Data Privacy Agreement

1. Introduction and Scope

This Data Privacy Agreement ("Agreement") is entered into by and between Playbook Tech, Inc., a corporation organized and existing under applicable law, operating under the trade names FirstDown PlayBook and FastBreak PlayBook (collectively, "Company," "we," "us," or "our"), and the individual user, subscriber, or business entity ("User," "you," or "your") accessing or using any products, platforms, services, or digital properties operated by the Company.

This Agreement governs the collection, use, storage, sharing, transfer, and disposal of personal data and other information provided to or collected by the Company in connection with its services, including but not limited to:

• FirstDown PlayBook - a digital football playbook and coaching platform
• FastBreak PlayBook - a digital basketball playbook and coaching platform
• Flag Football Source - a flag football news and information website
• Any associated websites, mobile applications, APIs, or related digital services

By accessing or using any Company service, you acknowledge that you have read, understood, and agree to be bound by this Agreement. If you do not agree, you must discontinue use of all Company services immediately.

2. Definitions

For purposes of this Agreement, the following terms shall have the meanings set forth below:

"Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, IP address, device identifiers, location data, payment information, and usage data.

"Sensitive Personal Data" means Personal Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, sex life, or sexual orientation.

"Processing" means any operation performed on Personal Data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.

"Data Controller" refers to Playbook Tech, Inc. as the entity that determines the purposes and means of Processing Personal Data.

"Data Processor" refers to any third party that processes Personal Data on behalf of the Company pursuant to a written agreement.

"User Content" means any playbooks, diagrams, videos, notes, rosters, or other materials uploaded, created, or transmitted by User through Company services.

3. Information We Collect

3.1 Information You Provide Directly

We collect information you provide when you register for an account, subscribe to a service, communicate with us, or otherwise interact with our platforms, including:

• Full name and contact details (email address, phone number, mailing address)
• Account credentials (username and encrypted password)
• Billing and payment information (processed through PCI-compliant third-party processors)
• Coaching profile information (sport, team name, level of play, affiliated organization)
• User Content such as plays, playbooks, and instructional materials
• Communications and support requests submitted to the Company

3.2 Information Collected Automatically

When you use our services, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the platform
• Clickstream data and interaction logs
• Cookies, pixel tags, and similar tracking technologies (see Section 8)

3.3 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Social login providers (e.g., Google, Apple) if you choose to authenticate through them
• Payment processors for transaction verification and fraud prevention
• Analytics and advertising partners, subject to their respective privacy policies

4. How We Use Your Information

We process Personal Data for the following purposes and legal bases:

Performance of Contract: To create and manage your account, process payments, deliver subscribed services, and respond to your requests.

Legitimate Interests: To improve our products and services, conduct analytics, prevent fraud, ensure platform security, and communicate with users about relevant updates or features.

Legal Obligation: To comply with applicable laws, regulations, court orders, and government requests.

Consent: To send marketing communications, deploy non-essential cookies, or conduct optional surveys where your explicit consent is required and obtained.

We do not sell, rent, or auction Personal Data to third parties for their independent marketing purposes.

5. Data Sharing and Disclosure

5.1 Service Providers and Data Processors

We may share Personal Data with trusted third-party service providers acting as Data Processors on our behalf, including cloud hosting providers, payment processors, email service providers, analytics vendors, and customer support platforms. All Data Processors are contractually required to process data solely on Company instructions, maintain appropriate security measures, and comply with applicable data protection laws.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, Personal Data may be transferred to a successor entity. We will provide notice prior to any such transfer and indicate if the Privacy Policy of the successor entity will govern thereafter.

5.3 Legal and Safety Disclosures

We may disclose Personal Data when required by law or in good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request
• Protect the rights, property, or safety of the Company, its users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service or other applicable agreements

5.4 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify any individual for research, analytics, marketing, or product development purposes.

