Legal

Privacy Policy

This Privacy Policy explains how RacqI (Racquet Sports Intelligence) ("we", "us", or "our"), a SaaS product provided by RacqI S.r.l.s., a company based in Pavia, Italy, collects, uses, stores, and protects your personal data when you use RacqI (the "Service").

The Service is currently provided as a beta. The privacy practices described here apply to the beta phase. Where material changes occur after the beta phase, we will notify you in advance and, where appropriate, request renewed consent before the changes take effect.

We are committed to protecting your privacy and processing your data in accordance with the EU General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, and other applicable data protection laws.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with these practices, please do not use the Service.

1. Data Controller

The data controller responsible for processing your personal data is:

Note on legal form and company structure: RacqI S.r.l.s. is a società a responsabilità limitata semplificata registered in Italy (Companies Register of Pavia, no. 03054230184; REA PV-34394). RacqI S.r.l.s. is an independent company that owns the RacqI platform, its data, and the RacqI brand, and it is the entity responsible for providing the Service and acting as data controller. RacqI S.r.l.s. builds on, but is legally distinct from, the Racquet Sports Institute — an established domain-knowledge body that contributes curated industry expertise to the RacqI knowledge base under a defined arrangement; the Racquet Sports Institute does not process the personal data of users of the Service. As a company built for a global market, we also anticipate a future conversion to an EU Inc. (the EU's planned 28th-regime company form) once that form is legally finalised and applicable. None of these steps will change the location of data processing, the categories of data processed, the purposes of processing, the processors involved, or your rights under the GDPR.

2. What Data We Collect

2.1 Account Data

When you register for the Service, we collect:

Account creation and authentication is handled through Clerk, a third-party identity provider. We receive only the data necessary for authentication and account management from this provider.

2.2 Profile Data

You may provide profile information to improve the relevance of the Service, including:

Providing profile data is voluntary in the sense that you decide whether and what to enter. Where you do provide it, the core parameters (sport, facility type, project phase, location) are processed to deliver the analysis you have requested and are therefore necessary for the performance of our contract with you; free-text project notes and response preferences are processed on the basis of your consent. You can view, edit, or delete all profile data at any time via the settings area (Memory + Privacy) of the Service.

2.3 Conversation Data

When you use the Service, we process:

2.4 Memory Data

The Service includes an optional memory feature that stores contextual information about your facility across sessions to improve answer quality. Memory data consists of the free-text notes you maintain on a facility in the settings area (for example budget, project details, or preferences).

All memory data is written by you: the Service does not extract or store facts from your conversations automatically. You have full control over memory data and can view, edit, or delete it at any time.

2.5 Usage and Technical Data

We may collect limited technical data necessary for operating the Service, such as:

2.6 Location Data

If you provide a location (city or address) as part of your profile or within a question, the Service uses it to query external public-data APIs for location intelligence (competitor mapping, transport access, climate data, economic context). The location is processed for this purpose only and is not shared with third parties for any other purpose. No personal data beyond location coordinates is transmitted to these APIs.

2.7 Cookies and Local Browser Storage

We use the following browser storage mechanisms, all classified as strictly necessary under the ePrivacy Directive (no consent required):

We do not use third-party tracking cookies, advertising cookies, or analytics that track behaviour across websites. We do not use cookies for advertising or behavioural tracking.

2.8 Website Analytics

To understand which pages of this website are read and how visitors find us, we use Matomo, an open-source analytics tool that we host ourselves. It runs on our own server at www.racqi.cloud/analytics in Italy. There is no Google Analytics on this site and no analytics provider receives your data.

The same Matomo instance also measures our partner site racquetsports.institute, under identical settings. If you would rather not be counted at all, you can opt out here:

2.9 Website Enquiries and Launch Updates

Demo requests. When you request a demo on racqi.cloud, we receive the details you enter (name, organisation, email address, country, role and your message) by email and use them only to answer your request and arrange the demo (Art. 6(1)(b) GDPR, steps prior to a contract, and Art. 6(1)(a) GDPR, your consent). The details are not stored on the website server.

Launch updates. If you sign up for launch updates, we process your email address and the time of your sign-up and confirmation on the basis of your consent (Art. 6(1)(a) GDPR). We use a double opt-in: you first receive an email with a confirmation link, and only after you confirm do we send you updates — launch news and first market insights, a few emails at most. We keep your email address until you withdraw your consent. You can unsubscribe at any time by replying to any update or by writing to info@racqi.cloud; withdrawal does not affect the lawfulness of processing before it.

Both kinds of message are handled in our mailbox, hosted by our provider Aruba S.p.A. in the European Union. We do not pass these details to third parties and do not use them for advertising profiles.

2.10 Public Information About Racquet-Sports Facilities

RacqI maintains a database of racquet-sports facilities — tennis, padel, squash, badminton and pickleball clubs, centres and courts. For each facility we collect what is publicly available about it: its name, address and location, whether it is open, its sports and courts, prices, opening hours and programmes. Our sources are the facility's own website and booking pages, public registers and directories, map services and news articles. We use this database for statistical market analyses — for example how many facilities of a sport exist in a region. In a location analysis we may name the facilities that exist in the catchment area of a site; we do not pass on any further data about them.

Data from Facebook and Instagram. Where a facility runs a public Facebook Page or a public Instagram business account, we read it through Meta's official interfaces for one purpose only: to verify the facility data we already hold — that the facility exists and is open, and its name, address, sports, courts and opening hours. From these pages we do not collect personal data: no contact persons or roles, no email addresses, no phone numbers. We do not read private profiles, private accounts, groups or messages, nor any data of the people who follow, like or comment on these pages. We do not post, contact anyone or use these data for advertising.

