Privacy Policy
Last updated: July 2026
Introduction
BackcourtIQ LLC (“BackcourtIQ,” “we,” “us,” or “our”) operates the BackcourtIQ website and web application (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Service.
By creating an account or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
We built BackcourtIQ with privacy in mind. We collect only what we need to operate the Service, we do not sell your personal information, and we give you meaningful control over your data.
1. Who We Are
BackcourtIQ LLC is a women's basketball fan engagement platform. We are incorporated in the State of Virginia and do business in Virginia.
Email: privacy@backcourtiq.com
General inquiries: connect@backcourtiq.com
Address: 440 Monticello Ave # 334322 Ste 1802, Norfolk, VA, 23510-2670, USA
Website: backcourtiq.com
2. Who This Policy Applies To
This Privacy Policy applies to all users of the BackcourtIQ Service, including visitors who have not created an account. It applies to users in all locations, including users in the United States, California, Virginia, and the European Economic Area.
Additional rights for California residents are described in Section 11. Additional rights for Virginia residents are described in Section 12. Additional rights for EEA/UK residents are described in Section 13.
BackcourtIQ requires users to be at least 16 years old. We do not knowingly collect personal information from anyone under 16. If we discover we have collected data from a user under 16, we will delete it immediately.
3. Information We Collect
We collect information in three ways: information you give us directly, information collected automatically when you use the Service, and information we derive or infer.
3.1 Information you provide directly
| Category | Data | When collected | Why |
|---|---|---|---|
| Account identity | Name, email address | When you create an account via Clerk | To identify you, authenticate you, and communicate with you |
| Authentication credentials | Password (stored as a secure hash by Clerk — we never see plain-text passwords) | Account creation | To verify your identity |
| Social login data | Name, email, profile photo from Google or Apple (if you use social sign-in) | When you sign in via OAuth | To authenticate your account without a password |
| Age confirmation | Timestamp of age confirmation (not your date of birth) | During sign-up | To record that you confirmed you are 16 or older, as required by our Terms of Service and applicable law |
| Community posts and comments | Text content you write in the community feed | When you post or comment | To display your content to other users |
| Chat messages | Text content you send in live game chat rooms | During live games | To display messages to other users in the same game chat in real time |
| Player follows | Which players you choose to follow | When you follow or unfollow a player | To personalize your experience |
| Notification preferences | Whether you want game reminders and which games | When you set preferences | To send you reminders you have opted into |
3.2 Information collected automatically
| Category | Data | How collected | Why |
|---|---|---|---|
| Usage and navigation data | Pages visited, features used, time spent, clicks, scroll depth | PostHog analytics | To understand how users interact with the Service and improve it |
| Game engagement signals | Which games you view, which players you look up, how long you spend on game detail pages | PostHog analytics | To understand fan interest and improve content — also used in aggregate to produce the trend data described in Section 5 |
| Device and browser | Browser type, operating system, screen resolution, device type (mobile/desktop) | Vercel Analytics | To ensure the Service works correctly across different devices |
| Performance data | Page load times, Core Web Vitals | Vercel Speed Insights | To monitor and improve app performance |
| Session cookies | Session token managed by Clerk | Automatically on sign-in | To keep you signed in across pages |
| Analytics cookies | PostHog analytics identifier | When you consent to analytics cookies | To track usage patterns — only set after you accept in the cookie consent banner |
3.3 Information we do NOT collect
We want to be explicit about what we do not collect:
- We do not collect GPS location, precise geolocation, or street-level location data. Approximate city-level location may be inferred by PostHog (our analytics provider) from your IP address as part of standard analytics processing — see Section 6.1.
- We do not collect financial information, payment card numbers, or banking details
- We do not collect government-issued ID numbers, Social Security numbers, or passport information
- We do not collect biometric data
- We do not collect information about your health, medical history, or physical characteristics
- We do not build individual user profiles for advertising purposes
- We do not track you across other websites or apps
4. How We Use Your Information
We use the information we collect only for the purposes described below. We do not use your personal information for any purpose that is incompatible with why we collected it without first obtaining your consent.
