Privacy Policy

Review draft, not yet in effect. Prepared October 20, 2026.

Who we are and how to contact us

StringEasy LLC operates StringEasy, a tennis marketplace covering racquet stringing, coaching, courts, and tennis goods. This policy explains how personal information is handled when you use the website, app, marketplace, or support channels.

For privacy questions, access or deletion requests, or an appeal of a privacy decision, email john@stringeasy.net. Use “Privacy request” or “Privacy appeal” in the subject line. Mailing address: StringEasy LLC, 1305 W 11th St, PMB 164, Houston, TX 77008, United States. This is a mailing address, not a customer-service location.

Information involved in using StringEasy

The information needed depends on your role and the features you choose. The following is the proposed disclosure inventory; the publisher must confirm or remove each category before release.

Account and profile information: name, email, phone number where requested, account role, login-provider information, profile content, and preferences. We use this information to create and secure accounts, identify the appropriate marketplace role, and communicate with you.

Service and marketplace information: provider or seller profiles; listings and listing photos; racquet, string, gauge and requested-tension details; lesson or facility preferences; and order, booking, cancellation, refund or dispute records when those features are enabled. We use these records to provide the requested service and handle transaction questions.

Payment and provider information: transaction amounts and status, payment references, billing details, and provider payout, tax or verification information where required. Payment providers may collect sensitive payment or identity details directly. The final policy must identify the actual processor and distinguish what StringEasy receives from what the processor keeps. Do not state that StringEasy never receives full card or bank details until the integration is verified.

Messages and support: messages, attachments, support requests, reports and related correspondence. Authorized personnel or service providers may access these records to deliver support, investigate abuse or fraud, and meet legal obligations. Any automated message analysis must be specifically confirmed and disclosed before use.

Location: locations you enter, such as a service area, court, shipping address, or an enabled pickup/drop-off address. Device location is a separate permission. If precise location is collected, the app must explain its purpose at the point of collection, obtain required permission or consent, and allow you to change that permission. Do not enable background location by default for ordinary player use.

Technical information: IP address, device and browser information, service logs, crash reports, and cookie or SDK events needed for the deployed service. The actual analytics, attribution, advertising and monitoring tools must be listed in the underlying data inventory and reflected in the final notice and store disclosures.

Public profiles, listings, reviews and voluntarily posted content may be visible to other users or the public. Do not post private contact, financial, medical, identity-document or precise-location information in public content. A public post is not permission for unrelated use of someone's image or information.

Why we use information

We use information for the specific purposes described above: providing requested marketplace features, maintaining accounts, communicating about transactions, handling support and disputes, preventing abuse, protecting security, and meeting legal and recordkeeping obligations. Service improvement or marketing use must be consistent with the notice, your choices, and applicable law. A new, incompatible purpose requires the notice and consent process required by law before that use begins.

Who receives information

Information may be shared with the following recipients when relevant to the feature or transaction:

  • Other participants: the provider, seller, buyer, facility or other participant involved in your interaction. Share only the information necessary to complete that interaction. An enabled Delivery Partner must receive only the pickup, drop-off, contact and handoff information needed for the assigned leg.
  • Service providers: providers of hosting, payments, maps, communications, support, security and other verified operational services. Their contracts and access must reflect the purpose for which data is supplied.
  • Authorities and professional advisers: when reasonably necessary to comply with law, respond to valid legal process, investigate wrongdoing, protect people or property, or establish or defend legal claims.
  • Business successors: as part of a legitimate merger, acquisition, financing or asset transfer, with appropriate confidentiality protections and any notice or choice required by law.
  • Recipients you choose: when you direct a disclosure or provide valid consent.

Independent providers, sellers, facilities and external sites may act under their own privacy policies. This does not excuse StringEasy from its own obligations for disclosures it controls.

Cookies, advertising and marketing

Essential cookies or similar technologies may be needed to keep you signed in and operate the service. Optional analytics, advertising, attribution and cross-service tracking must be inventoried and paired with the appropriate notice and consent or opt-out controls.

Publication blocker: whether StringEasy sells personal data, shares it for cross-context advertising, or uses targeted advertising has not been verified. The final policy must state the actual position and provide any required opt-out mechanism and recognition of applicable preference signals. A generic “we do not sell data” statement must not be inserted without checking SDK and vendor behavior.

You can opt out of promotional email using its unsubscribe mechanism or by contacting us. Transactional and security messages are separate. Promotional SMS requires a separate, valid consent flow; receiving service texts must not be treated as blanket marketing consent.

Your choices and privacy requests

You may ask to access, correct, obtain a portable copy of, or delete personal information, and exercise applicable opt-out or consent-withdrawal rights. Rights and exceptions depend on applicable law. We will verify requests proportionately, avoid requesting unnecessary identity documents, and respond within the applicable legal deadline. We will explain any refusal and the available appeal process. You may use an authorized agent where the law permits.

Send a request to john@stringeasy.net. If a request is declined, reply with “Privacy appeal” and explain why you disagree. Where applicable, the response to an appeal will explain how to complain to the appropriate regulator, including the Texas Attorney General. We do not discriminate against you for exercising rights protected by law. Withdrawing an optional permission may prevent the feature that needs it from working, but must not disable unrelated features unnecessarily.

Account deletion and retention

Account deletion must be available through an easy-to-find in-app flow and an accessible web request resource before launch. Closing an account or disabling sign-in is not a substitute for deleting associated personal information.

We retain information only for a documented service, security, dispute, accounting, tax or legal purpose, and delete or de-identify it when that purpose ends, subject to applicable law. Any legally justified exception must be explained to the requester. Transaction records that must be retained should be restricted and separated from a deleted public profile. Backups must follow a defined deletion lifecycle, not indefinite retention.

Publication blockers: confirm the exact in-app deletion path; deploy and test the public web deletion resource; document retention periods or meaningful criteria by data category; specify backup handling and justified exceptions; verify the deletion of associated content and processor-held data. This draft does not promise an unimplemented button, completion period or retention schedule.

Children and junior players

The proposed account policy is for adults aged 18 or older. A parent or legal guardian may arrange an eligible junior activity through their own account only where that workflow is supported. An adult-account rule alone does not establish compliance with children's privacy law.

Do not create child-facing accounts, direct junior messaging, or collect a child's identifying photos, precise location or other personal information until the actual flow has been reviewed for COPPA and other applicable requirements. If we learn that personal information was collected unlawfully from a child, we will take appropriate steps to secure and delete it and respond to the parent or guardian. Contact john@stringeasy.net about a suspected child-data issue.

Coaching recordings and promotional media are separate purposes. Promotional use requires separate affirmative permission from the relevant adult and, where applicable, the child's parent or guardian. Participation in a lesson must not be treated as promotional consent.

Security and international processing

StringEasy must use administrative, technical and organizational safeguards appropriate to the information and risk. No online service can guarantee absolute security. Report suspected account compromise or a privacy incident to john@stringeasy.net; do not email passwords or full payment-card details.

Publication blocker: confirm the storage and processing countries, actual safeguards, processor contracts, and any transfer safeguards required for the regions served. Do not claim all information stays in the United States without verification. The initial publishing recommendation is United States availability only, not a determination that other countries' laws can never apply.

Policy changes

The published policy will carry an effective date and revision date. Material changes will be communicated through an appropriate notice, and consent will be obtained where required before a new use begins. Prior consent does not automatically authorize a materially different purpose.

Become a Charter Member

Get early access to the platform, exclusive discounts, and referral credits when you sign up today.