Privacy Policy

1. Information We Collect

1.1 Information Facility Owners Provide

When a Facility Owner registers for and uses the Service, we may collect:

• Name, business name, email address, and phone number
• Facility details (location, courts, sports offered, pricing rules)
• Billing and account information required to operate the Service
• Login credentials and account settings

1.2 Information Collected From End Users (Facility Customers)

When End Users book facilities, sign up for memberships, sign waivers, or receive notifications through a Facility Owner's account, we may collect:

• Name, email address, and phone number
• Booking history, membership status, and facility usage data
• Digital waiver signatures and related waiver content
• Communications sent through the Service (e.g., booking confirmations, reminders)

1.3 Information We Do Not Collect

100Arena never requests, collects, or stores any Stripe API keys, secret keys, or other payment gateway credentials from Facility Owners or End Users. Any such credentials are managed exclusively within the Facility Owner's own Stripe account and are never transmitted to or held by 100Arena.

1.4 Automatically Collected Information

We may automatically collect limited technical information such as IP address, browser type, device information, and usage logs for the purposes of security, fraud prevention, and service improvement.

2. Payment Processing and Stripe — Facility Owner Responsibility

100Arena integrates with Stripe, Inc. ("Stripe") solely as a technical means for Facility Owners to accept online payments from their End Users. In connection with this integration:

• 100Arena does not process, hold, or have access to payment card numbers, bank account details, or other sensitive financial instrument data. All such data is collected, transmitted, and stored directly by Stripe in accordance with Stripe's own privacy policy and terms of service, available at stripe.com/privacy.
• Facility Owners are solely and exclusively responsible for their own Stripe account, including account setup, verification, tax reporting, chargebacks, refunds, payout schedules, compliance with card network rules, and any disputes arising from payments processed through their Stripe account.
• 100Arena is not a party to, and assumes no liability for, any payment transaction, refund, chargeback, payout delay, or financial dispute between a Facility Owner and an End User, or between a Facility Owner and Stripe.
• Facility Owners are responsible for maintaining the security and confidentiality of their own Stripe credentials. 100Arena will never ask a Facility Owner to share their Stripe API keys, secret keys, or login credentials, and any communication purporting to request such information should be treated as fraudulent and reported to us immediately.
• Any questions, complaints, or disputes regarding payment processing should be directed to Stripe or resolved directly between the Facility Owner and the relevant End User, as applicable.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service (bookings, memberships, waivers, pricing, maintenance tracking, and reporting)
• Facilitate communication between Facility Owners and their End Users
• Send transactional and operational email notifications (see Section 6)
• Monitor, troubleshoot, and improve the Service
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with applicable legal obligations

We do not sell personal information to third parties.

4. Data Retention — 90-Day Retention Policy

100Arena retains booking, membership, waiver, and related operational data for a period of ninety (90) days from the date of creation or last activity, unless a shorter or longer period is required by applicable law.

• After the applicable retention period, data may be permanently deleted, archived, or anonymized from our active systems without further notice.
• Facility Owners are solely responsible for independently exporting, downloading, and retaining copies of any booking records, financial data, waivers, customer data, or reports they wish to keep beyond the 90-day retention period.
• 100Arena is not responsible for any data loss, business interruption, compliance failure, or damages of any kind arising from data that is deleted, unavailable, or inaccessible after the 90-day retention period has elapsed.
• Facility Owners are encouraged to maintain their own independent backups of critical business and financial records, including for tax, legal, and regulatory purposes.
• Certain records (such as those required for legal, tax, or dispute-resolution purposes) may be retained longer where required by law, or shorter where requested via a valid deletion request under Section 8.

5. How We Share Information

We may share information with:

• Stripe, solely to facilitate payment processing initiated by the Facility Owner (see Section 2)
• Service providers who perform functions on our behalf (e.g., hosting, email delivery, analytics), under confidentiality obligations
• Facility Owners, who receive End User booking, membership, and waiver data necessary to operate their facility
• Law enforcement or regulators, where required by law, legal process, or to protect the rights, property, or safety of 100Arena, our users, or the public
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this Privacy Policy or a materially similar policy

6. Email Communications

All automated and administrative email communications relating to the Service — including booking confirmations, reminders, cancellation notices, waiver requests, membership updates, and account notifications — are sent from notifications@100arena.com.

• End Users and Facility Owners should treat emails from this address as official communications from 100Arena on behalf of the relevant facility.
• We are not responsible for communications sent from any other domain, email address, or channel purporting to represent 100Arena.
• Facility Owners and End Users may manage certain notification preferences within their account settings, where available. Transactional emails necessary for the operation of a booking or account (e.g., booking confirmations) may not be optional.

7. Digital Waivers

Waivers signed through the Service are stored electronically and made available to the relevant Facility Owner for their records. Facility Owners are solely responsible for determining whether the waiver content and format used meet the legal requirements applicable to their facility, sport, and jurisdiction. 100Arena does not provide legal advice regarding the enforceability or sufficiency of any waiver.

8. Your Rights and Choices

Depending on your location, you may have rights to:

• Access, correct, or request deletion of your personal information
• Object to or restrict certain processing of your data
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, contact us using the details in Section 12. We will respond within the timeframe required by applicable law. Note that certain data may already have been deleted in accordance with our 90-day retention policy (Section 4) prior to any request.

9. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Use of the Service is at your own risk in this respect.

10. Children's Privacy

The Service is not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children. Where minors participate in facility activities (e.g., youth sports memberships or waivers), such information must be submitted by a parent or legal guardian, and the Facility Owner is responsible for obtaining any consents required under applicable law.

11. International Data Transfers

Your information may be processed and stored in countries other than your own. By using the Service, you consent to the transfer of information to such countries, which may have data protection laws different from those in your jurisdiction.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: info@100arena.com

Website: 100arena.com

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Service after any changes constitutes acceptance of the updated policy. Material changes will be communicated via email or a notice on the Service where required by law.

14. Limitation of Liability Regarding Data and Payments

To the maximum extent permitted by applicable law, 100Arena, its officers, employees, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to: (a) payment processing conducted through a Facility Owner's Stripe account; (b) data deleted or made inaccessible following the 90-day retention period; or (c) any reliance on waiver content generated through the Service. This limitation applies regardless of the legal theory of liability and even if 100Arena has been advised of the possibility of such damages.