Satu Sport Privacy Policy
Last Updated: September 15, 2026
Welcome to Satu Sport, operated by PT. Satu Visual Indonesia, whose registered office is located at Ruko Pelangi Blok D No. 20, Cengkareng, Jakarta Barat 11730, Indonesia. Your privacy is our priority. This Privacy Policy explains how we collect, use, and protect your information when you interact with our website and the Satu Sport ecosystem, including the Director Hub, Glass Court Panel, Recap Panel, mobile applications, and the Satu Sport dashboard for venue operators.
1. Information We Collect
We collect information to provide the best possible sport experience for you:
Account Information: Name, email address, phone number, and profile data when you register via our app or website.
Sports Activity Data: Match video recordings (via our camera system), match scores, player statistics, and highlights generated through the Recap Panel.
Device & Technical Data: IP address, device type, and your interactions with the Director Hub or Glass Court Panel on-court.
Location Information: The location of the padel court where you are playing to synchronize the system within the club area.
YouTube Channel Data (Venue Operators Only): When a venue operator chooses to connect their YouTube channel to enable 1-click live streaming, we access, via Google OAuth with the `youtube.force-ssl` scope, the following:
YouTube Channel ID
YouTube Channel Title
YouTube Channel Thumbnail URL
OAuth Refresh Token (stored in a backend-only Firestore collection with strict access control)
The refresh token is used exclusively by our backend Cloud Functions to create, manage, and terminate live broadcasts on the venue's own YouTube channel during matches. It is never exposed to clients or any third party.
2. How We Use Your Information
Your data is used to:
Ecosystem Operations: Display real-time scores on the Glass Court Panel and manage match flow via the Director Hub.
Highlights & Content: Generate "recap" videos of your matches for viewing and sharing through the Recap Panel.
AI Analytics: Developing analysis features (such as ball speed or shot types) to improve your game quality. Note: this analysis is performed on match video data captured by our on-court camera system, NOT on Google user data.
Communication: Sending system updates, transaction receipts, or promotional information (with your consent).
YouTube Live Broadcasting (Venue Operators Only): For venue operators who have connected their YouTube channel, we use the OAuth refresh token to:
Create a new live broadcast on the venue's channel each time a match starts
Bind the broadcast to a fresh live stream and provide the RTMP credentials to the on-site Magewell hardware encoder via the Director Hub
Transition the broadcast to LIVE state when the stream begins
End the broadcast and finalize the video-on-demand (VOD) when the match ends
Automatically delete broadcasts older than 3 days from the venue's channel to keep the channel clean
We do NOT:
Access, read, modify, or delete videos other than those we created for live streaming
Access channel analytics, subscriber data, or comments
Upload arbitrary content to your channel
Share the refresh token with any third party
Use the data for advertising or profiling
Use the data to train or improve AI/ML models
3. Sharing with Third Parties
Satu Sport does not sell your personal data. We only share data with:
Padel Club Management: For administrative needs regarding court bookings and tournaments.
Cloud Service Providers: For video storage and databases:
Firebase / Google Cloud Platform (asia-southeast2 region, Jakarta) — all backend data storage, authentication, hosting
Cloudflare — CDN and edge caching for public endpoints only (no personal data)
Legal Obligations: If required by law or official authorities under Indonesian Law (UU PDP).
YouTube Channel Data (Venue Operators Only): We do NOT share YouTube-derived data (channel info, refresh token) with any third party. This data is stored solely within our Firebase (Google Cloud) infrastructure and used exclusively for the live streaming functionality described in Section 2.
4. Data Security
We implement technical and organizational security standards to protect your data from unauthorized access. Your match videos are stored on secure servers with encryption applied to sensitive data.
Security controls:
All API traffic uses HTTPS/TLS encryption (in transit)
Firestore native encryption at rest (Google-managed keys)
Firebase App Check enforced on all client-facing endpoints — prevents unauthorized API access from non-legitimate clients
Access logs auditable for sensitive collections
YouTube OAuth Credential Security (Venue Operators Only):
OAuth refresh tokens are stored in a dedicated Firestore collection (`_youtube_credentials`) with catch-all deny rules — accessible only by our backend Cloud Functions
The refresh token is never exposed to any client-side code (dashboard, mobile app, touchpanel)
Refresh token is only used server-side to obtain short-lived access tokens for YouTube API calls
Access to the credential collection is logged and auditable
5. Data Retention
Different data types are retained for different durations:
Data Type Retention Period
Account information (email, profile) While the account is active
Match history and statistics While the account is active
Match video highlights (Gok's clips) 3 days from capture
Match screenshots 7 days from capture
Live broadcast video-on-demand (VOD) at YouTube channel 3 days from stream end
YouTube OAuth refresh token Until the venue operator disconnects the integration OR revokes access via myaccount.google.com/permissions
Request logs (for security/debugging) 30 days
Analytics data (aggregated, anonymized) Indefinite (no personal identifiers)
Upon disconnection or account deletion, all associated personal data is deleted within 30 days, except where retention is legally required.