- Providing the Service — To operate BackcourtIQ, display game schedules, show box scores, run live game chat, display player profiles, and provide all other features of the Service
- Authentication and security — To verify your identity when you sign in, protect your account, and detect and prevent fraud or abuse
- Personalization — To remember your player follows and preferences so your experience is relevant to you
- Moderation — To enforce our Community Guidelines, review flagged content, and take action against violations
- Product improvement — To analyze how users interact with the Service so we can fix bugs, improve features, and build new ones
- Aggregate trend data — To produce the aggregated, non-identifiable fan behavior data described in Section 5
- Legal compliance — To comply with applicable laws, respond to legal requests, and protect our legal rights
5. Aggregate Fan Trend Data — What We Share and What We Don't
5.1 What aggregate data is
BackcourtIQ's business model includes sharing aggregated, statistical insights about fan behavior with third-party partners — such as brands, sponsors, media companies, and sports organizations — and we may receive compensation for doing so. We want to be direct about that.
What we share is aggregate trend data — it describes patterns across groups of users, not individuals. We do not sell your personal information. We do not sell your name, email, account ID, or any data that can identify you as a person. The distinction matters, and we take it seriously.
5.2 Our minimum threshold commitment
We commit to the following protections to ensure aggregate data cannot be used to re-identify individuals:
- We will not share any aggregate data point that is derived from fewer than 100 users. Data points below this threshold are suppressed entirely.
- We will not combine aggregate data with other data sets in ways that could reasonably re-identify individual users.
- We will require all third-party recipients of aggregate data to agree contractually that they will not attempt to re-identify individual users from the data.
5.3 What this is NOT
To be unambiguous: the aggregate data we share is not a sale of personal information under the CCPA or any other applicable privacy law. It does not include your name, email address, user ID, or any other identifier linked to you as a person. It does not include individual-level data that has been pseudonymized. It is statistical trend data only.
If we ever introduce a data sharing arrangement that does constitute a sale of personal information under applicable law, we will update this Privacy Policy, notify you in accordance with Section 16, and provide you with a clear opt-out before any such sharing begins.
6. How We Share Your Information
We do not sell your personal information. We share your personal information only in the following circumstances:
6.1 Service providers
We use third-party service providers who process data on our behalf. Each is bound by contract to use your data only for the purpose of providing services to us and to maintain appropriate security measures.
| Service provider | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Clerk | Authentication and user account management | Name, email, session tokens | clerk.com/privacy |
| Neon (PostgreSQL) | Database hosting | All structured user data | neon.tech/privacy-policy |
| Vercel | Website hosting, analytics, performance monitoring | Page views, device info, performance metrics | vercel.com/legal/privacy-policy |
| PostHog | Product analytics and engagement tracking | Usage events, game engagement signals, city-level location (aggregated) | posthog.com/privacy |
| Pusher | Real-time game chat delivery | Chat message content during live games | pusher.com/legal-archived/privacy-policy |
| Upstash (Redis) | Rate limiting for chat | User ID only, for rate limit enforcement — no message content | upstash.com/trust/privacy.pdf |
| Inngest | Background job processing and scheduled tasks | Processed in transit — no long-term storage of personal data | inngest.com/privacy |
| ESPN | Broadcast schedule data — which network a game is airing on and when. Used to populate the “Where to Watch” card on game pages. | No personal user data is shared. We query their public schedule API for game broadcast information only. | espn.com/espn/tos |
| OpenAI | Automated chat message moderation screening (where configured — not all deployments use this service) | Chat message text, screened before display and not retained by OpenAI beyond moderation processing | openai.com/privacy |
| BallDontLie | WNBA statistics data provider — player profiles, game scores, box scores, and season stats displayed throughout the Service | No personal user data is shared. We query their API for public sports data only. | balldontlie.io |
| Anthropic | AI-generated game trend summaries displayed in the Analytics tab (“AI Game Trends”). Summaries are generated from aggregated game and player statistics and are labeled as AI-generated in the interface. | Aggregated game statistics and player data only. No personal user data is included in AI generation requests. | anthropic.com/privacy |
6.2 Aggregate data partners
As described in Section 5, we may share aggregate, non-identifiable fan trend data with brands, sponsors, media companies, or sports organizations. This is not a sale of personal information.
