1. Purpose of the Agreement

CourtBit provides a SaaS platform for managing padel tournaments, leagues, rankings, payments, and registrations.

2. Plans and Pricing

• Prices are in Mexican pesos (MXN) and do not include VAT (IVA) unless stated otherwise.
• CourtBit reserves the right to modify prices by giving 30 days' notice.
• Custom plans are available on request.

3. Subscriptions and Billing

• The CourtBit subscription is billed monthly through Stripe, regardless of which provider the organizer uses to charge its own players.
• CourtBit will issue a CFDI (electronic invoice) for each subscription payment.
• In case of non-payment, CourtBit may suspend the service after 7 days past due.
• Cancellation: The organizer may cancel at any time. There are no minimum-term contracts. If canceled mid-month, the organizer retains access until the end of the paid period.

4. Platform Fees

• CourtBit charges a fee on registration payments made through the app (5%).
• The fee is paid by the player, not the organizer.
• The payment provider's processing fees (Stripe or MercadoPago) are deducted from the payment to the organizer according to that provider's current rates. CourtBit neither sets nor receives those fees.
• Payments made outside the app (cash, direct bank transfer) do not generate a CourtBit fee.

4.1. Payment Provider and Verification

• Choice of provider: The organizer chooses which provider it uses to charge its players: Stripe or MercadoPago. Only one provider can be active at a time; the organizer may switch from its dashboard, and the change applies only to subsequent charges.
• Identity verification: With Stripe, the organizer must complete Stripe Connect's identity and bank account verification. With MercadoPago, the organizer connects its own MercadoPago account, previously verified by MercadoPago, and authorizes CourtBit to create charges on its behalf through that connection.
• Where the funds go: Charges are deposited directly into the account the organizer holds with the chosen provider. The contractual relationship for the processing service is between the organizer and that provider; CourtBit does not hold, custody, or manage those funds.
• Applicable terms: Use of each provider is governed by its own terms: Stripe Terms of Service and MercadoPago Terms and Conditions.
• Revocation: If the organizer disconnects or loses access to its account with the provider, CourtBit will no longer be able to create online charges for its events until the connection is restored or another provider is selected.

5. Organizer's Obligations

• Complete and keep current the identity verification required by CourtBit and by its payment provider (Stripe Connect or MercadoPago), and keep that account connection active for as long as it receives payments through the platform.
• Hold the permits and insurance necessary to hold sporting events.
• Comply with applicable Mexican law (tax, sports, and civil protection regulations).
• Provide truthful information about its events (dates, venues, costs, categories).
• Honor registrations and payments received through the platform.
• Prominently publish its refund policy before players complete registration.
• Handle player refunds in accordance with its own policies and applicable law.
• Comply with the Federal Law on Protection of Personal Data (Ley Federal de Protección de Datos Personales) with respect to player data received through CourtBit.

6. Data Ownership

• Event, player, and results data belong to the organizer.
• The organizer may export its data at any time.
• CourtBit uses the organizer's data exclusively to provide the contracted service.
• CourtBit may use aggregated, anonymized data for product improvement and general statistics.

7. Service Levels (SLA)

• CourtBit will use commercially reasonable efforts to maintain 99.5% monthly service availability, excluding scheduled maintenance.
• Scheduled maintenance will be announced at least 24 hours in advance.
• CourtBit does not guarantee that the platform will be free of errors or interruptions.

8. Limitation of Liability

• CourtBit's maximum liability is limited to the amount paid by the organizer in subscription fees over the preceding 12 months.
• CourtBit is not liable for indirect or consequential damages, loss of revenue, or loss of data (except in cases of gross negligence).
• CourtBit is not responsible for the relationship between the organizer and its players.

9. Termination

• Either party may terminate the relationship at any time.
• Upon termination, CourtBit will give the organizer a 30-day period to export its data.
• CourtBit may terminate the service immediately if the organizer violates these terms, engages in fraud, or uses the platform for unlawful activities.

10. Governing Law

These terms are governed by the laws of Mexico. For any dispute, the parties submit to the jurisdiction of the courts of Guaymas, Sonora, Mexico.

11. Identification of the Parties

CourtBit:

• Name: Saúl Ulises Urías Guzmán
• Tax ID (RFC): UIGS950908
• Registered address: Guaymas, Sonora, Mexico
• Contact email: contacto@courtbit.com.mx

The complete registered address is available upon formal request at contacto@courtbit.com.mx.

The Organizer: An individual or legal entity that contracts CourtBit's services for the management of padel events.

This Privacy Notice is issued in compliance with the new Federal Law on Protection of Personal Data Held by Private Parties (Nueva Ley Federal de Protección de Datos Personales en Posesión de los Particulares, or NLFPDPPP), published on March 20, 2025 and in effect since March 21, 2025.

1. Personal Data We Collect

Identification data (necessary purpose)

• Full name
• Email address
• Phone number (WhatsApp)
• Profile photo (optional)

Financial or asset-related data (necessary purpose — requires express consent)

• Payment method information (captured, processed, and stored exclusively by the relevant payment provider — Stripe or MercadoPago; CourtBit does NOT receive or store card data).
• Transaction history on the platform.
• Billing data (tax ID/RFC, company name, registered address — only if an invoice is requested).

