Security & privacy

Defaults that make sense for school and club film.

We approach this as if your athletes' families would read every line of the policy — because eventually they will.

  • Restricted access

    Pilot environments sit behind invite-only authentication. The public marketing site does not share auth cookies with the product.

  • Private storage

    Uploads live in tenant-scoped object storage. Browsers never receive direct download URLs to original files; playback uses short-lived signed links.

  • Coach review required

    Detector output is labeled "Alpha candidate" and stays in the needs-review queue until a coach confirms or rejects it.

  • Audit on every change

    Manual tag creation, review status changes, and admin actions are all written to an append-only audit log.

  • No public athlete exposure

    We do not publish team rosters, athlete pages, or scrapeable profiles. Marketing pages carry no third-party trackers.

  • Honest scope

    Tenant isolation is enforced in Postgres via row-level security in addition to the app-layer guards. Detector lineage strings and storage keys never leave the server.

Ready to try the alpha?

Pilot access is invite-only. Tell us about your team and we will reach out when a slot opens.

Request pilot access
Security & privacy · NextBallUp