6.3 Legal requirements
We may disclose your information if required to do so by law, subpoena, court order, or government request. We will notify you of such requests where legally permitted to do so.
6.4 Business transfer
If BackcourtIQ is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you by email and with a prominent in-app notice at least 14 days before your information is transferred and becomes subject to a different privacy policy.
6.5 With your consent
We may share your information with third parties for purposes not described here when we have your explicit consent to do so.
7. Advertising
BackcourtIQ does not currently run advertising or use third-party advertising networks. We do not share your personal information with advertisers.
If we introduce advertising in the future, we will update this Privacy Policy and notify you at least 14 days in advance. We will not introduce targeted behavioral advertising — advertising based on your individual browsing history or profile — without first obtaining your explicit opt-in consent. Any future advertising will be clearly disclosed in an updated version of this policy.
8. Data Retention
| Data type | Retention period |
|---|---|
| Account data (name, email, preferences, player follows) | Retained while your account is active. Permanently deleted within 7 days of account deletion. |
| Chat messages | Automatically and permanently deleted 1 hour after the associated game ends. |
| Community posts and comments | Retained while your account is active. Permanently deleted within 7 days of account deletion. Posts are not retained in anonymized form after account deletion. |
| Age confirmation timestamp | Retained while your account is active. Deleted with account. |
| Usage and analytics data | Individual-level PostHog event data retained for 12 months. Aggregate analytics retained indefinitely in non-identifiable form. |
| IP address | Used to derive city-level location on each request. Not stored as a persistent record linked to your account. |
| Encrypted backups | Residual copies of deleted data may persist in encrypted backups for up to 30 days before those backups are overwritten. Your data is not accessible or used during this period. |
| Moderation records | Records of moderation actions (warnings, suspensions, bans) retained for 2 years for safety purposes. |
9. Security
We implement reasonable and appropriate technical, organizational, and administrative measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security practices include:
- All data transmitted between your device and BackcourtIQ is encrypted using HTTPS/TLS
- Passwords are never stored in plain text — they are hashed and managed by Clerk
- Access to production systems and databases is restricted to authorized personnel only
- Rate limiting on user-facing API endpoints to prevent abuse
- Security headers (Content Security Policy, HSTS) to protect against common web attacks
- User-generated content is sanitized before rendering to prevent cross-site scripting (XSS) attacks
No method of transmission over the internet or method of electronic storage is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in harm to you, we will notify you as required by applicable law.
10. Your Rights and Choices
Regardless of where you live, BackcourtIQ provides the following rights to all users:
- Access — You can request a copy of the personal information we hold about you by emailing privacy@backcourtiq.com.
- Correction — You can update your account information at any time in your account settings.
- Deletion — You can permanently delete your account and all associated personal data at any time by going to Settings and selecting “Delete Account.” Your deletion request is irreversible, and we delete associated data according to the timelines in Section 8.
- Opt-out of notifications — You can manage notification preferences at any time in your account settings.
- Cookie preferences — You can manage analytics cookie preferences at any time through the cookie consent banner or by contacting us.
- Withdraw consent — Where we process your data based on consent, you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at privacy@backcourtiq.com. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.
11. California Residents — CCPA / CPRA
California law provides additional privacy rights. This section describes those rights and how BackcourtIQ handles California residents' data.
