SportsX.AI — Privacy Policy

Next Play AI Inc. (operating as SportsX)
Version 2.2 · Effective date: October 13, 2026 · Last updated: October 13, 2026

This policy explains how Next Play AI Inc. ("SportsX", "we", "us") handles personal information when you visit sportsx.ai, book through SportsX, use SportsX through an AI assistant, or use the SportsX platform as a club or as a member of a club.

Summary

• Booking a court or class. When you book through SportsX, we collect your email (required), phone (optional), the booking details and payment records. We share the booking with the club or venue so it can check you in. We do not ask for your name, age or children's details for a court booking.
• AI assistants. Claude, ChatGPT and Muse can connect to SportsX to search venues, get prices and hold a slot. They send us your search details, not your contact or card details. They never get access to club member records.
• Clubs and their members. When a club uses SportsX to manage its members, the club decides what it collects and SportsX handles that information for the club.
• We do not sell personal information and do not use it for advertising.
• Where it is stored. Mainly in Canada. Some providers process information in the United States (Section 7).
• Your rights. You can ask to access, correct or delete your information. Email privacy@nextplayai.xyz.

1. Who we are and what this policy covers

Next Play AI Inc. is a Canadian company based in Oakville, Ontario. It operates SportsX, a platform that sports clubs, teams and venues use to manage their programs, and through which the public can book courts and programs.

This policy covers our website, our booking and checkout pages, our connector for AI assistants, the SportsX web and mobile apps, and messages you send us. It does not cover websites run by clubs or venues, or the AI assistants themselves, which have their own privacy policies.

The SportsX platform is offered to clubs in the United States and Canada, excluding Québec. Bookings are currently available only at venues in Ontario.

2. Our role

Privacy law distinguishes between the organization that decides how information is used (the "controller") and an organization that handles it on another's behalf (the "processor" or "service provider").

2.1 Bookers. When you book or pay through SportsX checkout, SportsX is the controller of your booking information. When we share your booking with the club or venue, the club or venue becomes responsible for its own copy, which it uses to provide your booking and check you in.

2.2 Club staff. When you use SportsX as a club owner, administrator, coach or staff member, SportsX is the controller of your account information.

2.3 Club members. When a club invites you (an athlete, parent or guardian) to register, sign documents or provide health information through SportsX, the club is the controller and SportsX is its service provider. The club's own privacy policy applies. Please contact the club first about those records; we will help if you contact us.

2.4 Associations. If your club is affiliated with a sport association, the association may have read-only, limited access to certain club information for safety, eligibility and governance. It never receives health records your club received from a doctor.

2.5 Website visitors. SportsX is the controller of information collected when you visit our website or contact us.

3. Information we collect

3.1 When you book or pay through SportsX

• Contact: your email address (required) and phone number (optional).
• Booking details: venue, sport, court or program, date, start time, duration, price, taxes, any deposit, booking status and confirmation number.
• Terms acceptance: the version of the Booking Terms you accepted, when you accepted it, and your IP address and browser information at that time.
• Payment information returned by Stripe: cardholder name, billing postal code and country, card brand, last four digits, expiry month and year, Stripe payment identifiers, payment status and fraud-check result. We never receive your full card number or security code.
• Source: whether the booking came from our website or from an AI assistant, and which one.
• Support messages you send us.

For a court booking we do not ask for your name, age, how many people will play, or any information about children, and we do not collect health information.

3.2 Through an AI assistant An AI assistant sends us the search details you give it (such as sport, date, time, duration and location) and the venue and time you choose. We send back venue listings, prices, availability, and a hold with a checkout link. Your email, phone and payment details are entered only on our checkout page. What you tell the AI assistant is handled under its provider's privacy policy.

3.3 Club staff accounts Name, role, contact details, login credentials, billing records (card details are held by Stripe), and records of activity in the platform.

3.4 Club members (collected for the club) Depending on what the club collects: name, date of birth, contact details, parent or guardian details, health information needed for safe participation (such as allergies, medical conditions, concussion history and emergency contacts), program participation, payment records, signed documents and consents, and, with separate consent, photos and video.

