This Privacy Policy describes how Milanast LLC, a New Mexico limited liability company ("we," "us," or "our") collects, uses, and shares information about you when you use the Milanast platform and related services (the "Service"). By using the Service, you agree to this policy.
Account information. When you register, we collect your name, email address, password, year of birth, and ZIP code. Year of birth and ZIP code are required for age verification and location-based features. Optionally, you may provide tennis ratings (UTR, NTRP) and gender.
Tournament and match data. We collect match scores, event registrations, standings, and tournament participation history as you use the Service.
Device and usage data. We automatically collect your IP address, browser type, device identifiers, pages visited, and timestamps when you interact with the Service.
Communications. If you contact us by email or through the app, we retain those communications to resolve your inquiry.
SMS consent. If you opt in to text message notifications, we record your consent including the time, IP address, and the exact consent language shown at the time of opt-in. This record is maintained for legal compliance.
With other tournament participants. Your name, match results, and standings within a tournament are visible to other registered participants and administrators of that tournament.
With club and tournament administrators. Administrators of clubs or tournaments you are affiliated with can view your profile information and match history within their tournament.
With service providers. We share data with trusted vendors who help us operate the Service (e.g., database hosting, email delivery, analytics). These vendors are bound by data processing agreements and may not use your data for their own purposes.
For legal reasons. We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Milanast, our users, or the public.
We do not sell your personal data. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
If you add a phone number in your account settings, you will receive one automated SMS text message containing a one-time code to verify that number. Message and data rates may apply. We do not send recurring SMS notifications.
You can remove your phone number at any time in your account settings. Doing so does not affect your ability to use the Service.
For help, reply HELP to any message or contact us at admin@milanast.com.
We retain your account information for as long as your account is active or as needed to provide you the Service. Match data and standings may be retained indefinitely to support historical records and ratings. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
We use the following cloud infrastructure providers to operate the Service. These companies process your data strictly on our behalf and are bound by data processing agreements:
All data is processed and stored on cloud servers located within the United States, regardless of where you access the Service from. If you are located outside the United States — including in India — your personal data is transferred to and stored in the United States, which may have different data protection laws than your home country. By using the Service, you consent to this transfer. See the "India Users" section below for additional disclosures required under Indian law.
We use industry-standard security measures including encrypted data transmission (HTTPS), hashed password storage, and access controls to protect your information. No system is perfectly secure; we encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access to your account.
The Service does not permit children to create their own accounts. A child may only participate through a parent-managed child profile, created and controlled entirely by a parent or legal guardian's own account, in accordance with the Children's Online Privacy Protection Act (COPPA).
Verifiable parental consent. Before a child profile is created, the parent or guardian must be logged in under their own verified account and affirmatively check a consent statement describing exactly what is collected and how it is used. We log the consenting parent, the child profile, the version of the consent text shown, the timestamp, and the IP address of that consent.
What we collect for a child profile — nothing more. First name, last name, a parent-chosen display name (shown everywhere in place of the child's real name), gender, and year of birth. Optionally, a UTR rating if the parent provides one. We do not collect a child's email address, phone number, physical address, or exact date of birth, and children have no login credentials of their own — every action is performed by the parent, logged in as themselves, having selected the child's profile as the active context.
No public exposure. A child profile is never shown on any public, unauthenticated page — no public player profile, no public search results, no public leaderboards or standings, no public tournament results. A child's data and match history are visible only inside the parent's own authenticated account.
No marketing to children. Child profiles are excluded from all marketing and promotional communications. The only messages sent are transactional and tied to the child's own matches or tournaments (e.g. a score needs confirming), and those are always delivered to the parent's own contact channels, never to the child directly.
Parental access and deletion rights. A parent can view everything stored for their child, and can delete a child's profile at any time from their account's "Manage Child Profiles" screen. Deletion removes or irreversibly anonymizes the child's personal information; some match/tournament records may be retained in anonymized form where necessary to preserve the integrity of other players' results.
If you believe we have collected information about a child outside of this parent-managed consent process, contact us immediately at admin@milanast.com and we will investigate and delete it promptly.
Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you, to object to or restrict certain processing, and to receive a copy of your data in a portable format. To exercise these rights, contact us at admin@milanast.com. We will respond within 30 days.
Texas residents: under the Texas Data Privacy and Security Act (TDPSA), you have the right to know what personal information we collect about you, the right to correct inaccuracies, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a request, email admin@milanast.com.
California residents: under the CCPA, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To submit a request, email admin@milanast.com.
India users: if you access the Service from India, we process your personal data (as a Data Fiduciary) in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), in addition to the practices described elsewhere in this policy. You have the right to obtain a summary of your personal data and the processing activities we carry out, the right to correction and erasure of your personal data, the right to nominate another individual to exercise your rights on your behalf in the event of death or incapacity, and the right to lodge a complaint with the Data Protection Board of India. As described above, your personal data is transferred to and stored in the United States as part of operating the Service; we take this into account in how we handle your data and only transfer it as necessary to provide the Service to you. To exercise any of these rights or raise a grievance, contact our Grievance Officer at admin@milanast.com. We will acknowledge your request and respond within the timeframe required under the DPDP Act.
We use session cookies to keep you logged in and to secure your session. We may use analytics tools to understand how the Service is used. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but some features of the Service may not function correctly without them.
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If changes are material, we will notify you through the Service or by email before the changes take effect.
Questions about this Privacy Policy? Contact us at admin@milanast.com. Our Grievance Officer for data protection matters, including under India's DPDP Act, can also be reached at this address.
← Back