Privacy Policy

1. Data controller

The data controller is Vito Cerrato, Via Friuli 18, 84090 Montecorvino Pugliano (SA), Italy.

Contact: vitocerrato46@gmail.com.

2. What personal data we collect

• Account information: name, email, password (stored hashed), country, tennis level, optional ranking, Instagram handle, and the date you accepted our terms.
• Waitlist information: name, email, country and an optional public profile link.
• Profile photos: stored privately; visible only to you, approved players and moderators.
• Player verification information: public tennis profiles, federation, ITF or WTA information used to confirm player status.
• Reports and screenshots: screenshots of public comments and descriptions you submit. These may contain personal data of third parties (e.g. the author of a comment).
• Links and context: links to original public posts, abuse type and related context.
• Moderation and security logs: moderation decisions, reports, blocks, and technical logs needed to keep the service secure.

3. Purposes and legal bases

Each processing activity relies on an appropriate legal basis under Art. 6 GDPR:

• Account creation and account management — performance of the contract (Art. 6(1)(b)).
• Transactional account emails, such as email verification and password reset — performance of the contract (Art. 6(1)(b)).
• Founding-player waitlist — your consent (Art. 6(1)(a)).
• Player verification — legitimate interest in a safe, verified community (Art. 6(1)(f)), using information you supply and, where appropriate, publicly available tennis-profile information.
• Reports, screenshots and moderation — legitimate interest in community safety, abuse prevention, moderation and documentation (Art. 6(1)(f)).
• Security, fraud prevention and moderation/security logs — legitimate interest (Art. 6(1)(f)).
• Marketing or newsletter emails — separate, optional consent (Art. 6(1)(a)).

Optional marketing consent is separate from using Civis: you can use the service without giving it, and withdraw it at any time.

4. Retention

The periods below are provisional operational periods selected by the data controller for the current early-stage version of Civis. They are not statutory periods and may be revised following a formal privacy/legal review.

• Account data: 30 days after account closure, unless longer retention is required to comply with legal obligations or to establish, exercise or defend legal claims.
• Waitlist data: 12 months after the last contact or interaction.
• Player verification information: 12 months after the approval or rejection decision.
• Reports and screenshots: 24 months after the report is closed or published, or earlier when the information is no longer necessary.
• Moderation and security logs: 12 months.

5. Recipients and service providers

Data is accessible only to authorised moderators. The following third-party services are used by Civis today:

• Lovable (Lovable Cloud) — website hosting, database, authentication, file/image storage and delivery of account emails. Data: account and profile data, posts, reports and screenshots, verification information, waitlist entries, email addresses, technical/log data. Role: processor. Processing locations and sub-processors are those set out in the provider's own documentation and data processing terms, which are currently under review.
• Google — "Continue with Google" sign-in, only if you choose it. Data: name, email address and Google account identifier. Google processes this data under its own terms and privacy policy; its exact role and processing locations are set out in Google's documentation, which is currently under review.

Civis does not use analytics, advertising or error-monitoring services. We do not sell personal data.

6. International transfers

Some of the providers above may process data outside the European Economic Area. Where this happens, the applicable destination countries and transfer safeguards are those documented by each provider. This information is currently under legal review, and you can request details at any time by contacting vitocerrato46@gmail.com.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing of your data, to data portability, and to withdraw consent at any time without affecting prior processing.

To exercise your rights, contact vitocerrato46@gmail.com. We respond within one month.

You have the right to lodge a complaint with a data protection authority: Garante per la protezione dei dati personali (Italy), or the competent supervisory authority where you live or work.

8. Minors

Minimum age: 18. Civis is currently available only to individuals aged 18 or older. Players under 18 are not currently eligible to create an account or join the private community. Civis does not currently onboard users under 18.

9. Automated processing and AI

Civis does not currently use artificial intelligence or automated decision-making. All moderation and verification decisions are made by people. If this changes, we will update this section before any AI feature goes live and clearly label any AI interaction or AI-generated content.

10. Cookies

See our Cookie Policy.