Last updated: June 15, 2026
This Privacy Policy describes how PushIt Replays Ltd. and its affiliates ("PushIt", "we", "us" or "our") collect, use, store and otherwise process personal data in connection with our products and services, including our mobile application, web dashboard, website and related services (collectively, the "Services").
Contact
- Email: legal@pushitreplays.com
- General contact: contact@pushitreplays.com
1. Scope and roles (venues/clients vs. PushIt)
PushIt provides a video capture and highlights system used at sports venues and facilities operated by our customers (e.g., clubs and facilities) (each, a "Venue Client"). Certain Venue Clients may also choose to purchase and enable optional add-on features, including a video-on-demand or continuous recording feature for selected courts, fields, cameras or devices ("VOD").
Depending on the context, personal data may be processed by different parties:
- Venue video content. Video and related metadata captured at a venue may be controlled by the Venue Client, including decisions about who may access the content (for example, whether content is available publicly to App users or restricted). Certain Venue Clients may elect to enable VOD, in which case selected cameras or devices may record on a continuous basis, including up to 24/7, subject to the Venue Client's configuration and the applicable service setup. PushIt generally processes such content to provide the Services and in accordance with instructions and settings configured by the Venue Client.
- Account and service operation data. PushIt processes data needed to create and operate user accounts and to operate, secure, support and improve the Services.
- For account registration and app access, we present our Terms of Use and this Privacy Policy in-app and request users to acknowledge them as part of the sign-up and/or sign-in flow. PushIt acts as a controller for account and service operation data (such as user registration details, authentication data, and in-app preferences), as described in this Privacy Policy.
2. Personal data we collect
We may collect the following categories of personal data (depending on how you use the Services):
2.1 Account and contact information
- Name (if provided), email address, phone number
- Account identifiers and login/authentication data
2.2 Video content and related metadata
- Video clips and images captured at venues and created through the Services
- Metadata such as date/time, venue/site identifiers, camera identifiers, session identifiers, and other technical and operational metadata
2.3 Usage, device and log data
- Device identifiers (e.g., Device ID), IP address, browser type, OS, app version
- Usage activity within the Services (e.g., page views, taps/clicks, navigation flows)
- Security and operational logs (e.g., access logs, error logs, audit logs)
2.4 Payments and transactions (if applicable)
If payments are processed through third-party payment providers, we may receive limited transaction-related information (such as payment status and transaction identifiers). We do not store full payment card details.
2.5 Information you provide about others
If you upload or otherwise provide content that includes other individuals (for example, a clip that depicts other players), you are responsible for ensuring that you have the right to create, provide, or share such content and that any required notices and consents have been obtained, as applicable.
3. How we use personal data
We use personal data for the following purposes:
- Provide and operate the Services (including capturing, processing, storing, streaming and making available video content and highlights)
- Account management and customer support (including responding to requests and providing technical support)
- Security and fraud prevention (including monitoring, detecting and preventing abuse, violations and security incidents)
- Analytics and service improvement (including performance monitoring, debugging, product improvement and development)
- Development, training and evaluation of internal models and algorithms to improve the Services (for example, improving highlight detection and product performance), while implementing reasonable measures to minimize the use of direct identifiers and without performing biometric processing for the purpose of identifying individuals
- Compliance with law and enforcement of our policies, including responding to legal requests and protecting our rights
4. PUBLIC/PRIVATE sharing settings and visibility of content
Video content captured at a venue may be made available to end users through the App. Visibility of content (for example, whether it is accessible publicly to App users or restricted) depends on settings configured by the Venue Client and/or the applicable Service configuration. If you have concerns about a specific clip, or wish to request access restriction or deletion, you may contact us at legal@pushitreplays.com and we will route the request as appropriate, including to the Venue Client where applicable.
5. Legal bases (where applicable)
Where required under applicable law (such as the EU/UK GDPR), we rely on one or more of the following legal bases:
- Performance of a contract (to provide the Services)
- Legitimate interests (such as security, fraud prevention and improving the Services)
- Compliance with legal obligations
- Consent, where required or collected for specific purposes
6. With whom we share personal data
We do not sell personal data. We may share personal data with:
- Venue Clients (venue operators/clubs) who manage the venues where content is captured, for purposes of operating and administering the Services and managing content access settings
- Service providers / sub-processors that help us operate the Services (such as cloud hosting providers including AWS or equivalent, analytics providers, customer support tools, monitoring and security providers)
- Affiliates within the PushIt group, as needed to provide and support the Services
- Professional advisors (e.g., legal, auditors) and potential transaction counterparties (e.g., in a merger/acquisition), subject to confidentiality and appropriate safeguards
- Authorities where disclosure is required by law, court order, or is reasonably necessary to protect rights, safety and security
7. International transfers
We may process and store personal data in countries other than your country of residence. Our primary cloud hosting environment is in the European Union (AWS EU - Frankfurt). Where required by applicable law, we implement appropriate safeguards for cross-border transfers (such as contractual protections and security measures). We may change hosting locations from time to time, subject to applicable law and appropriate safeguards.
8. Data security
We implement reasonable administrative, technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. However, no security measure is perfect, and we cannot guarantee absolute security.
9. Data retention
We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes and enforce agreements. In general:
- Account data is retained while the account is active and for a reasonable period thereafter, unless deletion is requested and permitted by law.
- Video content is retained according to the applicable service configuration and/or agreement with the Venue Client, and may be deleted or restricted upon request where applicable. Where a Venue Client has enabled VOD, certain recordings may be retained for a limited rolling period, typically up to 72 hours, and may then be overwritten or deleted automatically unless longer retention is required by law or reasonably necessary for security or legal purposes.
- Security and operational logs are retained for a limited period reasonably necessary for security and diagnostics, typically up to 90 days unless configured otherwise.
10. Your rights
Depending on your jurisdiction and subject to legal limitations, you may have rights to request access, correction, deletion, restriction or objection to processing, and data portability. To exercise rights, contact us at legal@pushitreplays.com. We may request additional information to verify your identity.
If you have a complaint regarding our processing of personal data, please contact us first at legal@pushitreplays.com. You may also have the right to contact your local data protection authority.
11. Children
The Services are not directed to children. Venue Clients are responsible for ensuring that appropriate notices and consents are provided/obtained at their facilities, including where minors may be present, as required by applicable law. This responsibility includes any optional VOD or continuous-recording feature enabled by a Venue Client.
12. Biometric processing / facial recognition
PushIt does not perform biometric processing (including facial recognition) for the purpose of identifying individuals, and does not create or maintain biometric identifiers, unless expressly agreed in writing and any required consents are obtained.
13. Third-party links and analytics
Our Services may include links to third-party websites or services. Their privacy practices are governed by their own policies. We may use third-party analytics providers (such as Mixpanel, PostHog, G4A, Firebase) to help us understand usage and improve the Services, subject to their respective privacy policies.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The most current version will be posted on our website with the "Last updated" date revised. If changes are material, we may provide additional notice (e.g., via email or in-product notice). Continued use of the Services after an effective date may constitute acceptance where permitted by law. In some cases, including where a Venue Client enables a new feature such as VOD, additional venue-specific notices or acknowledgments may also be provided.