Privacy Policy

Axiom Ops is the controller of the data described here. You can reach us at support@axiomops.io.

Only what the product needs to function:

• Account information. Your email address, and a display name and profile picture if you sign in with Google. Passwords are handled entirely by Google Firebase Authentication and are stored as salted hashes — we never see or store your password.
• Content you upload. Video files, player photographs, and audio tracks, together with the technical details we read from them (duration, dimensions, frame rate, codec, file size, original filename).
• Content you create. Player profiles — name, jersey number, position, team, school, graduation year, and optional contact details you choose to enter — plus clips, reels, labels, tags and ratings.
• Activity records. An audit log of actions within a project — who uploaded, edited, exported or shared what, and when — so project owners can see what happened to their material.
• Operational logs. Error and diagnostic records for failed sign-ins, uploads, playback and renders. These are deliberately scrubbed: they never contain your media, access tokens, or shareable links to your files.

We do not collect your location, contacts, browsing history or device identifiers, and we do not use advertising or analytics trackers of any kind.

This product exists to record youth sport, so it will routinely hold footage and photographs of minors. We treat that as the most sensitive material in the system.

• Accounts are for adults. You must be 18 or older to create an account. A child does not have an account; a parent, guardian or coach manages the material on their behalf.
• Only invited people see a child’s footage. Media is private by default. There is no public feed, no discovery, no sharing by default, and nothing is indexed by search engines.
• You are responsible for consent. Before uploading footage of a young person, you must have the right to do so from their parent or guardian, and from anyone else clearly identifiable in it.
• Removal on request. A parent or guardian may contact us to have a child’s footage, photographs and profile deleted, whether or not they hold an account.

• Media is held in Google Cloud Storage in the United States (us-central1) with public access blocked at the storage layer. There is no publicly readable path.
• Every read and write is checked against membership of the specific project the file belongs to. Being signed in is not enough; an account with no membership can reach nothing.
• Access within a project is limited by role. Viewers see only finished reels that have been explicitly shared with them — not raw footage, not the music library, not the member list.
• Traffic is encrypted in transit, and data is encrypted at rest.
• Sessions use signed, HTTP-only cookies that are verified on every request, and are checked against revocation so removing someone takes effect immediately.

No system is perfectly secure, and we will not pretend otherwise. If we ever become aware of a breach affecting your data, we will tell you promptly and directly.

We use a small number of infrastructure providers, who process data on our instructions and do not use it for their own purposes:

• Google Cloud / Firebase — authentication, database, and media storage.
• Vercel — application hosting.

That is the complete list. We do not sell your data, share it with advertisers or data brokers, or transfer it to anyone else, except where we are legally required to.

Your content stays until you delete it or ask us to. Deleting a project removes its media, clips and reels. Operational logs are kept briefly for diagnostics and then discarded. If you close your account, we delete your account information and the content you own.

You can, at any time:

• Access and correct your profile and player information.
• Delete individual videos, clips, reels or players.
• Leave a project you were invited to.
• Request a copy of your data, or ask us to delete your account entirely, by emailing support@axiomops.io.

Depending on where you live, you may have additional rights over your personal data. We will honour those requests regardless of where you are.

If we change how we handle data, we will update this page and change the date at the top. If a change is significant, we will contact account holders directly rather than relying on you to re-read this.

Questions, requests or concerns: support@axiomops.io