Personal data. A facility's own website or a public register can name a contact person or a coach, or give a business email address or phone number. Where such data reach our database, we process them on the basis of our legitimate interest in accurate information about the racquet-sports market (Art. 6(1)(f) GDPR). They are not made available to users of RacqI in any form; they are used only internally to identify and check the facility, and we do not combine them into profiles of individuals. A coach who no longer appears in a facility's sources is removed after twelve months.

Corrections, objections and deletion. A facility, or a person named in its information, can ask us at any time to correct its data, object to the processing, or delete it — including all data we obtained from its Facebook Page or Instagram account. Write to info@racqi.cloud with the name and town of the facility and, if it concerns Facebook or Instagram, the address of the page or account. We confirm your request and complete it within 30 days; data obtained from Facebook or Instagram are deleted from our database, and a facility that asks us not to read its pages again is excluded from future reading. Your rights under section 8 apply in full.

3. How We Use Your Data

We process your personal data for the following purposes:

4. What We Do NOT Do with Your Data

This section describes commitments that are fundamental to how we operate:

5. Data Sharing and Third-Party Processors

We use a limited number of third-party service providers ("processors") to operate the Service. These processors act on our instructions and are contractually bound — through Data Processing Agreements (DPAs) with Standard Contractual Clauses (SCCs) where required — to process data only for the purposes we specify, in compliance with GDPR.

5.1 Categories of Processors and Recipients

We may add, replace, or discontinue AI model providers in order to maintain and improve the quality and availability of the Service. Where a new provider would involve a transfer of personal data outside the EEA, or a materially different retention practice, we will update this Privacy Policy and notify you before the change takes effect.

5.2 International Data Transfers

Your account profile, conversations, and uploaded files are stored within the European Union, and AI responses are generated within the European Union (Microsoft Azure EU Data Zone). The following processing operations involve a transfer of data outside the European Economic Area (EEA):

We regularly review the data protection practices of our processors and the legal frameworks governing international transfers.

5.3 AI Model Providers — Specific Commitments

When you submit a prompt, the text of your prompt and relevant context are sent to an AI model provider for processing. Under the terms of our Data Processing Agreements, the AI model providers:

The prohibition on model training applies without exception and to all of our AI model providers.

6. Data Storage and Hosting

Primary data storage is located exclusively in European data centres. This includes:

Processing outside the EU:

As described in Section 5.2, the text of a search query derived from your question is sent to OpenAI (USA) to search our knowledge base; for questions that need current information from the web, a search query may be sent to Perplexity AI or Tavily (USA); and account and session data are processed by Clerk (USA). Except for the account data held by Clerk, no personal data is stored outside the EU — the other transfers are transient processing operations.

Except for the account data held by our authentication provider Clerk, your data at rest — your profile, conversations, memories, and uploaded files — remains within the European Union at all times.

7. Data Retention

When you request account deletion, all associated data (profile, conversations, memories, uploads, support chat history) is permanently deleted from our live systems without undue delay. As described in the table above, residual copies may persist in encrypted backups until those backups expire; during that period the data is not processed for any purpose other than disaster recovery. Some anonymised, aggregated technical metrics that cannot be linked to you may be retained for service improvement.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, you can:

We will respond to your request without undue delay and in any event within one month, as required by GDPR (Art. 12(3)). This period may be extended by two further months where necessary, taking into account the complexity and number of requests.

9. Automated Decision-Making and Profiling

We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

The Service generates AI Outputs — analyses, estimates, benchmarks, and recommendations — in response to your queries. These outputs are decision-support material only. They are addressed to you, they do not determine any outcome affecting you, and no decision about you is taken by us on their basis. As set out in the Terms of Service, you remain solely responsible for reviewing, validating, and applying AI Outputs.

Where you have enabled profile and memory features, we use the information you provide to tailor the relevance and format of responses. This personalisation serves only to improve the usefulness of the answers you receive and can be disabled or deleted at any time in the settings area (Memory + Privacy).

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

No system is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. If we become aware of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR (Art. 33–34).

11. Age Requirement

The Service is a professional decision-support tool intended exclusively for individuals who have reached the age of 18. We do not knowingly collect personal data from persons under 18. If we become aware that a person under 18 has provided us with personal data, we will take steps to delete that data promptly. This requirement corresponds to the eligibility rules in Section 2 of our Terms of Service.

12. International Users

The Service is operated from Italy and primarily hosted in European data centres (Germany and Italy). If you access the Service from outside the European Economic Area, your data will be transferred to and processed within the European Union as part of providing the Service to you (Art. 49(1)(b) GDPR — necessary for the performance of a contract). The EU provides a high level of data protection under the GDPR.

For details on data transfers outside the EU that occur as part of search, web research, and authentication, please refer to Section 5.2.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy, subject to any renewed-acknowledgement requirement we communicate.

14. Supervisory Authority

If you believe that we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for RacqI S.r.l.s. is:

You may also contact the supervisory authority in your own EU/EEA member state.

15. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us:

This Privacy Policy should be read together with our Terms of Service and Refund Policy. All three documents are available at www.racqi.cloud.

RacqI S.r.l.s. — Privacy Policy — v1.3, October 2026

RacqI S.r.l.s. · Pavia, Italy · Innovative start-up · racqi.cloud Ecosystem know-how: RacquetSports.Institute

RacqI-Racquet Sports Intelligence S.R.L.S · Registered office: Via Montebello della Battaglia 4, 27100 Pavia (PV), Italy · Share capital EUR 1,000 fully paid · C.F. / P.IVA 03054230184 · Companies Register of Pavia no. 03054230184 · REA PV-34394