3.5 Website visitors IP address, browser and device information, pages visited, and anything you submit in a contact or demo form. When you type an address in a registration form, the text is sent to our address look-up provider.

3.6 What we do not collect Social Insurance or Social Security numbers, full card or bank numbers, government ID numbers, biometric data, or information about religion, ethnicity, sexual orientation or political views.

4. How we use information

We use personal information to:

• create, hold and confirm bookings, process payments and refunds, and send booking emails;
• let the club or venue provide your booking and check you in;
• run the platform for clubs and their members;
• provide support and respond to requests;
• prevent fraud and keep the Service secure;
• keep records required by law, such as tax and financial records;
• understand how the Service is used, including which channels bookings come from, using aggregated information.

We send booking messages by email only. We send marketing only if you separately agree, and you can unsubscribe at any time.

We do not sell personal information, do not use it for targeted advertising, and do not use club or member information to train general AI models without written consent. Health information is never sent to AI providers.

5. Consent

By booking, you consent to the uses described in this policy for your booking. Club members give consent through their club's forms. Parents or guardians with legal authority give consent for anyone under 18. You may withdraw consent for future uses, except where we must keep information by law or to complete a booking already made.

6. Sharing

We share personal information only:

• with the club or venue providing your booking: the booking details, your email and any phone number you gave;
• with the club you are a member of, for information collected on its behalf;
• with our service providers, listed below, who may use it only to provide their services to us;
• with an affiliated association, limited as described in Section 2.4;
• with our professional advisers, under confidentiality;
• when required by law, or to protect someone's safety;
• in a merger, acquisition or sale of our business, to a successor that adopts this policy;
• with your consent, in any other case.

Service providers

We use HubSpot as our customer-records system only. We do not use HubSpot tracking, Google Analytics, or advertising pixels.

7. Where information is processed

Our main hosting and database are in Canada. If you live in the United States, your information is transferred to and stored in Canada. Some providers process information in the United States or other countries, as listed above. Information processed in another country may be accessed by that country's authorities under its laws. Our providers are bound by agreements requiring protection comparable to Canadian law.

8. How long we keep information

Club members' records are kept according to the club's instructions and the law that applies to it.

9. Security

We use encryption in transit and at rest, access controls with multi-factor authentication, monitoring, regular backups and an incident-response plan. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner of Canada as the law requires.

10. Your rights

You can ask to:

• know what personal information we hold about you and how we use it;
• get a copy of it;
• correct it;
• withdraw consent for future uses;
• delete it, unless we must keep it by law.

How to ask. Email privacy@nextplayai.xyz. For a booking, send it from the email address you used, with your confirmation number, so we can confirm it is you. Club members should contact their club first. We respond within 30 days and do not charge for routine requests.

United States. If a state privacy law applies, you also have the rights it gives, including to appeal our decision by emailing privacy@nextplayai.xyz with "Appeal" in the subject line. We honour Global Privacy Control signals. We do not sell or share personal information for advertising.

11. Children

You must be 18 or older to book through SportsX. Adults may book for children, but we do not collect children's information for court bookings. When clubs register children for programs, a parent or guardian with legal authority provides the child's information and consent through the club. We do not knowingly let children under 13 give us personal information directly. If you think we have a child's information without proper consent, email privacy@nextplayai.xyz and we will look into it and delete it where appropriate.

12. Health information

Health information that clubs collect is sensitive. The club is responsible for it and must obtain express consent. SportsX stores it for the club with extra safeguards and never sends it to AI providers. Requests about health records should go to the club first.

13. Cookies

Our Cookie Policy explains the cookies we use. We use only cookies that are needed for the Service to work and for security. We do not use analytics or advertising cookies.

14. Changes

We may update this policy. If we make a material change, we will post it here and notify club account holders by email at least 30 days in advance. The date at the top shows when it was last updated.

15. Contact and complaints

Privacy Officer, Next Play AI Inc. (operating as SportsX) 2030 Bristol Circle, Suite 210, Oakville, Ontario L6H 6P5, Canada privacy@nextplayai.xyz

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376), or to the privacy regulator where you live. For complaints about a club, contact the club first.