11.1 Categories of personal information we collect
In the preceding 12 months, BackcourtIQ has collected the following categories of personal information from California residents:
| Category (CCPA) | Examples | Collected? |
|---|---|---|
| Identifiers | Name, email address, user ID | Yes |
| Personal information (Cal. Civ. Code § 1798.80) | Name, email address | Yes |
| Protected classification characteristics | Age confirmation (16+) — we do not collect race, ethnicity, gender, or other protected characteristics | Age only |
| Commercial information | None — we do not collect purchase history or financial data | No |
| Biometric information | None | No |
| Internet / network activity | Game views, page navigation, feature usage — see Section 3.2 | Yes |
| Geolocation data | City or metro area derived from IP address — not precise location | Yes (city only) |
| Sensory data | None | No |
| Professional / employment information | None | No |
| Education information | None | No |
| Inferences | Fan interest signals derived from game and player engagement — used only in aggregate as described in Section 5 | Yes (aggregate) |
| Sensitive personal information | None — we do not collect Social Security numbers, financial account numbers, precise geolocation, racial/ethnic origin, religious beliefs, genetic data, biometric data, health data, or sexual orientation | No |
11.2 Business and commercial purposes for collection
We collect the categories above for the purposes described in Section 4. We do not collect personal information for purposes that are incompatible with those disclosed here.
11.3 Sale and sharing of personal information
BackcourtIQ does not sell personal information as defined under the CCPA/CPRA. We do not share personal information with third parties for cross-context behavioral advertising.
We share aggregate, non-identifiable fan trend data as described in Section 5. This data does not constitute personal information under the CCPA because it cannot reasonably be linked to any individual. We apply a minimum threshold of 100 users per data point and prohibit recipients from attempting re-identification.
11.4 Your California privacy rights
California residents have the following rights under the CCPA/CPRA:
- Right to know — You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom we have shared it.
- Right to delete — You have the right to request deletion of your personal information. You can exercise this right directly through Settings → Delete Account. We will delete your information as described in Section 8.
- Right to correct — You have the right to request correction of inaccurate personal information. You can update most information directly in your account settings.
- Right to opt out of sale/sharing — We do not sell or share personal information, so there is nothing to opt out of. If this changes, we will update this policy and provide an opt-out mechanism before any sale or sharing begins.
- Right to limit use of sensitive personal information — We do not collect sensitive personal information as defined under the CPRA.
- Right to non-discrimination — We will not discriminate against you for exercising any of your California privacy rights.
To exercise your California rights, contact us at privacy@backcourtiq.com or use the delete account feature in Settings. We will verify your identity before processing requests. We will respond within 45 days (with up to one 45-day extension if needed, with notice).
11.5 Authorized agents
California residents may designate an authorized agent to submit requests on their behalf. We will require written proof of the agent's authorization and may verify your identity directly before processing the request.
11.6 Shine the Light
California Civil Code § 1798.83 permits California residents to request information about personal information shared with third parties for their direct marketing purposes. BackcourtIQ does not share personal information with third parties for direct marketing purposes.
12. Virginia Residents — VCDPA
Virginia residents have the following rights under the Virginia Consumer Data Protection Act (VCDPA), effective January 1, 2023:
- Right of access — You may request confirmation of whether we process your personal data and access to that data.
- Right to correct — You may request correction of inaccuracies in your personal data.
- Right to delete — You may request deletion of your personal data. You can exercise this right directly via Settings → Delete Account.
- Right to data portability — You may request a copy of your personal data in a portable format by emailing privacy@backcourtiq.com. We will fulfill verified requests within 45 days.
- Right to opt out — You may opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. BackcourtIQ does not conduct any of these activities.
To exercise your Virginia rights, contact privacy@backcourtiq.com. We will respond within 45 days. If we decline to act on your request, we will explain why and describe how to appeal. You may appeal a decision by emailing privacy@backcourtiq.com with the subject line “VCDPA Appeal.”
BackcourtIQ does not currently meet the VCDPA's volume thresholds (100,000 Virginia consumers, or 25,000 with 50% revenue from data sales) that trigger mandatory compliance. However, we voluntarily honor these rights for all Virginia users as a matter of good practice.
