Privacy Policy

1. Introduction

This Privacy Policy applies to all services provided by SplitStep AI Inc., a Delaware corporation ("SplitStep AI," "we," "us," or "our"), including:

SplitStep App: Our web application, where you upload videos and view the resulting analysis through our front end
Pipeline: Our API-driven video processing service, which performs the same processing and returns data directly to your systems
Cloud Services: The cloud-based video processing and storage that underpins both the SplitStep App and the Pipeline
Website: Our website at splitstep.ai and related domains

Tater, our legacy browser-based labeling tool, is not currently offered to new users. Section 2.2 describes how it handles data for users with existing access.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. This Privacy Policy should be read together with our End User License Agreement (EULA).

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you provide to us directly, including:

Account Information: Name, email address, password, and account preferences
Payment Information: Credit card details, billing address, and payment method information (processed securely through third-party payment processors)
Profile Information: Optional profile details such as organization name, role, and preferences
Communications: Messages, support requests, and feedback you send to us

2.2 Content You Upload

SplitStep App and Pipeline:

Videos you upload for processing
Metadata associated with videos (titles, descriptions, tags, timestamps)
Any other files or data you submit for analysis

            Everything you upload is processed in our cloud. The SplitStep App and the Pipeline are two
            ways of reaching the same Cloud Services. Videos you submit through either are uploaded to our servers,
            processed there, stored, and used to improve our models. Processing does not happen on your device.
        

Tater (Legacy, not offered to new users):

Videos are processed on your own device and are not stored on our servers
Labeling data you create is not stored on our servers
Because our models run on our servers, the image data needed to perform an analysis is transmitted to us for processing, but it is not retained and is not used to train our models
If you choose to send a video from Tater to our Cloud Services, it is stored and processed under the Cloud Services terms in this Privacy Policy and our EULA
If you connect your own cloud storage account, that account is yours and its contents are your responsibility. We cannot access, retrieve, or delete data held there

2.3 Automatically Collected Information

When you use our Services, we automatically collect certain information:

Usage Data: Features accessed, actions taken, time spent, frequency of use
Device Information: IP address, browser type, operating system, device identifiers
Log Data: Server logs, error reports, performance data
Cookies and Tracking: See Section 8 for details on cookies
Inference Data: Information about AI model requests (for performance monitoring and improvement)

2.4 Information from Third Parties

We may receive information from:

Payment processors (transaction confirmation, payment status)
Authentication services (if you use social login)
Analytics providers
Business partners and referral sources

3. How We Use Your Information

3.1 Primary Uses

We use your information to:

Provide Services: Process videos, generate analytics, deliver Output Data
Account Management: Create and maintain your account, authenticate access
Payment Processing: Process transactions, prevent fraud, send receipts
Customer Support: Respond to inquiries, troubleshoot issues, provide assistance
Service Improvements: Analyze usage patterns, fix bugs, improve user experience
Communications: Send service updates, security alerts, and administrative messages

3.2 Machine Learning and Model Training

When you upload videos through the SplitStep App or the Pipeline, we use your content to train and improve our AI models. This includes:

Training computer vision models for player tracking and ball detection
Improving shot classification algorithms
Developing new features and capabilities
Research and development purposes

By uploading videos, you grant us a perpetual license to use your content for these purposes (as detailed in our EULA). The models we train are our proprietary property.

Commercial customers: if your organization has signed a Commercial Data License Agreement, whether we may train on your content is set by that agreement and its order form, which may exclude training entirely.

Tater - No Training on Local-Mode Data:

Videos processed on your device through Tater are not stored or used for training
Your labeling data is not collected or stored
Image data sent to our servers to perform an inference is not retained or used for training
We may collect aggregate, anonymous performance metrics
If you upload a video from Tater to our Cloud Services, the training terms described above apply

Future Changes: We reserve the right to modify our data collection practices in the future. If we make material changes, we will notify users and update this Privacy Policy. Continued use of the Services after such changes constitutes acceptance.