6. Your Rights as a Data Subject
In accordance with Indonesian Law (UU PDP), you have the right to:
Access and obtain a copy of your personal data
Update or correct inaccurate data
Withdraw consent for data processing
Request the deletion of data ("Right to be Forgotten") after the retention period ends or upon your request
For YouTube Integration (Venue Operators):
Disconnect the YouTube integration at any time via the Satu Sport dashboard (this deletes the stored refresh token immediately)
Revoke Satu Sport's access at any time via https://myaccount.google.com/permissions
Request permanent deletion of all associated data by emailing our support address below
Procedure to Request Data Deletion
Send an email to support@satusport.co.id with the subject line: `Data Deletion Request — [your registered email address]`
In the email body, include:
Your registered account email
Specific data type to delete (or `all` for complete account deletion)
Optional reason for the request
We will respond within 7 business days to confirm your request
Deletion will be executed within 30 days after confirmation, unless retention is required by applicable law
For YouTube-specific data, you can also self-service:
Immediate: click "Disconnect YouTube" in your Satu Sport dashboard → refresh token deleted instantly from our systems
Full revoke: visit https://myaccount.google.com/permissions → find "Satu Sport" → Remove Access → removes SatuSport's access from Google side
7. YouTube API Services Integration
Satu Sport uses YouTube API Services to provide 1-click live streaming for venue operators. Specifically:
API Services used: YouTube Live Streaming API (`liveBroadcasts`, `liveStreams`, `bind`, `transitions`), YouTube Data API v3 (`videos.update` for embed setting)
OAuth Scope requested: `https://www.googleapis.com/auth/youtube.force-ssl`
Purpose: To automatically create, manage, and terminate live broadcasts on the venue operator's YouTube channel during padel matches
By connecting a YouTube channel to Satu Sport, the venue operator:
Grants Satu Sport permission to perform live-streaming operations on their behalf via the `youtube.force-ssl` scope
Understands that Satu Sport will store a refresh token to enable this automation
Retains full control and can disconnect at any time (see Section 6)
For questions specific to our YouTube integration, contact us at the address in Section 11.
8. Google User Data — Limited Use Disclosure
SatuSport's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, Satu Sport commits that:
We do not allow humans to read Google user data unless we have obtained the user's explicit affirmative consent for specific messages, or as necessary for security purposes (e.g., investigating abuse), or to comply with applicable law, or for internal operations where the data has been aggregated and anonymized
We do not use Google user data for serving advertisements
We do not sell Google user data
We do not transfer Google user data to third parties for advertising, credit-worthiness, lending, retargeting, or any purpose outside providing our user-facing live streaming service
We do not use Google user data (including YouTube channel information and OAuth tokens) to develop, improve, or train generalized or non-personalized AI or ML models. All AI/ML analysis features we develop (such as ball speed or shot type detection) are trained exclusively on match video data captured by our on-court camera system, NOT on Google user data.
Google user data (YouTube channel info, refresh token) is used only for the user-facing live streaming functionality described in this policy
9. Video & Media Policy
As part of the Satu Sport service, on-court cameras will record play activity. By using a court equipped with the Satu Sport system, you understand that:
Video is processed automatically to generate highlights
You have control over your recap videos through the Satu Sport application
For YouTube live broadcasts published to the venue's own channel, playback settings (privacy, embed availability) follow the venue's YouTube channel configuration. Videos created by Satu Sport are marked as "Unlisted" by default and are auto-deleted after 3 days unless the venue operator manually intervenes.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via:
In-app notification, and/or
Email to your registered address, and/or
Announcement on satusport.id
The "Last Updated" date at the top of this policy reflects the current version. Please review this policy periodically to stay informed about how we protect your information.
11. Contact Us
If you have questions regarding this policy or wish to exercise your data rights, please contact:
PT. Satu Visual Indonesia
User Privacy & Support: support@satusport.co.id
Legal & Compliance: admin.finance@satuvisual.co.id
Address: Taman Palem Lestari, Ruko Pelangi Blok D No. 20, Cengkareng, Jakarta Barat 11730, Indonesia
Website: satusport.id
For questions specific to YouTube data handling under Google's API Services User Data Policy, please contact us at the same addresses above.