Privacy Policy

Information we collect

• Account information: your email address and authentication records.
• Video and project information: videos you upload, generated previews and exports, rally and score edits, titles, thumbnails, and processing results. The iOS app reads a video from your photo library only after you pick it for upload, and never browses the library on its own.
• YouTube information: if you connect YouTube, an encrypted OAuth refresh token and records needed to complete and report uploads, such as the upload title, description, chosen visibility, status, YouTube video ID, and video URL.
• Plan and payment information: which plan you are on, how many games you have had analyzed in the current month, and, if you subscribe, the status and renewal date of your subscription. Payments are taken by Stripe. We never receive or store your card number.
• Operational information: error and service logs needed to secure, operate, and troubleshoot the service.

Cookies and information stored on your device

Vball Studio stores a small amount of information in your browser, using local storage and session storage, so the service works:

• Your sign-in session, so you stay signed in between visits.
• Upload progress, so a video upload that is interrupted can resume where it stopped.
• Preferences, such as the YouTube visibility you chose last and notices you have dismissed.
• Short-lived notes, which carry an action across a sign-in step, such as a YouTube upload you started before connecting your channel.

We do not use advertising or analytics cookies, and we do not allow third parties to place cookies or similar technology on your device for advertising or tracking. Our hosting and storage providers may set cookies that are strictly necessary for security and delivery. You can clear this information at any time through your browser's settings; doing so signs you out.

How we use information

We use this information to authenticate users, process and edit volleyball videos, save projects, create exports, perform user-requested YouTube uploads, provide support, prevent abuse, maintain the service, and improve analysis quality.

Improving analysis quality includes using videos, the results of analyzing them, and the corrections you make to those results to measure and train the models Vball Studio itself runs. If you would rather your games were not used this way, email abhisaar.y@gmail.com and we will exclude them. Once you delete your account, your games are no longer used to train or measure models. A model already built is not rebuilt, and our private record of how it was built, which can include clips and labels from the games it learned from, is kept so that model can be checked and reproduced.

People who appear in videos

A game recording shows the other players and sometimes people nearby. To follow a game, Vball Studio finds the people in the picture, follows each one for a few seconds around a serve, and compares how they look (clothing and build, as the camera sees them) to tell the four players apart and sort them into two teams. Small pictures of each player, cut from the video, are kept with the game so its owner can confirm who is who.

This automatic comparison is made within a single game. Vball Studio does not use face recognition or facial geometry, does not use the camera or Face ID data of your device, does not build profiles of the people in videos, and does not sell or share any of this. The pictures and results are deleted with the game.

Players are named by people, not by the comparison. A game's owner tags who played, and when someone joins Vball Studio we may look at the player pictures from games they say they played in to tag them in those games, so the games show in their library. If you appear in a video on Vball Studio and want it removed, or do not want to be tagged, email abhisaar.y@gmail.com.

Google and YouTube user data

Vball Studio uses YouTube API Services to upload videos. By using the YouTube upload feature you also agree to the YouTube Terms of Service.

When you connect YouTube, Vball Studio requests the https://www.googleapis.com/auth/youtube.upload scope. We use it solely to upload a video selected by the user to that user's own YouTube channel with the title, description, and visibility they choose.

It also requests the https://www.googleapis.com/auth/youtube scope, because YouTube offers no narrower permission for creating a playlist or for checking that an upload is still there. We use it solely to create a playlist with the name and visibility you choose on your own channel when you upload a session, to add the videos Vball Studio uploaded for that session to it, and to check whether a video or playlist Vball Studio uploaded still exists, so that one you have deleted can be uploaded again.

We do not read, edit, or delete YouTube videos, playlists, comments, or other account content that Vball Studio did not create. We do not use Google user data for advertising, sell it, or use it to train generalized AI models.

Vball Studio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Your use of YouTube through Vball Studio is also covered by the Google Privacy Policy.

How information is shared

We share information only with service providers needed to operate Vball Studio, including Supabase for authentication, database, and media storage; Cloudflare, which also stores game videos; Amazon Web Services, which briefly holds videos uploaded from the iOS app until they reach storage; Railway for backend processing; Modal, whose computers run our own video analysis models; TwelveLabs, which receives drill videos uploaded on the website to find their reps (games, and anything uploaded from the phone apps, are analyzed only by our own models); Stripe, which takes payments; Resend, which sends our emails; Apple, which delivers notifications to your iPhone; Vercel for frontend hosting; and Google/YouTube when you request a YouTube upload. We may also disclose information when required by law or to protect the service and its users.

How we protect your data

We protect the information we hold, including Google user data, with these measures:

• Encryption in transit. All traffic between your device, Vball Studio, our service providers, and Google is sent over HTTPS (TLS).
• Encryption at rest. Our database and media storage are encrypted at rest by our storage providers. The YouTube authorization (OAuth refresh token) we receive from Google is additionally encrypted by Vball Studio with a separate key before it is written to the database.
• Google tokens stay on our servers. YouTube access and refresh tokens are never sent to your browser or the iOS app, never written to logs, and are used only by our servers to perform an upload you asked for.
• Access controls. Each account can reach only its own data, enforced on our servers and by database access rules. Videos are kept in private storage and served through short-lived signed links. Access to production systems is limited to the people who operate Vball Studio.
• Least access. When you connect YouTube we request its upload permission and its account permission, because YouTube has no narrower permission for making playlists and checking that uploads are still there. Vball Studio only uploads the videos you ask it to, creates the playlists you ask for, and checks that those are still there; it does not read, change, or delete anything in your YouTube account that it did not create.
• Removal. When you disconnect YouTube or revoke access, we revoke the authorization with Google and delete the stored token.

Storage and retention

We retain project data while your project remains in Vball Studio and retain a YouTube connection until it is disconnected or revoked. If a project is selected for a private quality-evaluation dataset, we may keep a limited copy of the processed video and related labels after you delete the project so existing evaluations stay accurate. Those copies are not public, are deleted when you delete your account, and can be removed on request sooner. Some limited records may also remain temporarily in backups or logs for security and operational purposes.

Your choices and deletion

• You can delete individual projects and their stored media in Vball Studio. Limited evaluation copies described above may remain until you email abhisaar.y@gmail.com to request removal.
• You can disconnect YouTube at any time in Settings on the Vball Studio website, or revoke Vball Studio's access to your YouTube account from the Google security settings page.
• You can delete your account at any time: in Settings on the website or in the iPhone app, or in the account menu of the Android app. This deletes your account, your games and every video and picture made from them, evaluation copies of them, your highlights, profile and photo, and your YouTube connection, and it ends any paid plan straight away. In other people's games you are untagged: the name you played under stays on their scoreboard but no longer links to you. A copy of one of your games that someone else saved to their own library is theirs and stays. Stripe keeps its own payment records as the law requires. You can also email abhisaar.y@gmail.com to delete your account or any remaining personal data.

Children

Vball Studio is not directed to children under 13. Users are responsible for having permission to upload and process videos that include other people, and a video that shows anyone under 18 needs the permission of that person's parent or guardian.

Changes and contact

We may update this policy as the service changes. Questions or privacy requests can be sent to abhisaar.y@gmail.com.