3.3 Legal and Safety

We may use your information to:

Comply with legal obligations and court orders
Enforce our terms of service and EULA
Protect against fraud, abuse, and security threats
Defend our legal rights and interests
Ensure safety of our users and services

3.4 Marketing (With Your Consent)

With your consent, we may use your information to:

Send promotional emails about new features or services
Share relevant content, tips, and best practices
Invite you to events, webinars, or surveys

You can opt-out of marketing communications at any time. See Section 11 for details.

4. How We Share Your Information

4.1 We Do NOT Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers and Partners

We share information with trusted third-party service providers who assist us in operating our Services:

Cloud Infrastructure: AWS, Google Cloud, or similar providers for hosting and storage
Payment Processors: Stripe, PayPal, or similar services for payment processing
Analytics Providers: Tools for understanding usage patterns and performance
Email Services: For sending transactional and marketing emails

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Business Transfers

If SplitStep AI is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and your options.

4.4 Legal Requirements

We may disclose your information if required by law or in response to:

Subpoenas, court orders, or legal processes
Government or regulatory requests
Investigations of potential violations of our terms
Threats to safety or security

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably identify you with:

Research partners and academic institutions
Industry partners for benchmarking
The public in reports or publications

5. Data Retention

5.1 SplitStep App and Pipeline

Videos and Data: Retained indefinitely unless you request deletion
Training Data: Once used for model training, we retain the right to continue using derived data and trained models even after account deletion
Account Information: Retained for the duration of your account plus applicable legal retention periods

5.2 Tater (Legacy)

Videos and Labeling: Not stored on our servers
Uploads to Cloud Services: If you choose to upload a video from Tater to our Cloud Services, retention is handled under Section 5.1
Account Information: Retained for the duration of your account
Usage Logs: Retained for up to 2 years for security and performance analysis

5.3 General Retention

Payment Records: Retained for 7 years for tax and accounting purposes
Communications: Retained as needed for customer support and legal compliance
Legal Holds: Data subject to legal holds is retained until the hold is lifted

6. Data Security

We implement industry-standard security measures to protect your information:

Encryption: Data encrypted in transit (TLS/SSL) and at rest
Access Controls: Strict access controls and authentication requirements
Security Monitoring: Continuous monitoring for threats and vulnerabilities
Regular Audits: Security assessments and penetration testing
Employee Training: Staff trained on data protection and privacy practices
Incident Response: Procedures for detecting and responding to data breaches

No Absolute Security: While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data using industry best practices.

7. International Data Transfers

SplitStep AI is based in the United States. If you access our Services from outside the U.S., your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

These countries may have data protection laws different from those in your country. By using our Services, you consent to the transfer of your information to the United States and other countries.

European Users: For users in the European Economic Area (EEA), UK, or Switzerland, we comply with applicable data protection laws including GDPR. See Section 10 for additional rights.

8. Cookies and Tracking Technologies

8.1 What We Use

We use cookies and similar tracking technologies to:

Essential Cookies: Enable core functionality (login, session management)
Performance Cookies: Understand how you use our Services
Analytics: Measure traffic, usage patterns, and feature popularity
Preferences: Remember your settings and preferences

8.2 Your Choices

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality.

Most browsers allow you to refuse or delete cookies
You can opt-out of analytics tracking (see Section 11)
Some features may not work properly without cookies

8.3 Third-Party Tracking

Third-party services (like analytics providers) may use their own cookies. We do not control these cookies. Review their privacy policies for details.

9. Third-Party Links and Services

Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties.

When you leave our Services or interact with third-party integrations, we encourage you to review their privacy policies.