6. Data Retention

We retain Personal Data for as long as necessary to fulfill the purposes for which it was collected, to provide services under an active account, to comply with legal obligations, to resolve disputes, or to enforce our agreements.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your Personal Data:

• Right of Access — Request a copy of Personal Data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete data
• Right to Erasure — Request deletion of Personal Data, subject to applicable legal retention obligations
• Right to Restriction — Request that we limit the processing of your data in certain circumstances
• Right to Data Portability — Receive your Personal Data in a structured, machine-readable format
• Right to Object — Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent — Where processing is based on consent, withdraw it at any time without affecting prior lawful processing
• Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights

To exercise any of the above rights, please submit a request to: privacy@playbooktech.com. We will respond to verified requests within thirty (30) days, or as otherwise required by applicable law. We may request additional information to verify your identity before processing a request.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our platforms, understand usage patterns, personalize user experiences, and deliver relevant content. Cookies may be:

• Strictly Necessary — Required for core platform functionality; cannot be disabled
• Performance and Analytics — Used to analyze how users interact with our services
• Functional — Used to remember your preferences and settings
• Marketing and Advertising — Used to deliver relevant promotions with your consent

You may manage cookie preferences through your browser settings or, where applicable, our cookie consent management tool. Note that disabling certain cookies may impair platform functionality.

9. Data Security

The Company employs commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL)
• Databases are deployed within AWS Virtual Private Clouds (VPCs) and protected by security group rules that restrict access to authorized application infrastructure and personnel.
• Role-based access controls and least-privilege principles
• Regular security assessments and vulnerability management
• Employee training on data protection and information security
• Incident response procedures for detecting, investigating, and reporting breaches

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your Personal Data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

10. Children's Privacy

Our services are not directed to or intended for children under the age of thirteen (13), or such higher age as required by applicable law (e.g., sixteen (16) under certain international regulations). We do not knowingly collect Personal Data from children below such age threshold.

If you are a parent or guardian and believe your child has provided us with Personal Data without your consent, please contact us immediately. Upon verification, we will take prompt steps to delete such information from our systems.

School or youth athletic programs using our platforms represent and warrant that they have obtained all required parental or guardian consents for the collection and use of any data pertaining to minors.

11. International Data Transfers

Playbook Tech, Inc. is based in the United States. If you are located outside the United States, your Personal Data may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

Where such transfers involve Personal Data from the European Economic Area (EEA), United Kingdom, or Switzerland to countries not recognized as providing an adequate level of data protection, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms.

By using our services, you acknowledge that your information may be transferred to and processed in the United States in accordance with this Agreement.

12. California Privacy Rights (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including:

• The right to know what Personal Information we collect, use, share, or sell
• The right to delete Personal Information we have collected from you
• The right to correct inaccurate Personal Information
• The right to opt-out of the sale or sharing of Personal Information
• The right to limit the use of Sensitive Personal Information
• The right to non-discrimination for exercising these rights

To submit a California privacy rights request, contact us at: info@playbooktech.com or call our toll-free privacy request line. We will verify your identity and respond within forty-five (45) days, with an optional single thirty (30)-day extension where reasonably necessary.

We do not sell Personal Information as traditionally defined under the CCPA. If our practices change, we will update this Agreement and provide the required opt-out mechanism.

13. Third-Party Links and Integrations

Our platforms may contain links to third-party websites, applications, or integrations (such as video hosting services, statistical tools, or social media platforms). This Agreement does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services before providing Personal Data to them. The Company is not responsible for the privacy practices of third-party services.

14. Changes to This Agreement

We reserve the right to update or modify this Agreement at any time. If we make material changes, we will notify you by:

• Posting the revised Agreement on our websites with an updated effective date
• Sending an email notification to the address associated with your account
• Displaying a prominent notice within our platforms

Your continued use of our services following the effective date of any material changes constitutes your acceptance of the updated Agreement. If you do not agree to the revised Agreement, you must discontinue use of our services and may request account deletion.

15. Contact Information

For privacy-related inquiries, rights requests, or to report a concern, please contact:

Playbook Tech, Inc.
DBA FirstDown PlayBook | DBA FastBreak PlayBook
FirstDown PlayBook Email: firstdown@playbooktech.com
FastBreak PlayBook Email: fastbreak@playbooktech.com
Mailing Address: 141 Twilight Blvd. Sharps Chapel, TN 37866
FirstDown PlayBook Phone: (512) 814-6158
FastBreak PlayBook Phone: (512) 540-3432

We are committed to working with you to resolve any privacy concerns promptly and transparently.