Privacy Policy

Padel Society is operated by a legal entity based in Mexico City, Mexico. For the purposes of this notice, we are the data controller responsible for the processing of your personal data under the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

Privacy Officer contact: privacidad@padelsociety.mx.

• Basic profile data: name, mobile phone number in E.164 format, and an optional avatar.
• WhatsApp messages: messages you send us to book, confirm, or ask about reservations.
• Stripe PaymentIntent reference: the latest Stripe PaymentIntent identifier linked to a purchase. We never store full card numbers; Stripe is the PCI-compliant payment processor.
• Video clips: 30-second clips captured by your club’s fixed camera when you or another player on your court presses the button. If you do not claim the clip within 5 minutes, we delete it.
• Bookings and in-app activity: bookings, tournaments, rankings, matchups, and purchases made inside the platform.

• Service operations: SMS authentication, bookings, payments, and clip delivery.
• Tax compliance: CFDI 4.0 invoicing before the SAT, only when we issue an invoice.
• Fraud prevention: OTP rate limiting and webhook signature validation.
• Transactional messaging: WhatsApp transactional communication within Twilio-approved templates.

We do not share your data with third parties except for the providers strictly necessary to operate the service, including Stripe, Fintoc, Twilio, AWS, and Sentry.

You have the right to access, correct, cancel, or object to the processing of your personal data. You can exercise those rights directly from the app:

• Access: from your profile, use "Download my data" to get a JSON file with everything we store about you.
• Correction: edit your name and avatar from your profile.
• Cancellation: from your profile, use "Delete my account." This is irreversible. We anonymize your phone number and name, while keeping the minimum financial records required by Mexican tax law for 5 years.
• Objection: email privacidad@padelsociety.mx. We respond within 20 business days.

Unclaimed clips are kept for 5 minutes. Claimed but unpaid clips are kept for 24 hours. Paid clips are kept indefinitely or until you request cancellation. Financial records, including CFDI and transaction logs, are retained for 5 years to comply with Mexican tax requirements.

Some providers process data outside Mexico, including AWS us-east-1, Stripe US, and Sentry US. By using the service, you accept these transfers.

If we materially change this notice, we will notify you on WhatsApp during your next session. The current version is always published at padelsociety.mx/privacy.