10. Your Privacy Rights

10.1 General Rights

You have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to certain exceptions)
Data Portability: Request your data in a machine-readable format
Objection: Object to certain processing of your information
Restriction: Request restriction of processing in certain circumstances

10.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

Right to Know: What personal information we collect, use, share, and sell
Right to Delete: Request deletion of your personal information
Right to Opt-Out: We do not sell personal information, so no opt-out is needed
Right to Non-Discrimination: We will not discriminate against you for exercising your rights
Shine the Light: Request information about information shared with affiliates for marketing (we do not do this)

10.3 European Residents (GDPR)

If you are in the EEA, UK, or Switzerland, you have rights under GDPR:

Legal Basis: We process your data based on contract performance, legitimate interests, consent, or legal obligations
Right to Withdraw Consent: Where processing is based on consent, you can withdraw it
Right to Lodge Complaint: You can complain to your local data protection authority
Data Protection Officer: Contact us at info@splitstep.ai for data protection matters

10.4 Important Limitations

Training Data Exception: If your videos have been used to train our AI models, we cannot "delete" the learned patterns from trained models. Deletion requests will remove your original videos and personal information, but trained models will remain our property.

Legal Retention: We may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, financial records).

11. Your Choices and Controls

11.1 Account Settings

You can update your account information and preferences through your account settings.

11.2 Marketing Communications

To opt-out of marketing emails:

Click the "unsubscribe" link in any marketing email
Update your email preferences in account settings
Contact us at support@splitstep.ai

Note: You cannot opt-out of transactional emails (receipts, account notifications, security alerts).

11.3 Data Deletion

To request deletion of your data:

Contact us at info@splitstep.ai

We will process deletion requests within 30 days, subject to legal retention requirements.

11.4 Do Not Track

Our Services do not currently respond to "Do Not Track" browser signals. You can control tracking through browser settings and opt-out options described in Section 8.

12. Children's Privacy

Under 13: Children under 13 cannot create or hold their own account, and we do not knowingly collect personal information directly from them online. A child under 13 may take part through a supervised profile created and managed by an adult account holder, such as a parent, guardian, coach, club, or program. In that case we receive information about the child from the adult rather than from the child, and the adult controls the profile and the videos uploaded to it. If you believe a child under 13 has created an account or given us information directly, contact us at info@splitstep.ai and we will delete it.

Ages 13 to 17: A user aged 13 to 17 may use the Services only with the consent of a parent or legal guardian, who must agree to our EULA on their behalf. In the European Economic Area, the United Kingdom, and Switzerland, the minimum age is 16 unless local law permits a lower age. We may ask for verification of parental consent and may suspend the account if we cannot verify it.

Parent and guardian rights: A parent or guardian who has consented for a minor, or who manages a supervised profile, may review the minor's personal information, request its correction or deletion, and withdraw consent at any time by contacting info@splitstep.ai. Withdrawing consent closes the account or removes the supervised profile and its associated videos. Where a coach, club, or program manages a supervised profile, a parent or guardian may make the same requests to us directly.

Minors appearing in videos: Minors may appear in videos uploaded by coaches, parents, guardians, clubs, or programs. The person or organization uploading the video is responsible for obtaining all necessary consents and for complying with applicable laws, including any law treating movement or biometric data as sensitive personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.

When we make changes:

We will update the "Last Updated" date at the top
For material changes, we will notify you by email or prominent notice on our website
Your continued use of our Services after changes constitutes acceptance

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

SplitStep AI Inc.
Privacy and data protection: info@splitstep.ai
Account and billing support: support@splitstep.ai
Legal notices: legal@splitstep.ai
Website: https://splitstep.ai

Response Time: We will respond to privacy requests within 30 days (or as required by applicable law).

15. Data Processing Summary

For quick reference, here's how we handle data across our services:

Data Type	SplitStep App & Pipeline	Tater (legacy)
Where processing happens	Our cloud	Your device
Videos	Stored indefinitely	Not stored (unless you upload to Cloud Services)
Labeling Data	Stored with videos	Not stored (unless uploaded to Cloud Services)
ML Training	Used for training, unless a Commercial Data License Agreement says otherwise	Not used for training; if uploaded to Cloud Services, used for training
Sold to third parties	Never	Never
Account Info	Stored	Stored
Payment Info	Stored (if paid)	Stored (if paid)
Usage Logs	Detailed logs	Aggregate only
Inference Calls	Logged for analysis	Sent, not retained