Privacy Policy

We collect Personal Information from and about you in two ways: (a) directly from you, and (b) automatically through your interactions with our service.

1.1 Information you provide to us. When you apply for membership, sign in, set your weekly availability, confirm matches, and rate matches, you provide information including: your name; email address; mobile telephone number; ZIP code and travel radius; portrait photograph; NTRP rating (self-reported); tennis background and experience; non-tennis background; university (if you choose to provide); level preferences; match-type preferences; weekly availability data; identities of members you confirm or pass; ratings you provide about matched members; and any free-text notes you submit.

1.2 Information collected automatically. When you access our service, we and our service providers automatically collect: IP address; browser type and version; operating system; device type and identifier; pages and screens accessed; time and duration of visits; and information collected via session cookies used for authentication purposes.

1.3 Categories of Personal Information under California law. For purposes of the California Consumer Privacy Act ("CCPA") and analogous state statutes, we collect the following statutory categories of Personal Information: identifiers (Section 1.1, 1.2); customer records (Section 1.1); commercial information (Section 1.1); internet or electronic network activity (Section 1.2); geolocation data (Section 1.2, inferred from IP and ZIP); visual information (your portrait photograph); and inferences drawn from the foregoing to facilitate matchmaking. We do not knowingly collect Sensitive Personal Information as defined under the California Privacy Rights Act ("CPRA").

We use Personal Information for the following purposes:

2.1 Service delivery. To provide, operate, and maintain the Dedans matchmaking service; to validate applications and approve membership; to match members each week based on availability, level, and proximity; to exchange contact information between members who have mutually confirmed a match; to display member profiles to other members within the matchmaking flow; and to collect and aggregate ratings that support level honesty and accountability across the network.

2.2 Communications. To send transactional communications regarding your application, sign-in codes, weekly availability requests, match notifications, contact exchanges, and post-match rating prompts. We do not send marketing or promotional communications.

2.3 Analytics and improvement. To analyze usage of the service, identify trends, measure the effectiveness of features, and improve the service.

2.4 Legal and security purposes. To comply with legal obligations, court orders, and lawful requests from governmental authorities; to enforce the Terms; to investigate and prevent fraud, harassment, abuse, and security or safety incidents; and to protect the rights, property, and safety of Dedans, our members, and others.

The Dedans service is delivered using a small number of third-party service providers, each of which processes Personal Information on our behalf in accordance with their respective privacy policies.

3.1 Cloudflare. Our service is hosted on Cloudflare Pages and uses Cloudflare Workers for authentication. Cloudflare receives information including your IP address, browser type, and request data as part of routine hosting, content delivery, and protection against denial-of-service attacks. Cloudflare's processing is governed by Cloudflare's privacy policy.

3.2 Airtable. Member profile information, match records, ratings, and availability data are stored in our database, which is operated by Airtable, Inc. Airtable's processing is governed by Airtable's privacy policy.

3.3 Resend. All email communications sent by Dedans (including sign-in codes, weekly availability prompts, match notifications, contact exchanges, and rating prompts) are delivered via Resend, Inc. Resend's processing is governed by Resend's privacy policy.

3.4 No advertising trackers. Dedans does not use third-party advertising tracking technologies, including but not limited to Google Analytics, the Meta Pixel, the Meta Conversions API, or any cross-context behavioral advertising tools. We do not share Personal Information with advertising platforms.

3.5 Cookie management. We use session cookies solely for authentication. Most browsers permit you to refuse or delete cookies through the "Help" or "Settings" menu. Refusing cookies will prevent you from signing in to the service.

We share Personal Information with the following categories of recipients:

4.1 Matched members. When you and another member have both confirmed a weekly match, we share each member's first name, last initial, email address, mobile telephone number, and matched time window with the other. The matched members are responsible for their subsequent communications and the conduct of the match itself. Dedans is not a party to that communication.

4.2 Other members (profile visibility). Other Dedans members may view your member profile as part of the matchmaking flow. The profile they see includes: your first name and last initial; your portrait photograph; your self-reported NTRP rating; the identity of the member who vouched for you; your member-since date; the general area you play in and your travel radius; your level preferences; your looking-for preferences; and the prose content you submitted for the "On the court" and "Off the court" sections of your profile.

4.3 Aggregate reputation metrics. Ratings you provide about other members are not directly attributable to you when displayed. After a member has accumulated a minimum sample size of matches, aggregated rating statistics (such as "% confirm level," "% would play again," and "% show rate") may be displayed on that member's profile. The founder may review individual rating records for administrative purposes (including investigating disputes, removing members for harassment or repeated no-shows, and maintaining the integrity of the network).

4.4 Service providers. We share Personal Information with the service providers identified in Section 03 (Cloudflare, Airtable, Resend) as necessary to deliver the service.

4.5 Legal and protective disclosures. We may disclose Personal Information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce the Terms; (c) detect, prevent, or address fraud, harassment, abuse, or safety incidents; or (d) protect the rights, property, or safety of Dedans, our members, or others.

4.6 Business transfers. In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, Personal Information may be transferred to the acquiring or successor entity, subject to the protections of this Policy or a successor policy of equal or greater protection.

4.7 No sale of Personal Information. Dedans does not sell Personal Information for monetary or non-monetary consideration. We do not share Personal Information for cross-context behavioral advertising purposes.

5.1 State privacy rights. Subject to applicable law and verification of your identity, residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive consumer privacy legislation may have the following rights with respect to Personal Information:

• Right to know and access. The right to request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which we collected it, the business purposes for collecting or sharing it, and the categories of recipients with whom we shared it.
• Right to delete. The right to request that we delete Personal Information we have collected from you, subject to legal exceptions including record retention obligations.
• Right to correct. The right to request that we correct inaccurate Personal Information we maintain about you.
• Right to limit use of Sensitive Personal Information. We do not knowingly process Sensitive Personal Information; this right has no operative effect for our processing.
• Right to non-discrimination. The right not to receive discriminatory treatment for exercising any of the foregoing rights.
• Right to appeal. Where required by applicable state law, the right to appeal a denial of a privacy rights request.

5.2 How to exercise your rights. To exercise any of the foregoing rights, send a written request to concierge@dedans.club with the subject line "Privacy Rights Request" and a description of the specific right(s) you wish to exercise. We will respond within the timeframe required by applicable law, generally forty-five (45) days, with the option to extend by an additional forty-five (45) days where reasonably necessary. We may require you to verify your identity before responding.

5.3 Account access and editing. You may access and update most categories of Personal Information directly through your member account at any time.

5.4 Account deletion. To request deletion of your member account, contact us at concierge@dedans.club. Deletion will remove your profile, history, and associated data, subject to legal retention obligations described in Section 06.

5.5 Authorized agents. You may designate an authorized agent to make a request on your behalf, subject to verification of the agent's authority and your identity in accordance with applicable law.

We retain Personal Information for the period necessary to fulfill the purposes for which it was collected, including to: (a) provide our service; (b) maintain ongoing member relationships; (c) comply with legal, accounting, and tax obligations; (d) resolve disputes; and (e) enforce our agreements. Specific retention periods include:

• Member account and profile records. For the duration of active membership, plus two (2) years.
• Match records and ratings. For the duration of active membership, plus two (2) years. Aggregated rating statistics may be retained longer to support the historical accuracy of network-level metrics.
• Email communications. For the duration of active membership, plus two (2) years.
• Transaction and tax records (if applicable). Seven (7) years from the date of the transaction.
• Legal hold. Where information is subject to a litigation hold or legal preservation obligation, the applicable retention period is extended until the obligation expires.

When Personal Information is no longer needed for the foregoing purposes, we delete or anonymize it.

We implement administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, use, alteration, and disclosure. These safeguards include: encryption of data in transit (TLS/HTTPS); passwordless authentication via single-use email codes; access controls limiting Personal Information to authorized personnel; secure authentication for our Cloudflare Worker, Airtable, and other systems; and routine review of our security practices. Notwithstanding these safeguards, no system is impenetrable, and we cannot guarantee the absolute security of Personal Information.

Our service is intended for users at least eighteen (18) years of age. We do not knowingly collect Personal Information from minors. If we learn that we have collected Personal Information from a minor, we will promptly delete it. If you are a parent or guardian and believe your child has provided Personal Information to us, please contact us at concierge@dedans.club.

Dedans operates in the United States. Personal Information you provide to us is processed and stored in the United States. If you are accessing our service from outside the United States, you consent to the transfer of your Personal Information to the United States, where data protection laws may differ from those of your jurisdiction.

Any dispute, claim, or controversy arising out of or relating to this Policy is subject to the dispute resolution and arbitration provisions set forth in Section 15 of the Terms, including the informal resolution requirement, the binding arbitration commitment, the class action waiver, and the opt-out right. Sections 15 and 16 of the Terms (Dispute Resolution; Arbitration; Class Waiver; Governing Law) are incorporated into this Policy by reference.

This Policy is governed by the laws of the Commonwealth of Virginia, without regard to its conflict of laws principles, consistent with Section 16 of the Terms.

For questions about this Policy or to exercise your privacy rights:

Dedans LLC
Attn: Privacy
Alexandria, Virginia
concierge@dedans.club