Usage and technical data (necessary purpose)

• IP address
• Device type and operating system
• Device identifiers
• App usage data (screens visited, features used)
• Approximate geolocation data (to show nearby events, with consent)

Sports data (necessary purpose)

• Match results
• Rankings and ELO scores
• History of participation in tournaments and leagues
• Playing category

2. Purposes of Processing

Necessary purposes (that give rise to and are necessary for the legal relationship)

• Create and manage the user's account.
• Process registrations and payments for sporting events.
• Display brackets, schedules, results, and rankings.
• Communicate relevant information about events the user is registered for.
• Process organizer subscriptions and payments.
• Electronic invoicing (CFDI).
• Handle support requests.
• Comply with legal and tax obligations.

Purposes that require consent (not necessary for the legal relationship)

• Send promotional communications about new CourtBit events or features.
• Use geolocation data to suggest nearby events.
• Use aggregated, anonymized data for statistical analysis and product improvement.
• Share the user's public sports profile (name, category, ranking) with other platform users.

3. Data Transfers

CourtBit may transfer personal data to the following third parties:

Data transferred to companies in the United States is protected under those companies' privacy policies and the contractual agreements with CourtBit. MercadoPago operates in Mexico through the Mercado Libre group entities and processes data under its own Privacy Notice, which may contemplate transfers to other countries where the group operates.

4. ARCO Rights

The data subject may exercise their ARCO rights (Access, Rectification, Cancellation, and Objection) by sending a request to:

• Email: contacto@courtbit.com.mx
• Subject line: "ARCO Rights Request"

The request must include:

1. Full name of the data subject.
2. Email address registered with CourtBit.
3. A clear description of the right the data subject wishes to exercise.
4. A document proving the data subject's identity (copy of INE/voter ID or passport).

CourtBit will respond within a maximum of 20 business days from receipt of the complete request. The response will indicate whether the request is granted and, if so, it will be carried out within the following 15 business days.

5. Limiting the Use or Disclosure of Data

• The user can disable promotional notifications from the app's settings.
• The user can request exclusion from marketing communications by emailing contacto@courtbit.com.mx.
• To revoke consent for geolocation data, the user can disable it from their mobile device's settings.

6. Use of Tracking Technologies (Cookies)

The website courtbit.com.mx uses cookies and similar technologies for the platform to function properly. CourtBit uses only essential cookies to maintain the user's session and basic preferences. No advertising-tracking cookies are used.

7. Security Measures

CourtBit implements administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, unauthorized use, access, or processing. These measures include:

• Encryption of data in transit (TLS/SSL).
• Secure storage on Supabase infrastructure.
• Role-based access control.
• Periodic security audits.

Card details are captured and tokenized directly in forms served by the payment provider — Stripe, certified PCI DSS Level 1, or MercadoPago, certified under the PCI DSS standard — and never reach CourtBit servers.

8. Changes to This Privacy Notice

Changes to this notice will be announced through the app, by email, or by posting at courtbit.com.mx/legal/. The last-updated date will be shown at the top of the document. Previous versions of this notice are available upon request at contacto@courtbit.com.mx.

9. Competent Authority

Under the NLFPDPPP (2025), the authority responsible for personal data protection is the Secretaría Anticorrupción y Buen Gobierno (Anti-Corruption and Good Governance Ministry). A data subject who believes their rights have been violated may file a complaint with that authority.

10. Consent

For financial data: By providing your payment information through the applicable provider (Stripe or MercadoPago) during the registration or subscription process, you grant your express consent to the processing of that data in accordance with Article 8 of the NLFPDPPP.

11. Identity and Address of the Data Controller

• Name: Saúl Ulises Urías Guzmán
• Tax ID (RFC): UIGS950908
• Address: Guaymas, Sonora, Mexico
• Email for ARCO rights requests: contacto@courtbit.com.mx

The complete registered address is available upon formal request at contacto@courtbit.com.mx.

This notice is issued in accordance with Article 16 of the NLFPDPPP (2025).

Data Controller

Saúl Ulises Urías Guzmán, with an address in Guaymas, Sonora, Mexico.

Data Collected

Name, email address, phone number, app usage data, and sports data (results, rankings). Financial data is processed exclusively by the relevant payment provider (Stripe or MercadoPago).

Sensitive Data

No sensitive personal data is collected.

Necessary Purposes

Managing your account, processing registrations and payments, displaying results and rankings, and providing support.

Purposes That Require Consent

Sending promotional communications and using geolocation to suggest events.

ARCO Rights

You can exercise your ARCO rights (Access, Rectification, Cancellation, and Objection) by emailing contacto@courtbit.com.mx.

Limiting the Use of Your Data

Set your notification preferences in the app, or write to us at contacto@courtbit.com.mx.

Comprehensive Privacy Notice

See the full notice at courtbit.com.mx/legal/#aviso-privacidad.

1. Scope

This policy applies to all payments processed through the CourtBit platform, including tournament and league registrations as well as organizer subscriptions.

