How Smashpoint protects your data

Smashpoint holds your match history, your ratings, and, if you record them, video of your matches. This article explains how that data is stored and protected, in plain terms. For the full legal detail, see the Privacy Policy and Terms and Conditions linked at the end.

Where your data lives

Smashpoint runs on Amazon Web Services (AWS), the same cloud infrastructure used by banks, hospitals, and many of the apps on your phone. Your matches, stats, and account details are stored in a managed AWS database; video clips are stored in AWS object storage. Smashpoint does not run its own servers in an office.

Data is stored on AWS in the United States. Organizations and federations that need their data held in Europe can request to run on AWS locations in the EU; contact us to arrange it. Data is backed up automatically, and backups are kept for 7 days.

How it travels

Every connection between the Smashpoint apps (iPhone, iPad, Apple Watch, Apple TV, Android, web) and the Smashpoint cloud is encrypted with TLS, the same technology that puts the padlock in your browser. That covers scores, stats, video uploads and playback, and sign-in.

Signing in

You can create an account with an email address and password, or use Sign in with Apple or Sign in with Google. With Apple or Google, Smashpoint never sees your password at all; Apple or Google confirm who you are and pass Smashpoint a token. Passwords for email accounts are never stored in readable form. If you forget one, you reset it from the sign-in screen; Smashpoint can’t read it back to you.

Payments

Smashpoint never sees or stores your card number. Personal Pro is bought through the App Store, Google Play, or Stripe on the web, and Organization plans are billed by Stripe. These providers are certified to the PCI-DSS standard that card networks require. Smashpoint receives a confirmation that you paid, not your card details.

Who can see what

Smashpoint is private by default. Nothing you record is visible to anyone until you take one of these actions:

• Connect with a person (a player, parent, or coach). They see the matches you share through that connection.
• Share a match as a public web page. Only that match, and only the score and stats; video replays never appear on public pages.
• Join an Organization. Members and admins of that Organization see the results recorded to it.

Notes you keep on a player are private to you and are never shared with anyone, including connected coaches. Video replays are visible only inside Smashpoint, to you and the people you’re connected with.

Children’s accounts

Parents and guardians can create and manage profiles for children under 18, for example for a junior program or a school team. Smashpoint doesn’t knowingly collect personal information directly from children under 13 (under 16 in the EEA and UK) without verifiable parental consent, and removes it if it finds it has.

Your data is yours

• Export. Organization admins can download their full member list as a CSV at any time. To request a copy of your personal data, contact support.
• Correct. Update your profile, players, and courts yourself in the app.
• Delete. You can request deletion of your account and personal data from account settings or by contacting support. Historical match results, rankings, and public ladder statistics may be retained to preserve league integrity, as described in the Privacy Policy.

What Smashpoint doesn’t do

• No advertising, and no selling of your data to anyone.
• No reading of your video by anyone at Smashpoint; clips are stored for you to watch, not reviewed.
• No tracking on the marketing site without your consent. Analytics cookies are set only if you accept them.

Good to know

• Sign-in trouble. If an app update signs you out, use Forgot password on the sign-in screen; the reset link comes from send.smashpoint.pro.
• Report a problem. If you think your account has been accessed by someone else, change your password and contact support right away.
• Full detail. The Privacy Policy (smashpoint.pro/privacy-policy) covers data collection, retention, your rights under GDPR and CCPA, and the third parties Smashpoint works with. The Terms and Conditions (smashpoint.pro/terms-and-conditions) cover your account and the service itself.

Related

• What is public and what is private
• Delete your account and data
• Reset your password
• What’s free and what needs Pro