Privacy Policy

How TurboSpin collects, uses, discloses, and retains personal information

Last Updated
April 22, 2026
Company
Nicolaus Inc, d/b/a D2CEBL
Product
TurboSpin

1. Scope

This Privacy Policy describes how Nicolaus Inc, d/b/a D2CEBL ("Company," "we," "us," or "our") collects, uses, discloses, and retains personal information in connection with TurboSpin, including our website, web application, session pages, and related support or contact channels (collectively, the "Service").

This Privacy Policy applies to organizers, participants, guests, and other visitors who access or use the Service. It does not apply to third-party websites, products, or services that we do not own or control, even if the Service links to them or interacts with them.

2. Personal Information We Collect

The personal information we collect depends on how you interact with the Service.

Account and profile information. If you create an account, we may collect your email address, display name or full name, password hash or comparable authentication data, account preferences, and account-related identifiers.

Session and organizer information. If you create, manage, or participate in a session, we may collect session name, scheduled date and time, location or court details you enter, skill-level or rating information, player capacity, roster information, participant status, round and court assignments, match results, standings, retirements, score submissions, and related timestamps.

Guest participant information. Participants may be able to join sessions without creating an account. For guests, we may collect a display name, optional email address, session participation state, and information needed to associate participation with a later-created account if that functionality is available.

Communications. If you contact us or submit a support or contact form, we may collect your name, email address, the contents of your message, attachments, screenshots, and any other information you choose to send. Please do not submit Social Security numbers, government identification numbers, payment card data, medical information, or other sensitive personal information in free-text fields.

Information about other people. Organizers and other users may submit information about participants or other individuals, such as display names, email addresses, roster placement, and scores. We collect that information from the user who submits it.

Device, log, and usage information. We may automatically collect internet or other electronic network activity information such as IP address, browser type, device information, pages or screens viewed, feature usage, referring URLs, error logs, and timestamps.

Cookies and browser storage. We use cookies, browser storage, and similar technologies to keep users signed in, maintain session state, support security and fraud prevention, remember preferences, and operate core real-time functionality. This may include storing authentication or session identifiers, join or claim tokens, display-name preferences, and similar technical state.

Analytics. We use Google Analytics 4 to understand website and product usage, measure engagement, troubleshoot performance, and improve the Service.

Information from third parties. If you sign in using a third-party login provider such as Google, we may receive basic account information such as your name, email address, and account identifier from that provider. If you subscribe to a paid plan through Stripe or another payment processor, we may receive billing and subscription metadata such as customer and subscription identifiers, payment status, billing period dates, and limited billing contact information. We do not store full payment card numbers.

Sensitive personal information. We do not intentionally request or need categories of sensitive personal information beyond limited account authentication data and any information you choose to submit in free-text fields. We do not use sensitive personal information to infer characteristics about you.

3. How We Use Personal Information

We may use personal information to provide, maintain, secure, and improve the Service; create and manage accounts; authenticate users; organize sessions; generate rosters, assignments, standings, and score histories; process subscriptions and manage billing; communicate with you about your account, password resets, support requests, service notices, and updates; monitor, analyze, debug, and improve product performance; detect, investigate, and prevent fraud, abuse, security incidents, and other misuse; enforce our Terms of Use and other policies; comply with legal obligations; establish, exercise, or defend legal claims; and create aggregated or deidentified information that does not identify you and may be used for lawful business purposes.

4. How We Disclose Personal Information

Service providers. We may disclose personal information to vendors and service providers that perform services for us, such as hosting and infrastructure providers, authentication providers, analytics providers, payment processors, email delivery providers, customer support tools, and security or fraud-prevention providers. These parties are authorized to process personal information on our behalf only as needed to provide services to us or as otherwise permitted by law.

Session visibility and other users. Because TurboSpin is a session-management and participation tool, certain information is inherently visible to organizers, participants, guests, and other people who can access a session page. Depending on settings and the way a session is shared, session-related information may be visible to other users and, for public or listed sessions, to the public.

At your direction. If you use social sharing links, third-party login providers, or other optional integrations, we may disclose information as directed by you or as necessary to carry out your request.

Legal, safety, and compliance disclosures. We may disclose personal information if we believe doing so is reasonably necessary to comply with applicable law, regulation, legal process, or government request; to protect the rights, property, and safety of the Company, our users, or others; to enforce our agreements; or to investigate or prevent fraud, security issues, or illegal activity.

Business transfers. We may disclose personal information as part of an actual or proposed merger, acquisition, financing, asset sale, bankruptcy, reorganization, or similar corporate transaction.

No sale or cross-context behavioral advertising. As described in this Privacy Policy, we do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

5. Public and Shared Session Visibility

Join links and join codes should be treated like invitations. Anyone who obtains a valid join link or join code may be able to access the corresponding session page and related information.

Sessions marked as listed, public, or otherwise discoverable may appear in a public directory or other publicly accessible pages while active or live. Depending on the Service's functionality and how a session is shared, certain session pages, results, or history may remain accessible after completion through direct links, account history, screenshots, shares, or other copies outside our control.

Information that may be visible on session pages includes the session name, organizer display name, date, time, location details, skill-level information, participant display names, round and court assignments, standings, scores, completed results, and related history.