2. CourtBit Fees (Players)

The fee corresponds to the technology intermediation service, which is considered rendered once the registration transaction is completed. In the case of voluntary withdrawal by the player, the fee is non-refundable. However, if the event is canceled by the organizer before it begins, CourtBit will evaluate refunding the fee on a case-by-case basis.

3. Event Registrations (Payments to the Organizer)

Registration payments are processed through the payment provider the organizer has chosen (Stripe Connect or MercadoPago) and are subject to:

1. Each organizer's own refund policies, which the organizer must communicate to players before registration.
2. The terms of the payment provider used: Stripe Terms of Service or MercadoPago Terms and Conditions, as applicable.

Registration funds are transferred directly to the organizer through the relevant payment provider. CourtBit does not hold or manage registration funds. In the event of disputes, CourtBit may assist as a mediator between the player and the organizer.

4. Event Cancellation

• If an organizer cancels an event, it is responsible for managing refunds to registered players.
• CourtBit will notify players of the cancellation through the app.
• CourtBit will work with the organizer to facilitate the refund process through the relevant payment provider.
• Unreachable organizer: In exceptional cases where the organizer is unreachable for more than 15 business days after the event's cancellation, CourtBit will evaluate the possibility of processing the registration refund directly to the player.

5. Organizer Subscriptions

• Subscriptions may be canceled at any time without penalty.
• No refunds are issued for partial periods. Upon cancellation, the organizer retains access until the end of the current billing period.
• CourtBit subscription payments are processed with Stripe and are subject to the Stripe Terms of Service.
• CourtBit will issue the corresponding CFDI for each charge made.

6. Disputes and Chargebacks

• If a player initiates a chargeback with their bank or card issuer, the payment provider that processed the transaction (Stripe or MercadoPago) will handle the dispute according to its procedures.
• CourtBit will provide transaction evidence to the payment provider for the dispute process.
• Organizers agree to cooperate by providing the information necessary to resolve disputes.

7. Process for Requesting a Refund

1. The player contacts the organizer directly (contact details available in the app).
2. If there is no response within 5 business days, the player may escalate to contacto@courtbit.com.mx.
3. CourtBit will respond within a maximum of 10 business days and will mediate between the parties to facilitate the refund process through the payment provider if the organizer authorizes it.
4. If the organizer is unreachable for more than 15 business days, CourtBit will evaluate the possibility of processing the refund directly.
5. If no agreement is reached, the player may turn to PROFECO or initiate a dispute with their card issuer.

8. Consumer Rights

In accordance with the Federal Consumer Protection Law (Ley Federal de Protección al Consumidor), the player has the right to receive clear information about the terms of service and to file complaints with PROFECO.

Nothing in this policy limits the rights that Mexican law grants to consumers.

1. What Are Cookies and Local Storage?

Cookies are small text files that a website stores in your browser to remember information about your visit. Local storage (localStorage) is a similar technology that allows data to be saved directly in your browser more efficiently.

In this policy, we transparently explain what storage technologies CourtBit uses, what we use them for, and how you can manage them.

2. Data Controller

• Name: Saúl Ulises Urías Guzmán
• Address: Guaymas, Sonora, Mexico
• Contact: contacto@courtbit.com.mx

The complete registered address is available upon formal request at contacto@courtbit.com.mx.

3. Technologies We Use

3.1 Local storage (localStorage) — only on pages with sign-in

This data is stored only on your device and is deleted when you sign out. It is not shared with third parties.

3.2 External resources

3.3 Third-party cookies — not currently used

CourtBit does not currently use:

• Marketing or retargeting pixels (Facebook, TikTok, Google Ads)
• Advertising-tracking cookies, and we do not sell data to third parties
• Individual user profiling for advertising purposes

The payment cookies set by Stripe and MercadoPago are necessary to process the charge and prevent fraud: without them, card payment is not possible.

If CourtBit implements any of these technologies in the future, this policy will be updated and your consent will be requested before activating them.

4. How to Manage These Technologies

4.1 From your browser

You can delete or block cookies and local storage data from your browser settings:

• Chrome: Settings > Privacy and security > Cookies — Google's guide
• Safari: Preferences > Privacy — Apple's guide
• Firefox: Settings > Privacy — Mozilla's guide
• Edge: Settings > Cookies — Microsoft's guide

5. International Data Transfer

Google Fonts, Google Analytics, Formspree, and Stripe process data in the United States. MercadoPago processes it in Mexico through the Mercado Libre group entities. For more information about international transfers, see our Comprehensive Privacy Notice.

6. Updates to This Policy

CourtBit may update this policy to reflect changes in the technologies used or in applicable law. The last-updated date is shown at the top of this document. Previous versions are available upon request at contacto@courtbit.com.mx.

7. Legal Basis

The local storage used by CourtBit is strictly necessary for the platform to function (sign-in and navigation). Under the principles of the NLFPDPPP (2025), its use is based on the legitimate interest of the data controller. If analytics or marketing technologies are implemented in the future, the user's consent will be requested.

8. Contact

• Questions about cookies: contacto@courtbit.com.mx
• ARCO rights (Access, Rectification, Cancellation, and Objection): see the Comprehensive Privacy Notice