Privacy Policy

Last updated: April 2025

AceBase is operated by Espirally OÜ, a company registered in Estonia. We take your privacy seriously. This policy explains what data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR).

1. Data Controller

Espirally OÜ
Estonia
Contact: info@getacebase.com

2. Data We Collect

When you use AceBase, we collect:

• Account information: name, email address, and club or academy name when you register.
• Payment information: processed by Stripe. We do not store card details — Stripe handles all payment data under their own PCI-DSS compliance.
• Usage data: sessions created, players managed, and booking activity within your account.
• Communications: messages you send us via email.

3. Why We Process Your Data

• To provide the service (contractual necessity): account management, session scheduling, payment processing, and automated notifications.
• To improve the product (legitimate interest): understanding how features are used to make AceBase better.
• To communicate with you (contractual necessity + legitimate interest): account notifications, support responses, and product updates.
• Legal compliance: retaining records required by applicable law (e.g., invoicing, accounting).

4. Third-Party Data Processors

• Stripe — payment processing. Stripe Privacy Policy.
• Plausible Analytics — website analytics. Plausible is privacy-focused, collects no personal data, uses no cookies, and is fully GDPR-compliant. Plausible Privacy Policy.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel, we delete personal data within 90 days unless we are required by law to keep it longer (e.g., financial records, which we keep for 7 years per Estonian accounting law).

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten"), subject to legal retention requirements.
• Restrict processing in certain circumstances.
• Data portability — receive your data in a machine-readable format.
• Object to processing based on legitimate interest.
• Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

To exercise any of these rights, email us at info@getacebase.com . We will respond within 30 days.

7. Cookies

This website does not use tracking cookies. Plausible Analytics operates without cookies and does not collect any personal data or use persistent identifiers.

The AceBase app (app.getacebase.com) may use session cookies necessary for authentication. These are strictly functional and not used for advertising.

8. Data Transfers

Your data is processed within the European Economic Area (EEA) or with providers that maintain adequate safeguards (e.g., Stripe's EU data processing agreements).

9. Changes to This Policy

We may update this policy. If changes are material, we will notify you by email. The "last updated" date at the top reflects the most recent revision.

10. Contact

Questions about this policy? Email us at info@getacebase.com .