13. European Economic Area and United Kingdom — GDPR
If you are located in the EEA or UK, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing of your personal data.
13.1 Legal bases for processing
| Processing activity | Legal basis |
|---|---|
| Operating the Service (account, chat, schedule, players) | Contract — necessary to perform the Service you signed up for |
| Analytics and product improvement | Legitimate interests — improving the Service for all users |
| Security and fraud prevention | Legitimate interests — protecting the Service and users from harm |
| Age confirmation | Legal obligation — compliance with applicable age-related laws |
| Analytics cookies (PostHog) | Consent — only after you accept in the cookie consent banner |
| Game reminders and notifications | Consent — only after you opt in to notifications |
| Aggregate fan trend data | Legitimate interests — this data is non-personal and cannot identify you |
13.2 Your GDPR rights
EEA and UK residents have the right to: access, correct, erase, restrict processing of, and port their personal data. You also have the right to object to processing based on legitimate interests and to lodge a complaint with your local data protection authority.
To exercise your GDPR rights, contact privacy@backcourtiq.com. We will respond within 30 days.
13.3 International data transfers
BackcourtIQ is operated in the United States. If you access the Service from the EEA or UK, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home country. By using the Service, you consent to this transfer. We take appropriate safeguards to protect your data during transfer, including where applicable using Standard Contractual Clauses approved by the European Commission.
14. Users Under 16
BackcourtIQ requires users to be at least 16 years old. We do not knowingly collect personal information from anyone under 16. During sign-up, users must confirm they are 16 or older.
If we become aware that we have collected personal information from a user under 16, we will delete the account and all associated data immediately. If you believe we may have collected information from someone under 16, please contact us at privacy@backcourtiq.com.
Our 16-year minimum is set to align with GDPR's digital consent age and to provide a consistent global standard. Virginia's VCDPA also includes specific protections for users under 16 on platforms that provide an addictive feed.
15. Cookies and Tracking
BackcourtIQ uses the following cookies and tracking technologies:
| Cookie / technology | Provider | Purpose | Can you opt out? |
|---|---|---|---|
| Session cookie | Clerk | Keeps you signed in. Strictly necessary — cannot be disabled without breaking authentication. | No — strictly necessary |
| Analytics cookie | PostHog | Tracks usage patterns to help us improve the Service. | Yes — via the cookie consent banner on first visit, or by contacting us |
| Performance analytics | Vercel Speed Insights | Monitors Core Web Vitals and page load performance. No personal data stored. | Not applicable — no personal data |
We do not use advertising cookies, third-party tracking pixels, or any tracking technology designed to follow you across other websites. If we introduce new cookies in the future, we will update this section and display the cookie consent banner again.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the “Last Updated” date at the top of this page
- Notify you by email to the address on file for your account
- Display a prominent banner within the Service the next time you log in
Material changes will take effect 14 days after notice is provided, giving you time to review the changes before they apply. Your continued use of the Service after that 14-day period constitutes acceptance of the updated policy. If you do not accept the changes, you may delete your account via Settings before the effective date.
Non-material changes (such as clarifications, typo corrections, or updated third-party links) may be made without notice.
17. How to Contact Us
Email: privacy@backcourtiq.com
Subject line for data requests: “Privacy Request — [your name]”
Subject line for VCDPA appeals: “VCDPA Appeal — [your name]”
Address: 440 Monticello Ave # 334322 Ste 1802, Norfolk, VA, 23510-2670, USA
Website: backcourtiq.com/privacy
We are committed to resolving privacy complaints promptly. If you are not satisfied with our response, you may have the right to lodge a complaint with a supervisory authority. In the US, this is the Federal Trade Commission (ftc.gov). In California, this is the California Privacy Protection Agency (cppa.ca.gov). In Virginia, this is the Virginia Attorney General (oag.state.va.us). In the EEA, contact your local data protection authority.