials.

This does not delete your separate Club Batting account, club-created artwork or records, or posts already published on Facebook or Instagram. Contact us for a broader deletion request. Published posts must also be removed through the relevant social account if you want them taken down.

Privacy questions or complaints

Tell us what happened and how you would like it resolved. We will review the concern and respond, including any steps to address it. You can also seek information about your rights or a privacy complaint from the Office of the Australian Information Commissioner.

We will update this page when our information handling changes and show the updated date.