Please use care in selecting display names and in deciding what information to enter into session fields. Once information is shared through a public or shared session page, we cannot control how other people copy, cache, screenshot, archive, or further distribute that information.

6. Cookies, Browser Storage, and Analytics Choices

Some cookies and browser-storage technologies are necessary for the Service to function properly. If you block or disable essential cookies or browser storage, some features, including sign-in and live session functionality, may not work correctly.

You can generally control cookies through your browser settings. Google Analytics 4 may collect information about your use of the Service as described above. If you do not want analytics information collected through cookies or similar technologies, you may be able to limit that collection through browser settings or available browser controls, although doing so may affect functionality.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain account and session history, support safety and security, comply with legal obligations, resolve disputes, and enforce agreements.

Account information. We generally retain account and profile information while your account is active and for a reasonable period afterward as needed for legitimate business, legal, security, and recordkeeping purposes.

Subscription and transaction information. We retain billing and subscription metadata for as long as needed for accounting, tax, chargeback, fraud-prevention, audit, and legal purposes.

Support communications. We retain support and contact records for as long as reasonably necessary to respond to your inquiry, improve support quality, document issues, and protect our rights.

Logs and analytics. We retain log, security, and analytics information for as long as reasonably necessary for security, troubleshooting, analytics, and product improvement, subject to our internal retention schedules and the retention settings available in the service providers we use. For Google Analytics 4, event- and user-level analytics retention is governed by the configuration of our GA4 property at the time of collection.

Session history and score records. Session rosters, standings, scores, and related history may be retained for as long as needed to operate the Service and may be retained indefinitely to preserve organizer and participant history, allow later association of guest participation with accounts, maintain the integrity of historical records, investigate abuse, and resolve disputes.

Deletion requests. If you request deletion of your personal information, we will delete or deidentify information as required by applicable law, subject to legal exceptions and operational necessities. Deleting an account does not necessarily remove session history, scores, or records that are associated with sessions created or used by other people. Where feasible, we may deidentify or disassociate account-level information from remaining historical records.

We may also retain aggregated or deidentified information that cannot reasonably identify you, and we may retain information as required or permitted by law.

8. U.S. Privacy Rights and Choices

Depending on where you live and subject to applicable law, you may have the right to request access to the personal information we hold about you, request correction of inaccurate personal information, request deletion of personal information, request a portable copy of certain personal information, appeal a denial of your request, and exercise other rights provided by applicable state privacy laws.

How to submit a request. You may submit privacy requests by contacting us at support@turbospin.com or through Contact form. If you maintain an account with us, we may ask you to submit certain requests through your authenticated account where permitted by law.

Verification. We may take reasonable steps to verify your identity or authority before fulfilling a request. We will not require you to create an account in order to make a request, although if you already have an account we may ask you to use it for security and verification purposes. We will use information collected in connection with request verification only for verification, response, recordkeeping, fraud-prevention, and related compliance purposes.

Authorized agents and parents or guardians. Where permitted by law, you may use an authorized agent to make a request on your behalf. A parent or legal guardian may also make a request on behalf of the parent's or guardian's child where authorized by law.

Response timing. We will respond within the timeframe required by applicable law. In many cases, that means we will respond within 45 days, subject to extensions where allowed by law and where reasonably necessary.

Appeals. If we deny your request in whole or in part and applicable law gives you an appeal right, we will tell you why and explain how to appeal. You may also appeal by replying to our response or contacting support@turbospin.com with the subject line "Privacy Appeal."

Non-discrimination. We will not unlawfully discriminate against you for exercising privacy rights provided by applicable law.

California disclosures. Depending on how you use the Service, the categories of personal information we collect and disclose for business purposes may include identifiers; customer records information you choose to provide; commercial information such as subscription and billing metadata; internet or other electronic network activity information; general location information you enter in session details or that may be inferred from IP address at a city or regional level; user content, communications, and activity history; and sensitive personal information limited to account login or authentication data. We collect these categories from you, from other users who submit information about you, automatically from your device or browser, and from service providers and login or payment partners. We use and disclose these categories for the business and commercial purposes described in this Privacy Policy.

We do not use or disclose sensitive personal information for purposes other than providing the Service, account security, fraud prevention, legal compliance, and other purposes permitted by applicable law.

9. Children and Teens

TurboSpin is intended primarily for adults and community sports participants. The Service is not directed to children under 13.

If you are under 13, do not use the Service or submit personal information to us. We do not knowingly collect personal information from children under 13 without legally required parental consent. If we learn that we have collected personal information from a child under 13 without the consent required by law, we will delete or deidentify that information as required by law.

If you are between 13 and the age of majority in your jurisdiction, you should use the Service only with the permission and supervision of a parent or legal guardian where required by applicable law.

If you are a parent or guardian and believe that a child has provided personal information to us in violation of applicable law, please contact us at support@turbospin.com. Organizers, parents, and guardians should avoid submitting more personal information about a child than is reasonably necessary for participation in a session.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version and change the "Last Updated" date above. If we make material changes, we may also provide additional notice as appropriate or as required by law. Your continued use of the Service after the effective date of the updated Privacy Policy means that the updated Privacy Policy applies to your use of the Service.

12. Contact Information

If you have questions, concerns, or privacy requests, please contact us at: